← Back to debo.one
Free compliance self-assessment

Know where you stand before the deadline.

Twelve questions per country, pinned to the regulation each one comes from. One honest score, your specific gaps, and a remediation plan — in about four minutes.

EG · enforcement expected 1 Nov 2026SA · fines to SAR 5MQA · fines to QAR 5MTR · fines to TRY 17MUAE · DIFC Reg 10 since Sep 2023
Free tool by DEBO
EGPDPL · Law 151/2020 + Decree 816/2025

Egypt

Twelve questions on Egypt’s PDPL Executive Regulations (Decree 816/2025): PDPC licences and tiered fees, the DPO registry, the 72-hour breach clock and transfer permits — scored ahead of enforcement expected from 1 November 2026.

12 questions · 4 minStart the check →
SAPDPL · Royal Decree M/19, amended M/148

Saudi Arabia

Twelve questions on the Saudi PDPL as SDAIA actually enforces it: National Platform registration, the 2024 Transfer Regulations and SCCs, the 72-hour breach clock, DPO triggers — scored against a regime that issued 48 violation decisions in 2025.

12 questions · 4 minStart the check →
AEFederal PDPL · DIFC Law 5/2020 · ADGM

UAE

Twelve questions across the UAE’s regimes: which one applies to each entity, the pending federal Executive Regulations, DIFC notification and Regulation 10 for AI, and health-data localization under Law 2/2019.

12 questions · 4 minStart the check →
QAPDPPL · Law 13/2016 · QCB rules

Qatar

Twelve questions on Qatar’s PDPPL (Law No. 13 of 2016): consent, transparency, the 72-hour breach window, sensitive-data protections — plus the QCB layer for the financial sector, with prior approval for AI systems.

12 questions · 4 minStart the check →
TRKVKK · Law No. 6698

Turkey

Twelve questions on Turkey’s KVKK (Law No. 6698): VERBIS registration and exemptions, post-2024 standard contracts and their 5-day notification, the 72-hour breach clock, and the 30-day data-subject deadline.

12 questions · 4 minStart the check →