Most GDPR tools quote the €20M maximum. That number tells you nothing. Privacy Risk Calculator estimates your real fine exposure based on actual DPA enforcement decisions — not theoretical limits. 8 questions. No signup. Covers GDPR, UK GDPR, CCPA, and LGPD.

Hey Product Hunt! 👋 I'm part of the team at My Agile Privacy®, a European privacy compliance platform. We built Privacy Risk Calculator because we kept running into the same problem: clients and prospects would ask "what's our GDPR risk?", and every resource we could point them to either quoted the €20M maximum fine (scary, useless) or gave a generic checklist with no numbers attached. Neither helped anyone make a real decision. What Privacy Risk Calculator actually does: It estimates your fine exposure based on how European Data Protection Authorities have actually sanctioned violations — not what the law theoretically allows. The methodology uses EDPB Guidelines 4/2022 for fine calculation, the CMS Law GDPR Enforcement Tracker, and published DPA decisions across Europe. You answer 8 questions about your situation: → Sector and annual turnover → Type of data you process → Tracking tools in use (Meta Pixel, Google Analytics, etc.) → Cookie banner status → Whether you have Art. 28 agreements with vendors And you get a calibrated risk estimate in under 2 minutes. No registration, no email, completely free. It covers GDPR, UK GDPR, CCPA/CPRA, and LGPD — because a single website can be subject to more than one regulation at the same time, and most calculators ignore that. One thing I want to be upfront about: the results are indicative estimates. Real fines depend on the DPA's discretion and case-specific factors. The tool is designed to turn an abstract risk into a concrete starting point — not to replace a qualified privacy professional. Who it's really useful for: Web agencies that need to scope client risk during a discovery call SMEs and startups wondering if their cookie setup is actually a liability Marketers and growth teams using third-party tracking tools without a clear sense of their legal exposure I'd love feedback on: Does the output make sense without a legal background? Any violation types or regulatory contexts we're missing? For agencies: would a portfolio view (multiple sites in one session) be worth building? Thanks for checking it out. Happy to answer any questions about the methodology or the tool. 🙏

Privacy Risk Calculator

GDPR free fine calculator based on real DPA enforcement

GDPR free fine calculator based on real DPA enforcement