GDPR Compliance Checker

It checks 8 surface-level GDPR compliance signals: HTTPS usage, presence of a privacy policy, cookie consent mechanism, contact information, terms of service, GDPR-specific language, absence of major analytics trackers without consent, and absence of social media tracking embeds.

No. This tool performs an automated surface-level check and cannot determine full legal compliance. GDPR compliance involves many factors beyond what can be detected automatically — including data processing agreements, legitimate interest assessments, and internal processes. Always consult a legal professional.

GDPR applies to any organisation that processes personal data of EU/EEA residents, regardless of where the organisation is based. A website in the US that has EU visitors and collects their email addresses must comply.

A failed check indicates a missing compliance signal. Each failure has recommended actions shown above. Address the highest-risk items first: HTTPS (must-have), privacy policy (must-have), cookie consent (required for non-essential cookies), and contact information.

No. Passing all 8 surface checks means your website has the visible signals of compliance. True GDPR compliance requires additional measures including data processing agreements with vendors, privacy impact assessments, data breach procedures, and documented lawful basis for each processing activity.

GDPR covers all personal data processing. The ePrivacy Directive (Cookie Law) specifically covers electronic communications and cookies. Cookie consent is required by ePrivacy, while the broader data processing framework is covered by GDPR. Both apply to EU-facing websites.