Skip to Content search facebook instagram pinterest twitter youtube

How to check my website's GDPR compliance

Posted on

The first step to understanding your GDPR compliance risk is to perform a website GDPR compliance check. This is the first, and perhaps most important of the five key activities outlined in our Website GDPR Compliance Checklist.

Checking your website's GDPR compliance is easy and anyone can do it, just follow the following steps.

  1. Open the GDPR website compliance checker in a new tab or window
  2. Enter the url of your website's home page (e.g. https://www.example.com/) and click Scan Now to start the GDPR compliance check. This may take a minute or two depending on the compliexity of your website.
  3. The website check results will be summarised as either No Issues Found, or Action Required.
  4. Should there be no issues found, then you can relax a little and leave this tutorial here. Now you just need to ensure you've addressed everything else listed in our GDPR compliance checklist.
  5. If action is required, click on Get the Compliance Kit and set up your username and password when prompted.
  6. The tag scanner will attempt to automatically locate the HTML code in your templates that deploys script and image tags. The next screen will show you a list of tags and images detected and, in most instances, the HTML code responsible for it.
  7. Review each entry shown in the results list and choose whether it needs to be an opt-in option for site users. Select a category and click "Add to Tag Manager" for those that will be deployed via opt-in consent.
    Consider the following when deciding whether or not a tag should be added (note that examples are not exhaustive):

    Type of tag or content Examples Suggested Category Action to take
    Analytics and tracking tags Google analytics / analytics.js, HotJar, Optimizely, Clicky, Piwik, Facebook Analytics Analytics Add to Tag Manager
    Ad platforms, networks and content sharing Google Ads / DoubleClick, Taboola, Outbrain, Media.net - there are thousands of these Marketing Add to Tag Manager
    Social Media plugins / commenting / like buttons Twitter, Facebook / connect, LinkedIn, Instagram Marketing Add to Tag Manager
    Third party, non-essential website plugins (Especially for WordPress sites) where the plugin doesn't attest GDPR compliance in their documentation or on their website Performance Add to Tag Manager
    Core JavaScript and other platform libraries jQuery.js, react.js, vue,js, angular.js   Leave as is
    Your own images hosted via a CDN. This does not include third party images or plugins. Amazon Web Services / AWS, Cloudflare, MaxCDN, MetaCDN, Fastly   Leave as is
     Font libraries Fonts.com, Google fonts, Typekit   Leave as is
    Security Utilities Google ReCaptcha   Leave as is
    EziGDPR's tag, if already installed     Leave as is
  8. Once you've reviewed your results, categorised and added tags to your tag manager, click next and follow the instructions provided to add out HTML snippet to your website templates and remove the newly managed HTML code from your templates. Refer to our instructions on how to find HTML in your website templates if you encounter any problems.
  9. When you're sure you've found and removed all the managed tags, click next to proceed to the install checking utility. This tool loads your site and checks for your unique EziGDPR JavaScript tag. If you've installed the tag correctly, you should see a tag found message. If the tool says Tag not found, double check you have installed it after the opening <head> tag on each page, and have uploaded all your changed files to your web server.
  10. Next, customise your display screens by adding your own logo, selecting the type of consent window to display (see our post What type of GDPR Opt-In Consent Popup should I use?), choosing your geographic targeting and nominating an email to receive GDPR Data Rights Requests lodged via the GDPR Data Rights Request Widget that comes with the Compliance Kit.
  11. Finally, using the information provided during the last step, update your privacy policy, and add in the custom links that will trigger your GDPR Pivacy Options Amendment, and Data Rights Request widgets.
  12. That's it, now all that's left to do is a quick sense check of your settings, then hit Publish now to activate your changes.

 

If you run into any snags, you may also contact EziGDPR for support using the details provided inside the user area.

 

We hope this helps you easily get your website GDPR Compliant!