🛡️
PrivacyScan
GDPR, CCPA & Privacy Compliance Checker
Website Scan
Document Scan
Policy Review
Website Privacy Compliance Scan
Scan Results for
0
Passed Checks
0
Warnings
0
Failed Checks
0%
Compliance Score
General Data Protection Regulation (GDPR)
Partial ComplianceCookie Consent Banner
Pass
Medium
Found an active cookie consent mechanism that allows users to manage preferences.
Privacy Policy Accessibility
Pass
High
Privacy policy is easily accessible from the homepage footer.
Data Subject Rights
Fail
High
No clear information provided about how users can exercise their GDPR rights (access, rectification, erasure, etc.).
Recommendation: Add a dedicated section to your privacy policy explaining user rights under GDPR and how to exercise them. Include contact information for data protection requests.
Third-Party Data Sharing
Warning
High
Privacy policy mentions data sharing with third parties but doesn't provide specific details about all processors.
California Consumer Privacy Act (CCPA)
Non-Compliant"Do Not Sell" Link
Fail
High
No "Do Not Sell My Personal Information" link found in the footer or privacy policy.
Recommendation: Add a clear and conspicuous "Do Not Sell My Personal Information" link in the website footer and privacy policy that allows California residents to opt-out of the sale of their personal information.
Notice at Collection
Fail
High
No clear notice at the point of data collection informing California residents of their CCPA rights.
Cookie Usage Analysis
Review NeededCookie Categories
Pass
Medium
Cookie consent banner provides categorization of cookies (necessary, analytics, marketing).
Pre-Consent Tracking
Fail
High
Detected non-essential cookies being set before obtaining user consent.
Recommendation: Implement cookie management that blocks all non-essential cookies until explicit user consent is obtained. Consider using a Consent Management Platform (CMP) that supports GDPR and CCPA requirements.
Detected Cookies
Name | Domain | Type | Duration | Purpose |
---|---|---|---|---|
_ga | .example.com | Analytics | 2 years | Google Analytics tracking |
_gid | .example.com | Analytics | 24 hours | Google Analytics session ID |
fr | .facebook.com | Marketing | 3 months | Facebook tracking for ad targeting |
PHPSESSID | example.com | Necessary | Session | Maintains user session state |
Document Privacy Compliance Scan
📄
Drag & drop documents here or click to browse
Scan Results for
0
Passed Checks
0
Warnings
0
Failed Checks
0%
Compliance Score
GDPR Document Compliance
Partial CompliancePersonal Data Identification
Pass
High
Document contains clear identification of what constitutes personal data.
Lawful Basis Specification
Fail
High
No clear specification of lawful basis for processing personal data (consent, contract, etc.).
Recommendation: Clearly state the lawful basis for processing personal data under GDPR Article 6. For each type of processing, specify whether it's based on consent, contract, legal obligation, etc.
HIPAA Compliance (US Healthcare)
Non-CompliantPHI Identification
Fail
High
Document contains unprotected Protected Health Information (PHI) without proper safeguards.
Recommendation: Remove or properly de-identify PHI according to HIPAA Safe Harbor method. If PHI is necessary, ensure proper access controls and encryption are implemented.
Privacy Policy Review
Policy Analysis Results
0
Covered Requirements
0
Partial Coverage
0
Missing Requirements
0%
Completeness Score
GDPR Policy Requirements
Partial ComplianceData Controller Information
Pass
High
Policy clearly identifies the data controller and contact information.
Lawful Basis for Processing
Fail
High
No clear specification of lawful basis for each type of data processing.
Data Subject Rights
Warning
High
Mentions rights but lacks specific instructions on how to exercise them.
CCPA Policy Requirements
Non-CompliantRight to Opt-Out
Fail
High
No mention of California residents' right to opt-out of sale of personal information.
PrivacyScan is a reliable tool for scanning websites and files to assess privacy compliance with major regulations like GDPR, CCPA, and more. It helps businesses safeguard user data and maintain privacy standards by identifying potential vulnerabilities and ensuring full regulatory adherence.