Runs in your browser · Nothing is sent or stored
How many data subjects do you really hold?
Most organisations count customers when they estimate their DCPMI tier. Many also hold data about people who never signed up: guarantors, next of kin, referees, dependants, and contacts uploaded from users' phones. Each of them is a data subject your privacy notice and request process must reach.
Enter your direct data-subject count to begin.
This is an exposure estimate, not a classification. Whether third-party subjects count toward a DCPMI threshold is for the NDPC and your counsel to decide. Report direct and third-party counts separately.
The same calculation is available in code as estimateDerivedDataSubjects from @tantainnovative/ndpr-toolkit/server, and on the command line as npx ndpr dcpmi. See the DCPMI registration guide.