Compliance website checks
Website compliance checks identify public signals such as policy links, consent interfaces and contact information. These observations locate omissions for review; they cannot establish a lawful basis or a complete compliance programme. A privacy page may be detected while its substance remains inaccurate. A scanner can also miss relevant information using an unfamiliar label or an inaccessible state.
Trace each finding to the actual processing activity. Identify which technologies store or access information, when they run and what visitors are told before making a choice. Test refusal and withdrawal alongside acceptance. Check operator details against the services actually used and take questions of legal interpretation to an appropriately qualified adviser.
The check pages below describe the exact observable condition, why it matters, practical fixes and the limits of the detector. Open the affected URL and inspect its evidence before making a change. After correction, repeat the scan and verify the result in a browser. The related guide connects these individual checks into a review workflow. Keep deliberate exceptions documented so that a passing automated result is never mistaken for a complete manual assessment.
Checks and fixes
Accessibility Statement Missing: Check Scope and Publish Accurate Information
Review missing accessibility information. Identify the applicable regime, publish evidence-based details, and separate link recognition from actual access.
Analytics Without Cookie Consent: Verify Actual Behaviour and Legal Scope
Review analytics without detected consent tooling. Inspect storage, requests and choices, distinguish consent modes, and avoid verdicts from tag presence.
Contact Information Missing on Website: Identify the Real Operator
Review operator-contact detection. Publish applicable identity and contact details, keep routes working, and distinguish link matches from complete information.
Cookie Banner Missing: Check Whether Consent and a Usable Choice Are Needed
Review a missing cookie banner with observed tracking. Assess actual consent requirements, fresh-state behaviour, unreadable dialogs and the detection window.
Cookie Policy Link Missing: Make the Actual Information Discoverable
Review cookie-policy links. Explain actual technologies, purposes and choices, keep information current, and separate a word match from informed consent.
Cookies Set Before Consent: Verify the Observed Identifier and Timing
Review cookies observed before choice. Verify purpose and exemptions, inspect fresh and saved states, and distinguish name-list evidence from a legal verdict.
Data Protection Officer Contact Missing: Verify the Responsible Route
Review privacy-contact detection. Separate controller and DPO roles, check appointment duties, and publish a working contact route in the actual notice.
LocalStorage Tracking Before Consent: Review Device Access Beyond Cookies
Review tracking identifiers in localStorage and sessionStorage before choice. Assess purpose, gate relevant SDKs, and test other storage outside the detector.
No Reject All Button on Cookie Banner: Provide a Genuine Refusal Route
Review acceptance without a direct refusal option. Apply relevant authority guidance, test rejection, and distinguish initial refusal from later withdrawal.
Pre-Ticked Cookie Consent Boxes: Require an Actual Optional Choice
Remove preselected consent opt-ins. Check actual necessity, saved preferences and hidden panels, then test resulting storage and requests.
Privacy Policy Link Missing: Provide Accurate Accessible Information
Make privacy information clear and accurate. Review identity, purposes and rights, provide notices when needed, and separate link detection from compliance.
Reject button less prominent than Accept: refusal made harder
Review consent-button prominence through measurements and context. Keep refusal usable, and distinguish scanner thresholds from legal standards.
Terms of Service Link Missing: Make the Applicable Contract Information Available
Review a missing terms link. Assess contract and consumer-information duties, publish relevant terms, and separate link recognition from legal sufficiency.
Tracking Requests Before Cookie Consent: Inspect the Actual Transmission
Review pre-choice requests to tracking hosts. Inspect the actual operation and consent state, and distinguish container downloads from event processing.