Skip to main content
All scenarios

Company Website

You have a website? You have obligations.

Any website accessible from the EU collects data — even without forms. IP addresses, cookies, analytics, and third-party scripts all trigger regulatory requirements.

Reality check

Do you know which laws apply to your website right now?

GDPR (General Data Protection Regulation)

mandatory Art. 6, Art. 13, Art. 14, Art. 30

Your obligations

  • Privacy policy with all Art. 13/14 disclosures
  • Legal basis for every data processing activity
  • Cookie consent before non-essential tracking
  • Data Processing Agreements with all third parties
  • Records of processing activities (Art. 30)

SiteGuardian monitors this

  • TLS/HTTPS encryption monitoring
  • Automated cookie consent detection
  • Security headers analysis
  • Email transport encryption checks
  • Breach notification SLA tracking (72h)
  • Digital DPA/AVV signing

Risk if ignored

Fines up to €20M or 4% of global turnover. Cease-and-desist orders. Reputational damage.

ePrivacy Directive (Cookie Consent)

mandatory Art. 5(3)

Your obligations

  • Cookie consent banner with reject option
  • No tracking before explicit consent
  • Consent logging and proof of consent
  • Regular consent renewal

SiteGuardian monitors this

  • Pre-consent cookie and tracker detection
  • Cookie banner presence and configuration analysis
  • Reject option validation
  • Consent mode compatibility check

Risk if ignored

National DPA enforcement. In France: fines up to €100M (Google, 2022). In Germany: TTDSG § 25 violations.

European Accessibility Act (EAA)

mandatory Art. 4, Art. 13, Art. 31

Your obligations

  • WCAG 2.2 Level AA conformance
  • Accessibility statement on the website
  • Mechanism for users to report barriers

SiteGuardian monitors this

  • WCAG 2.2 Level AA conformance auditing
  • Automated accessibility scoring
  • Violation severity breakdown and remediation hints
  • Daily accessibility scans

Risk if ignored

Market restrictions from June 2025. National enforcement actions. Loss of public sector clients.

Does this apply to you?

If you answer yes to 2 or more, these regulations very likely apply to your business.

See where you stand

Our free scanner checks your website's security posture, SSL, headers, email authentication, and more. No account needed.

Scan your website for free
View all scenarios · EU Regulatory Directory · Compliance Plan

This page provides general information about EU regulatory frameworks. It does not constitute legal advice. Consult a qualified legal professional for advice specific to your situation. SiteGuardian documents your monitoring continuously — compliance is your organisation's responsibility.