Mr. Chadd

The provider demonstrates moderate compliance (48.3% risk score) with key strengths in explicit consent mechanisms, data minimization, and deletion rights. Critical gaps exist in consent granularity, breach response protocols, international data transfer safeguards, AI/automation disclosures, and governance documentation. High-risk areas primarily violate GDPR (Articles 7, 28, 35), ePrivacy Directive, and EU AI Act requirements, exposing the organization to regulatory penalties and operational vulnerabilities.