Digitalizing process assessment approach: An illustration with GDPR Compliance Self-Assessment for SMEs

Due to a lack of resources, small and medium-sized enterprises (SMEs) struggle to identify both privacy requirements and the technical and organizational measures needed to meet them. To support the compliance of SMEs with GDPR, a regulatory technology has been developed based on the digitalization of a GDPR capability assessment approach.

The paper presents the results of its assessment process, measurement framework and assessment model conformity assessment. The paper also discusses the challenges and opportunities offered by the automation of the ISO/IEC 330xx series assessment framework.