PRV-015
Privacy policy does not explain people’s rights
MediumDefault severity · Privacy / Legal · Legal, privacy and consent
Last reviewed
What it checks
The linked privacy policy for access, correction, deletion or opt-out rights.
Why it matters
GDPR, CCPA and the DPDP Act all require telling people they can access, correct or delete their data and how to do it. Potential compliance risk. Review recommended. This is not legal advice.
Recommended fix
Add a "Your rights" section with how to make a request.
How to verify
Read the updated privacy policy and confirm the section is there.
Example fix prompt
Generic prompt (your report adds the evidence)
Please fix this production issue in my app.
Issue PRV-015: Privacy policy does not explain people’s rights
Site: https://your-app.example
First confirm the issue in the code or live config. If it is not present, say so and change nothing.
Task: Add a "Your rights" section to the privacy policy: access, correction, deletion, withdrawing consent and complaints, and exactly how to make a request (email or in-app).
Constraints: make the smallest change that fixes this, keep the current design and behaviour, never paste secret values into code or chat, and tell me which files you changed.
Done when: Read the updated privacy policy and confirm the section is there.References
Potential compliance risk only. This is not legal advice.