Data Protection Readiness Assessment