Skip to main content

Bundles/data-protection

Data Protection Audit

data-protection · v1.1.0 · paid

GDPR and privacy compliance review covering data collection, consent mechanisms, retention policies, and PII handling.

Data Collection & Consent

data-collection-consent · weight 0.32

Consent banner visible on first load with separate toggles
ab-000831
critical
All personal data encrypted at rest
ab-000832
critical
PII separated from identifiers; analytics uses pseudonymous IDs
ab-000833
critical
Each cookie classified (necessary/analytics/marketing) with documented purpose
ab-000834
high
Privacy policy covers all data types, purposes, retention, third-parties, user rights
ab-000835
high
Application collects only necessary data; no PII beyond what's required
ab-000836
high
Each data collection point documents its lawful basis
ab-000837
high

Storage & Retention

storage-retention · weight 0.29

Written retention schedule for each data type; automated deletion confirmed
ab-000838
high
If users under 13 possible: explicit parental consent flow and COPPA compliance
ab-000839
medium
Data transfers outside primary jurisdiction use SCCs, BCRs, or adequacy decisions
ab-000840
medium
All third-party services have Data Processing Agreements; subprocessors documented
ab-000841
medium
No PII in browser storage (localStorage/sessionStorage); encrypted if needed
ab-000842
medium

User Rights & Access

user-rights-access · weight 0.22

Authenticated users can download all personal data in portable format
ab-000843
medium
Users can permanently delete their account and all associated PII
ab-000844
low
Users can edit and correct their profile information
ab-000845
low
Exported data uses standard, non-proprietary format with documented schema
ab-000846
low

Compliance Documentation

compliance-documentation · weight 0.17

Documented incident response plan for data breaches
ab-000847
low
High-risk processing documented with DPIA; mitigation strategies tracked
ab-000848
low
Data flow diagram or register identifies all data types, sources, destinations
ab-000849
info
Analytics configured with IP masking; no user IDs sent without explicit consent
ab-000850
info
Audit of all third-party scripts documents data collection; undisclosed trackers flagged
ab-000851
info
Application respects DNT signal; analytics disabled when DNT header set
ab-000852
info