7. of Inference
There is no review process for introducing new trackers or advertising providers onto your web pages; whatever your designers like, or marketing sells, will be used.
|
Threat |
|
|
|
You don’t have a review process for new trackers or ad providers, so you are leaving yourself open to supply chain attacks and data leakage. A provider may be harvesting data about your customers without them ever having clicked on a link. |
|
GDPR |
Chapter 3, Art. 21 – 2. Chapter 3, Art. 21 – 3. Chapter 4, Art. 32 – 2. Chapter 4, Art. 32 – 4. |
|
CCPA & CPRA |
CCPA 1798.100. General Duties of Businesses that Collect Personal Information (d)(2) CCPA 1798.140. Definitions (h) – Dark Patterns CCPA 1798.185. Regulations... |
