Privacy Risk Assessment — North Privacy Advisors

Section 01 of 06

About your business

Your report will be personalized based on the information you provide here.

Your name*

Business name*

Work email*

Industry

Business website

Section 02 of 06

Scale & reach

Most privacy laws are triggered by consumer volume thresholds. This determines which laws apply to you.

Annual website visitors / users

Under 50,000Below most state law thresholds

50,000 – 250,000Triggers Texas, Virginia, Colorado and others

250,000 – 1 millionTriggers most active state laws

Over 1 millionFull exposure under all major laws

States where your customers are located (select all that apply)

CaliforniaCCPA/CPRA — most aggressive enforcement

TexasTDPSA — no revenue threshold

FloridaFDBR — applies to large controllers

Virginia or ColoradoVCDPA / CPA — active enforcement, no cure period

Other states with active lawsMT, OR, DE, IA, IN, TN, KY, MD, NH, NE, NJ, MN

National / not tracked by stateYou serve customers across the US without geographic segmentation

Section 03 of 06

Data collection & use

What personal data you collect and how you use it determines your obligations under each state law.

Types of personal data you collect (select all)

Name, email, phone, address Purchase history / transaction data Browsing behavior, click patterns, session data Precise location data

Health, financial, biometric, or demographic dataThese trigger heightened obligations under most laws

Data from users under 18Triggers COPPA and additional state requirements

Do you share or sell personal data to third parties?

No — we don't share data with outside parties

Service providers onlyEmail platforms, analytics, CRM — vendors who process on our behalf

Advertising platformsMeta, Google, TikTok — data shared for ad targeting

We sell data or monetize it directlyData sold to or shared with data brokers for value

Not sure — we haven't fully mapped where our data goes

Section 04 of 06

Technology & tracking

Your tech stack is where most enforcement exposure lives. Regulators test websites for exactly these tools.

Tracking tools on your website (select all)

No third-party tracking Google Analytics (GA4) Meta Pixel / Facebook Ads Google Ads / Tag Manager TikTok Pixel Other remarketing or ad pixels

Cookie consent banner status

No banner

Notice only"We use cookies" — no opt-out mechanism

Accept / Reject optionsUsers can decline, but we haven't verified tracking actually stops

Full CMP implementationTracking only fires after consent — GPC signal honored

Section 05 of 06

Policies & documentation

What you have documented determines how you respond if a regulator or consumer complaint arrives.

Privacy policy status

No privacy policy

Have one — last updated 2+ years agoLikely doesn't reflect current laws or data practices

Generic templateMay not accurately reflect our actual data practices

Custom policy, reviewed within 12 monthsAccurate and current

Data map / inventory

Nothing documented Informal knowledge — nothing written down Partial documentation Complete, current data map exists

Consumer rights process

No process — we wouldn't know how to respond to a deletion request Handle ad hoc — we respond when asked, no formal procedure Documented process in place

Section 06 of 06

Context & urgency

This helps tailor your recommendations to your actual situation.

What triggered this assessment?

General awareness — I know I need to address this A partner, client, or investor asked about our privacy posture We had an incident or near-miss We grew quickly and our practices haven't kept up We're launching something new that touches personal data M&A, fundraising, or due diligence process

What's your preferred next step?

I want to understand the landscape first before committing to anything I'd like a quick call to talk through my specific situation I'm ready for a scoped proposal This is urgent — I need help quickly

Your Privacy Risk Assessment

—

Risk Score

Book a Free Consultation to Review Your Results Explore free resources first →

How exposed isyour business?