Exposure and compliance risks
- Third-party tools and the risks associated with them (tracking, data sharing, scope of collection).
- Video Privacy Protection Act (VPPA) and wiretapping-related exposure (e.g. state wiretapping laws).
- Misconfiguration of session replay, form-field recording, and other behavioral capture.
- Data flows to vendors and domains (who receives what, and under what conditions).
- Cookie and identifier scope (what's set, shared, or over-collected).