For each block, answer the three questions and count how many you can honestly answer with yes.
A score of 3/3 does not automatically mean Level 5. If your privacy programme is fully embedded in culture and drives decisions you may be at Level 5. If you are still actively managing and measuring it, Level 4 is more accurate.