GetGDPRScan
Sign in

AI-Generated GDPR Report

See what a full GDPR report looks like

This example report shows how GetGDPRScan identifies potential GDPR risks, explains issues in plain language, and provides practical recommendations.

Scan your own websiteView pricing

No signup required · Results in ~30 seconds

Sanitized example report
example-store.comExample report
72/ 100
Medium GDPR risk

Tracking and consent mechanisms require improvements before this website can be considered lower risk.

Scanned: example-store.com · 3 high priority issues

Priority actions

  • highStop cookies from firing before consent is givenThe scan detected cookies being set on the visitor's device before the consent banner was interacted with. Session and language cookies are exempt, but at least one non-essential cookie was found firing immediately on page load.
  • highAdd right to complain to a data protection authorityThe privacy policy does not mention the user's right to file a complaint with a supervisory authority. This is a mandatory disclosure under Art. 13(2)(d) GDPR and was not found in the reviewed policy text.

Privacy Policy

  • ✓Privacy policy exists and is accessible
  • ✓Data controller identity and contact details disclosed
  • ✓Processing purposes and legal basis stated (Art. 6 GDPR)
  • ✓Data recipients identified
  • ✓Data retention periods stated
  • ⚠Data subject rights covered (Art. 15-21 GDPR)
  • ⚠Right to withdraw consent mentioned

+ Cookie & consent, tracking, data collection, technical security sections

Get this report for your website — automatically, every month.

Solo plan · €9/mo · no commitment

Scan your website free

Priority actions

These are the most important issues detected during the scan.

Add right to complain to a data protection authority

high

The privacy policy does not mention the user's right to file a complaint with a supervisory authority. This is a mandatory disclosure under Art. 13(2)(d) GDPR and was not found in the reviewed policy text.

⏱Easy (5 minutes)📈Medium impact👤Website owner📚Art. 13(2)(d) + Art. 77 GDPR

Stop cookies from firing before consent is given

high

The scan detected cookies being set on the visitor's device before the consent banner was interacted with. Session and language cookies are exempt, but at least one non-essential cookie was found firing immediately on page load.

⏱Advanced (1–2 hours)📈High impact👤Developer📚Art. 6(1)(a) GDPR · ePrivacy Directive Art. 5(3)

Remove implied consent wording from privacy policy

medium

The policy contains language stating that continued use of the website constitutes acceptance of its terms. This form of implied consent is invalid under GDPR Recital 32 and must be removed.

⏱Easy (5 minutes)📈Medium impact👤Website owner📚Art. 7 GDPR · Recital 32 · EDPB Guidelines 05/2020

Explicitly list all individual data subject rights

medium

The privacy policy references user rights only in general terms. A full enumeration of GDPR rights (access, rectification, erasure, portability, restriction, objection) is missing or incomplete.

⏱Easy (15 minutes)📈High impact👤Website owner📚Art. 13(2)(b) + Art. 15–21 GDPR

Consider switching to a privacy-friendly analytics tool

low

A third-party behavioral analytics script was detected. Switching to a cookieless, privacy-friendly tool like Plausible or self-hosted Matomo would eliminate the need for analytics consent entirely.

⏱Medium (30 minutes)📈Low impact👤Developer📚Art. 5(1)(c) GDPR (data minimisation principle)

Privacy policy analysis

GetGDPRScan reviews publicly accessible privacy-related content for common GDPR risk indicators.

  • ✓Privacy policy exists and is accessible
  • ✓Data controller identity and contact details disclosed
  • ✓Processing purposes and legal basis stated (Art. 6 GDPR)
  • ✓Data recipients identified
  • ✓Data retention periods stated
  • ⚠Data subject rights covered (Art. 15-21 GDPR)
  • ⚠Right to withdraw consent mentioned
  • ✗Right to lodge a complaint with a supervisory authority
  • ✗Implied consent language
  • ⚠International data transfers and safeguards disclosed

What the report includes

Every report follows the same structure as the preview below, with findings tailored to your website.

Plain-language explanations

Every issue is explained in simple language without legal jargon.

Practical recommendations

Get actionable suggestions and fix recommendations for detected issues.

PDF export

Download and share your report as a clean PDF document.

Sample report

See exactly what you get

Click any image to zoom in

Download sample report (PDF)

Disclaimer: GetGDPRScan provides automated GDPR risk analysis and educational information only. It does not provide legal advice and does not guarantee GDPR compliance. Always consult a qualified legal professional for advice specific to your situation.

Check your own website for GDPR risks

Run an automated scan and get a detailed GDPR compliance report in seconds.

Run free scan