GetGDPRScan
Sign in
Example reports

See what a full compliance report looks like

GetGDPRScan runs four kinds of scans: GDPR privacy risk, accessibility (WCAG 2.1 AA), website security, and EU AI Act readiness. Pick a module below to see a real example of that report.

Scan your website freeView pricing

No signup required · Results in ~30 seconds

Sanitized example report
example-store.comExample report
72/ 100
Medium GDPR risk

Tracking and consent mechanisms require improvements before this website can be considered lower risk.

Scanned: example-store.com · 3 high priority issues

Priority actions

  • highAdd right to complain to a data protection authorityThe privacy policy does not mention the user's right to file a complaint with a supervisory authority. This is a mandatory disclosure under Art. 13(2)(d) GDPR and was not found in the reviewed policy text.
  • highStop cookies from firing before consent is givenThe scan detected cookies being set on the visitor's device before the consent banner was interacted with. Session and language cookies are exempt, but at least one non-essential cookie was found firing immediately on page load.

Privacy Policy

  • ✓Privacy policy exists and is accessible
  • ✓Data controller identity and contact details disclosed
  • ✓Processing purposes and legal basis stated (Art. 6 GDPR)
  • ✓Data recipients identified
  • ✓Data retention periods stated
  • ⚠Data subject rights covered (Art. 15-21 GDPR)
  • ⚠Right to withdraw consent mentioned

+ Cookie & consent, tracking, data collection, technical security sections

Get this report for your website, automatically, every month.

Solo plan · €9/mo · no commitment

Scan your website free

Priority actions

These are the most important GDPR issues detected during the scan.

Add right to complain to a data protection authority

high

The privacy policy does not mention the user's right to file a complaint with a supervisory authority. This is a mandatory disclosure under Art. 13(2)(d) GDPR and was not found in the reviewed policy text.

⏱Easy (5 minutes)📈Medium impact👤Website owner📚Art. 13(2)(d) + Art. 77 GDPR

Stop cookies from firing before consent is given

high

The scan detected cookies being set on the visitor's device before the consent banner was interacted with. Session and language cookies are exempt, but at least one non-essential cookie was found firing immediately on page load.

⏱Advanced (1–2 hours)📈High impact👤Developer📚Art. 6(1)(a) GDPR · ePrivacy Directive Art. 5(3)

Remove implied consent wording from privacy policy

medium

The policy contains language stating that continued use of the website constitutes acceptance of its terms. This form of implied consent is invalid under GDPR Recital 32 and must be removed.

⏱Easy (5 minutes)📈Medium impact👤Website owner📚Art. 7 GDPR · Recital 32 · EDPB Guidelines 05/2020

Explicitly list all individual data subject rights

medium

The privacy policy references user rights only in general terms. A full enumeration of GDPR rights (access, rectification, erasure, portability, restriction, objection) is missing or incomplete.

⏱Easy (15 minutes)📈High impact👤Website owner📚Art. 13(2)(b) + Art. 15–21 GDPR

Consider switching to a privacy-friendly analytics tool

low

A third-party behavioral analytics script was detected. Switching to a cookieless, privacy-friendly tool like Plausible or self-hosted Matomo would eliminate the need for analytics consent entirely.

⏱Medium (30 minutes)📈Low impact👤Developer📚Art. 5(1)(c) GDPR (data minimisation principle)

Privacy policy analysis

GetGDPRScan checks publicly visible privacy content for common GDPR risk indicators.

  • ✓Privacy policy exists and is accessible
  • ✓Data controller identity and contact details disclosed
  • ✓Processing purposes and legal basis stated (Art. 6 GDPR)
  • ✓Data recipients identified
  • ✓Data retention periods stated
  • ⚠Data subject rights covered (Art. 15-21 GDPR)
  • ⚠Right to withdraw consent mentioned
  • ✗Right to lodge a complaint with a supervisory authority
  • ✗Implied consent language
  • ⚠International data transfers and safeguards disclosed

What every report includes

GDPR, accessibility, security, and AI Act reports all follow the same structure, with findings specific to your website or assessment answers.

Plain-language explanations

Every issue is explained clearly, without unnecessary jargon.

Practical recommendations

You get concrete suggestions for fixing what was found.

PDF export

Download the report as a clean PDF and share it.

Sample report

See exactly what you get

Click any image to zoom in

Download sample report (PDF)

Disclaimer: GetGDPRScan provides automated risk analysis and educational information across GDPR, accessibility, security, and EU AI Act readiness. It does not provide legal advice and does not guarantee compliance with any regulation or standard. Consult a qualified professional for advice specific to your situation.

Check your own website for GDPR risks

Run an automated scan and get a detailed GDPR compliance report in seconds.

Run free scan