Common website compliance signals that often deserve attention
This is where most websites go wrong. They may have documents, banners, or contact details in place, but the published setup no longer matches what the website actually does. That mismatch is often where risk starts to build.
- Privacy information: does the site explain what personal data is collected, why it is collected, and how it is used, in a way that reflects reality rather than an old template?
- Cookies and similar technologies: does the site use analytics, marketing, session, or personalisation technologies, and does the visible consent setup match that behaviour?
- Website terms: if the site offers services, takes enquiries, sells online, or includes account functionality, do the published terms fit the current model?
- Operational drift: has the website evolved faster than its legal or compliance documentation?
- Governance: is anyone actually responsible for review, updates, and change history?
That is why this page does not try to say you definitely need a specific document. The honest answer is that requirements vary. What this page can do is help users identify where a closer review is likely to be sensible.