No data subject access request (DSAR) mechanism visible
A Data Subject Access Request (DSAR) is a formal request from a person asking what personal data you hold about them, or requesting it be corrected or deleted. This check looks for a visible way to submit such a request on your site.
Why this matters
Privacy laws such as GDPR and CCPA give people the right to make these requests and generally require a response within a set timeframe, where those laws apply to you. A visible mechanism makes it easier for people to exercise those rights, and for you to handle requests consistently. Check with a privacy adviser which laws apply.
How to fix it
Add a short contact form or a privacy@ email address to your privacy policy and/or contact page, labelled clearly as the way to submit a data request. A single sentence with an email address is enough to demonstrate you have a process.
Turn website findings into an action plan
Create an account to start a Full Audit of your website, with supporting evidence and a prioritised action plan.
Start Full Audit