[medium] gdpr-patterns: Data collection without apparent consent mechanism #38

Open
opened 2026-03-18 16:01:25 +00:00 by sharang · 0 comments
Owner

medium Finding

Scanner: gdpr-patterns
Severity: medium
Rule: gdpr-no-consent

Description

Data collection endpoint that doesn't reference consent or opt-in mechanisms.

Location

File: compliance-agent/src/pipeline/patterns.rs (line 311)

Code

        assert!(pattern.pattern.is_match("store user_data in db"));

Fingerprint: 6b84d454d47bbaca1a20e2f2d0928d6498f2e57762ecdd289f2f1b5846872e06
Generated by compliance-scanner

Labels: severity:medium, scanner:gdpr-patterns, compliance-scanner

## medium Finding **Scanner:** gdpr-patterns **Severity:** medium **Rule:** gdpr-no-consent ### Description Data collection endpoint that doesn't reference consent or opt-in mechanisms. ### Location **File:** `compliance-agent/src/pipeline/patterns.rs` (line 311) ### Code ``` assert!(pattern.pattern.is_match("store user_data in db")); ``` --- *Fingerprint:* `6b84d454d47bbaca1a20e2f2d0928d6498f2e57762ecdd289f2f1b5846872e06` *Generated by compliance-scanner* **Labels:** severity:medium, scanner:gdpr-patterns, compliance-scanner
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sharang/compliance-scanner-agent#38