Production Engineering Runbook
UK GDPR & PECR Privacy Compliance Checklist
Ensure your digital platform meets all statutory obligations of the UK General Data Protection Regulation and the Privacy and Electronic Communications Regulations.
Runbook Progress
0 of 6 Completed(0%)
Consent & TransparencyCritical
Explicit opt-in cookie banner with equal Reject All button
No pre-ticked consent boxes or deceptive dark patterns; non-essential cookies blocked until consent.
Consent & TransparencyCritical
Privacy Policy clearly identifies Data Controller, contact details, and DPO
Published with registered address (New York HQ) and clear contact channel.
Data RightsCritical
Documented Subject Access Request (SAR) response workflow
Capability to export all customer data in machine-readable JSON within 30 days.
Data RightsCritical
Right to Erasure (Forget Me) deletion pipeline implemented
Cascading deletion across operational databases and anonymization of financial records.
Infrastructure & StorageCritical
Data encryption in transit (TLS 1.3) and at rest (AES-256)
All cloud databases and backups protected by enterprise cryptographic keys.
SubprocessorsHigh
All third-party subprocessors documented with valid IDTA / SCC agreements
Transparent disclosure of cloud hosting (Vercel, AWS) and email delivery services.