WHAT IT CHECKS
A privacy notice, cookie banner, cookie policy or consent form, against 52 rules taken from the UK GDPR and the Privacy and Electronic Communications Regulations (PECR):
- Every item Article 13(1) and (2) require a privacy notice to contain — who the controller is, the purposes and legal basis, recipients, retention, the data subject's rights, and the right to complain to the ICO.
- The plain-language duty in Article 12.
- What makes consent valid, under Article 7 and Article 4(11).
- The cookie rules in PECR regulation 6 and Schedule A1, as amended in 2025.
WHERE THE RULES COME FROM
The UK GDPR and PECR as published on legislation.gov.uk, and guidance from the Information Commissioner's Office (ICO).
WHAT IT DOES NOT CHECK
- UK law only. It does not check EU GDPR differences or any other country's law.
- The document, not the organisation. It reviews what the notice says, not whether the business actually does it.
WHAT YOU GET BACK
- Each gap it finds, with the rule it fails and the source text that rule was taken from, quoted, so you can check it yourself.
- Replacement wording for each finding, and a corrected copy of your document to download.
- The pack's declared gaps, printed on every report, so you know what was not checked.
HOW TO RUN IT
In the browser. Sign in at https://vera.ink/verify, paste or upload the document, and choose this pack. New accounts start with 40 credits; a check costs 3 credits up to about 4,500 words.
From your AI assistant. vera.ink is an MCP server. Connect it to Claude Code or Cursor and ask your assistant to check a file against this pack: https://vera.ink/developers
GOOD TO KNOW
- vera.ink only reports findings it can tie to a rule in this pack, and quotes the source text so you can check it. Anything it can't tie to a rule is dropped from the report.
- It is a review aid, not legal advice or a certification. Read each finding before you act on it.
More checks: https://vera.ink/check