To evaluate the privacy protection readiness for a website, include not only general web security controls but also the following major areas:
- TLS for secure data transmission: The misconfiguration of TLS may result in insecure data transmission or man-in-the-middle attacks.
- Referrer Policy: The Referrer Policy defines how the browser should handle Referrer information, which reveals the user's original visiting web site. The website visiting history is also considered to be personal privacy information.
- Cookie Consent Disclaimer: To comply with the GDPR, the collection of cookie information and the use of any third-party cookies will require explicit cookie consent.
- HTTP Security Headers: The HTTP protocol itself provides web security controls. Please also refer to the following table for the suggested HTTP security header configurations...
