PRV-006
Form collects personal data without a notice
MediumDefault severity · Privacy / Legal · Legal, privacy and consent
Last reviewed
What it checks
Forms with email or phone fields that have no privacy link or consent text inside the form.
Why it matters
People are not told how their details will be used at the moment they hand them over.
Recommended fix
Add a short notice with a privacy policy link under each form, and a separate unticked checkbox for marketing.
How to verify
View each form and confirm the notice and link appear before the submit button.
Example fix prompt
Generic prompt (your report adds the evidence)
Please fix this production issue in my app.
Issue PRV-006: Form collects personal data without a notice
Site: https://your-app.example
First confirm the issue in the code or live config. If it is not present, say so and change nothing.
Task: Under each form that asks for an email or phone number, add one line such as “We use your email to … See our Privacy Policy.” with a link, and if the data is also used for marketing add a separate, unticked opt-in checkbox.
Constraints: make the smallest change that fixes this, keep the current design and behaviour, never paste secret values into code or chat, and tell me which files you changed.
Done when: View each form and confirm the notice and link appear before the submit button.References
Potential compliance risk only. This is not legal advice.