首页 › Free tools › Digital Project and Data Protection Readiness Assessment
数字项目与数据保护准备度评估
Donors are financing digital ID, social registries, payment systems and e-services at scale, and they expect the systems to be lawful, secure and inclusive. This assessment checks a digital project against GDPR-style data protection principles that most national laws now follow, the UN Universal DPI Safeguards Framework (September 2024), the World Bank Principles on Identification for Sustainable Development and basic cybersecurity practice. It complements our Data Governance Maturity Assessment, which looks at the whole organisation. This is a real readiness tool: each question is drawn from the current official texts listed under "Based on", and Risalat's guideline monitor re-checks those sources every two weeks so the questions follow new editions.
- 评估
- 12分钟
- 免费
- 信息来源核查于2026年10月
适用对象
- Teams running digital ID, social registry, e-services or payment projects
- Ministries of ICT, digital transformation and social protection
- Data protection officers and legal advisers
- Vendors and system integrators on donor-funded digital contracts
- Development partners reviewing digital projects
您将获得
- A readiness score across six areas a lender or regulator will review
- The legal and safeguard gaps in your system design
- Practical steps for privacy by design, security and inclusion
- Links to the official frameworks
- 培养所缺技能的培训项目
本工具的工作原理
- 构建基础
- Regulation (EU) 2016/679 (General Data Protection Regulation); UN Universal DPI Safeguards Framework; Principles on Identification for Sustainable Development
- 评分
- 每个答案的得分为0（未到位）至4（完全到位）。各领域得分为所获分数占所答题目最高分的比例；总分为各领域得分的平均值。等级：起步阶段0–39%，发展阶段40–69%，准备就绪70–100%。
- 局限性
- 结果取决于您输入的信息，未经Risalat核实。本工具不能替代MAPS、PEFA、世界银行或其他正式评估方法，也不能替代独立审查。
- 您的数据
- 您输入的内容仅保存在您的浏览器中，除非您将其保存到免费账户。只有在您打开结果时，我们才会收到您的姓名、电子邮箱和摘要。
- 信息来源核查
- 2026年10月（每月核查）
- 团队或机构
- 注册免费账户后，您可以邀请各部门的同事回答相同的问题。您将获得一个汇总仪表板：按领域和部门显示的得分、同事之间存在分歧之处、优先差距以及行动计划。匿名模式会隐藏姓名，并将回复少于3份的部门合并显示。
Need a verified result? Ask for an independent assessment by Risalat.
培养这些技能的培训项目
内容与本工具所衡量领域相匹配的近期培训项目。您的结果将显示哪些项目最适合您的薄弱环节。
问题
Does GDPR apply to my project outside Europe?
Usually not directly, unless you offer services to people in the EU or monitor them. But many national laws follow the same principles, and donors often expect equivalent protection.
What is digital public infrastructure (DPI)?
Shared digital systems such as digital ID, payments and data exchange that governments and others use to deliver services at scale.
How is this different from the Data Governance Maturity Assessment?
That tool looks at the whole organisation's data governance. This one focuses on a specific digital system or project and the safeguards a lender or regulator will review.
When should a DPIA be done?
Before the design is final and before any personal data is collected, and again when the system changes significantly.
依据
- Regulation (EU) 2016/679 (General Data Protection Regulation) The model for many national data protection laws.
- UN Universal DPI Safeguards Framework UNDP and the UN Office of the Secretary-General's Envoy on Technology, released 24 September 2024.
- Principles on Identification for Sustainable Development World Bank ID4D and endorsing organisations.
- World Bank Environmental and Social Standards Inclusion, stakeholder engagement and grievance requirements apply to digital projects too.
信息来源核查时间：2026年10月。我们每月核查一次官方来源。
This is a self-assessment and training tool, not legal advice or a security audit. Always follow your national data protection and cybersecurity laws and the requirements in your financing agreement.