Website compliance checklist: privacy, cookies, accessibility and legal pages

1. A clear privacy policy

Explain what personal data you collect (forms, analytics, cookies), why, how long you keep it, who you share it with and how people can contact you or request deletion. Laws such as the GDPR in Europe, UK GDPR, California’s CCPA/CPRA, Canada’s PIPEDA and the PDPA in Singapore and Malaysia all expect this transparency.

2. Cookie consent that actually works

In the EU and UK, non-essential cookies such as analytics and advertising pixels need consent before they load. A compliant banner offers accept and reject options that are equally easy, and blocks tracking until the visitor agrees. Keep a way for visitors to change their choice later.

3. Legal and company information

Some countries expect specific information on business websites: the Impressum in Germany and Switzerland, mentions légales in France, and company registration details in the UK. Add your registered business name, address and contact details where required.

4. Accessibility

Design to the WCAG 2.2 AA standard: sufficient colour contrast, keyboard navigation, descriptive link text, alt text for images and labelled form fields. Accessibility laws such as the European Accessibility Act, the ADA in the USA and AODA in Ontario make this increasingly important, and it improves usability for everyone.

5. Secure forms and data handling

Use HTTPS everywhere, collect only the data you need, protect forms from spam, and make sure enquiries are delivered to a secure, monitored mailbox. Avoid sending sensitive information by plain email where possible.

6. Payments and e-commerce

Use a reputable payment gateway so card data never touches your server, show prices with the correct tax, and publish clear terms, refund and delivery policies.

7. Review regularly

Laws, tools and your website all change. Review your privacy policy, cookie set-up and accessibility at least once a year, and whenever you add new tracking or features.