/ 01
Are we DSAR-ready?
30-day clock posture, evidence trail, redaction practice, the 4 most-common ICO complaints.
/ Snap suite · GDPR · Data protection · Free
GDPRSnap — DSAR safe + ICO ready.
GDPRSnap is the free UK decision-support app for the GDPR / Data Protection Act 2018 obligations every SME carries. Get a 30-day DSAR clock, ICO breach-readiness check, and lawful-basis mapping — built for operators who handle personal data but cannot afford a full-time DPO.
FREE
DSAR clock + ICO exposure check
·
Built by ATTOH Digital · UK SME-focused
·
Built by ATTOH Digital · UK SME-focused
/ What this app answers
Three questions, one app.
Every Snap is scoped to one operator decision. GDPRSnap answers three sub-questions that, together, give you the call you needed to make on gdpr · data protection this week.
/ 02
Are we breach-notification ready?
72-hour clock posture, contact tree, the categorisation that decides whether to notify.
/ 03
What is our lawful-basis map?
Each processing activity mapped to lawful basis + consent posture.
/ Who this is for
Built for the operators who actually have to decide.
UK SMEs (10-250 staff) handling personal data — marketing lists, employee records, customer accounts — who do not have a full-time DPO but carry the ICO obligation regardless.
/ How it works · 4 steps
From question to answer in under 10 minutes.
-
01
Map the processing
Tell us what personal data you hold and what you do with it.
-
02
GDPRSnap runs the rules
DSAR readiness, breach posture, lawful-basis fit, consent decay.
-
03
Get the posture report
Where you are exposed, where you are over-collecting, what to fix this week.
-
04
Fix or escalate
Inline templates for the owner-fixable; DPO escalation pack for material gaps.
/ FAQ · before you ask
What people ask before they use GDPRSnap.
01 Does the report satisfy the ICO? +
ICO audits look at evidence trails. GDPRSnap produces the evidence trail you would show — most SMEs cannot produce one on the day a DSAR lands.
02 Is it suitable for charities and CICs? +
Yes — fundraising regulator + Charity Commission interplay is handled in its own track.
03 Will it handle marketing list compliance? +
Yes — PECR (the marketing-specific rules) is treated as a first-class track alongside core GDPR.
04 What about international data flows? +
UK Extension to the EU-US Data Privacy Framework + UK IDTA is live. We surface the third-country flows that need a transfer impact assessment.
/ Pair this Snap
LegalSnap
Pair with LegalSnap for matter triage when a complaint lands.
Open LegalSnap →Ready to ship your own Snap?
GDPRSnap is one of 22 free Snap apps. If your sector is not on the list, we will build one — scoped, shipped, supervised — in 4 to 8 weeks. Same engineering core, same source-freshness CI, your decision priced against the outcome it produces.