Tools·OWASPEN
Export
OWASP Top 10 Privacy Risks
The OWASP project’s list of the ten most common privacy risks in web applications (among them web application vulnerabilities, operator-sided data leakage, insufficient data breach response, consent on everything, excessive data collection), each with countermeasures.
When to use itYou review a web application’s design or code for privacy risks.
- Published by
- OWASP (non-profit)
- Written for
- international
- For
- developers
- Cost
- free, open source
- Languages
- English
- Provisions
- GDPR Art. 25, GDPR Art. 32
Open the toolowasp.org
Description by overview.legal; the tool itself is the publisher’s.
How it connects
Other tools for the same task
CNIL CNIL GDPR guide for developers The CNIL’s open guide for developers in eighteen factsheets: identifying personal data, preparing a project, securing the environment and code, minimising collection, managing… developer ·open source
ENISA ENISA: Data protection engineering ENISA’s report on the techniques that put data protection by design into practice: anonymisation and pseudonymisation, data masking, privacy-preserving computation,… guide
Standard Standard Data Protection Model (SDM), German DPAs The German supervisory authorities’ method for turning the GDPR’s requirements into technical and organisational measures, through seven protection goals (data minimisation,… DE ·Datenschutzkonferenz (DSK)
Exodus Privacy εxodus: trackers in Android apps A French non-profit’s platform that analyses Android apps and reports the trackers and permissions each one contains; reports can be requested for any free app. Detects known… developer ·open source
ICO ICO data protection self-assessment checklists Short self-assessment checklists from the UK regulator for small organisations: data protection assurance, information security, direct marketing, records management, data sharing… UK ·checklist
Proton GDPR.eu compliance checklist A plain-language checklist of what a business must have in place under the GDPR: lawful basis and transparency, data security, accountability and governance, privacy rights.… checklist