Privacy & Compliance — GDPR, DPDP Act & Cookie Consent

Why privacy compliance is now a technical checklist too

Data privacy laws increasingly require specific, checkable things from a website: a visible privacy policy, a genuine cookie consent mechanism (not just a banner that says "we use cookies" with no real choice), and clear disclosure of what data is collected and why. This module checks the technical presence of these signals.

What's checked

• Cookie consent — whether a consent mechanism is present before non-essential cookies (analytics, advertising) are set, and whether it offers a genuine accept/reject choice.
• Privacy policy — whether a privacy policy page exists and is reasonably discoverable (typically linked in the footer).
• DPDP Act 2023 signals — India's Digital Personal Data Protection Act introduces requirements around consent, data processing transparency, and grievance redressal for platforms handling personal data of individuals in India.

An important note

This module (and this guide) covers technical, checkable signals only. Actual legal compliance depends on your specific data collection practices, business model, and where your users are located — this isn't legal advice, and you should consult a qualified professional for compliance guidance specific to your business.

How to improve these signals

A proper cookie consent tool (many affordable options exist for small businesses) that blocks non-essential cookies until consent is given, paired with a clear, genuinely readable privacy policy, covers the technical baseline most platforms check for.