PastBook

The overall risk score of 0.64 indicates moderate to high compliance risks. Strengths include robust data subject rights and international transfer safeguards. Critical risks stem from inadequate security measures (e.g., missing breach response, logging, and two-factor authentication), undefined roles in third-party data sharing, and lack of protections against profiling minors. Urgent attention is needed to address these gaps to comply with GDPR, NIS2 Directive, and EU AI Act requirements.