Visible on the site
What the technical review can observe.
- Which fields are sent and which are required.
- Whether consent is separate from an offer and other confirmations.
- Whether the linked text is available before submission and its version is recorded.
Outside the scan
Where manual review is required.
- Whether the selected legal ground is correct.
- Adequacy and wording of the legal text.
- Actual operation of withdrawal, deletion, and data-subject response procedures.
Next step
Keep evidence separate from decisions.
Remove unnecessary fields, connect each form to one purpose, and have the controller and legal adviser approve the text and ground.
Sources
Review forms against primary sources.
Tell us what the site needs.
A goal, the current difficulty, and an optional website address are enough. Do not send passwords, keys, or private exports.