Source code
Security & compliance
Code quality
Missing consent capture
Part of the GDPR & privacy check · fix arrives as a guide
What it is
Personal data is collected with no mechanism recording the consent or lawful basis it was collected under.
Why it matters
Where consent is your basis, GDPR requires you to demonstrate it — when it was given, for what, and on what wording. Without a record, you cannot show it, and consent you cannot evidence is treated as consent you do not have.
How to fix it
Record the basis alongside the data: timestamp, purpose, and the version of the notice shown. Where the basis is legitimate interest rather than consent, document the assessment instead.
Run them all on your app
Connect your repo and your live services with read-only scopes. The first scan is free, and nothing changes without your approval.