Practical resources

Use standards and regulator guidance as source material, not as decoration.

These resources explain the framework behind our reviews and link to authoritative references. They are educational, not a substitute for legal advice about a specific business.

Accessibility

WCAG 2.2

The current W3C Web Content Accessibility Guidelines Recommendation. Useful for testable accessibility criteria and implementation planning.

W3C WCAG 2.2 ↗
California privacy

CCPA / CPRA information

California privacy rights, business responsibilities, notices and opt-out concepts should be reviewed against current official state guidance.

California DOJ CCPA ↗
Privacy choices

Global Privacy Control

Official California guidance explains GPC as an opt-out signal that covered businesses must honor for sale/sharing opt-outs.

California DOJ GPC ↗
Email

CAN-SPAM

FTC guidance covers commercial email requirements including truthful routing information, postal address, opt-out and honoring unsubscribe requests.

FTC CAN-SPAM guide ↗
UK tracking

Cookies & storage/access technology

ICO guidance covers cookies, pixels, local storage and related technologies under PECR and relevant UK privacy law.

ICO guidance ↗
Operations

Maintenance matters

Policies and controls can drift when the site changes. Build a vendor inventory, retention schedule, change review trigger and recurring scan cadence.

Monitoring program →
What the scanner can and cannot know

Public evidence is only one layer.

Automation can observe

  • HTTP response headers and redirect behavior
  • Selected markup, headings, images and forms
  • Public policy links and collection-point disclosures
  • Visible third-party scripts and tracker indicators
  • Metadata, canonical and viewport signals

Automation cannot reliably determine

  • Whether a particular law applies to the business
  • Complete backend data flows and contracts
  • All assistive-technology behavior
  • Whether every consent record is valid
  • Whether a legal disclosure is complete for unusual facts
Human implementation available

Turn the findings into finished work.

Send us the site and a little context about the business. We can validate what matters, define the scope, produce the deliverables and help implement the changes.