Controller self-assessment
How transparent is your service?
Assess your organisation against the ANCR Transparency Performance Indicators and the eight criteria of the ANCR Extension for ISO/IEC TS 27560:2023, with optional modules for AI transparency and age assurance. About fifteen minutes for the core, five to eight minutes for each module.
This is a self-assessment at assurance level 0: you answer, you get a report, and the Transparency Lab reviews submissions privately. It is not a certification, and nothing is published.
Notice, before you start
- Controller
- Global Privacy Rights (Canada), operating Transparency Lab. Controller record
- Purpose
- Transparency Lab review of controller self-assessments. Submissions are reviewed privately and are not published, unless you ask to be listed in the 0PN Directory.
- 0PN Directory (optional)
- If you opt in, and after Lab review, your organisation's name, service address, public contact, primary purpose and legal basis are published in the 0PN Directory as a Level 0, self-declared listing, operated by Global Privacy Rights on its Montreal node. Your answers and scores are not published. To remove a listing, write to info@transparencylab.ca.
- What we collect
- Your organisation's name, the service address, your answers and any evidence links. A contact email only if you choose to give one. No IP address is stored and no cookie is set.
- Lawful basis
- Your consent, given here and evidenced by the receipt number you are shown.
- Where
- Stored on our server in Montreal, Canada.
- How long
- Twelve months from submission, or until you withdraw.
- Withdraw
- At any time with your receipt number, below. Your submission is deleted.
- Contact
- info@transparencylab.ca
- Notice version
- loading
Your results
Submitted under receipt number . Keep it: it is the only way to withdraw, because we do not identify you.
What the ratings and levels mean
Each indicator is rated from +1 to -3. Your headline rating is the weaker of TPI 1 (when your identity and notice appear) and TPI 3 (whether they can be reached without an account or credential).
| +1 | Transparency by default: identity and notice before any personal data is collected. |
|---|---|
| 0 | Dynamic: shown at the time of collection. |
| -1 | Analogue: in legal text only, not in the flow. |
| -2 | Low quality: linked, incomplete or hard to find. |
| -3 | Non-operative: not provided, or only after the fact. |
Assurance levels describe who stands behind the result:
| Level 0 | Self-asserted. You declare it, nobody verifies it, and the result says so. Every self-assessment here is Level 0. |
|---|---|
| Level 1 | Operated transparency, held to a higher standard than self-assertion. A +1 rating with every required element stated makes you Level 1 capable. |
| Level 2 | Verified against an authoritative registry, with receipts that can be notarised. |
| Level 3 | Active monitoring and signalling of the transparency state. |
| Level 4 | Dynamic lawful access: each access request is evaluated live. |
Withdraw a submission
Enter your receipt number. The submission is deleted, and only the fact of the withdrawal is recorded.
Measures: ANCR Transparency Performance Indicator Scheme 1 and the ANCR Extension for ISO/IEC TS 27560:2023, Release 1, both published by the Kantara Initiative ANCR Working Group and free to read at github.com/KantaraInitiative/ancr-wg. Transparency Lab is a Global Privacy Rights lab.