DPE-2026-0010

Niet-vermelde ontvanger

Een ontvanger van persoonsgegevens ontbreekt in de eigen privacyverklaring van de partij.

Familie
Transparantie
Status
actief
Geldt voor
web

Wat er gebeurt

Measurement shows data going to a party that the published privacy statement does not mention, or the statement asserts something the traffic contradicts, such as that no personal data is processed or that all recipients are inside the EEA.

Waarom het ertoe doet

The statement is the one place a person can check what happens to their data. If it is wrong, informed consent is impossible by construction, and every other control rests on nothing.

Veelvoorkomende oorzaken

  • statement not updated when the measurement setup changed
  • tags added by a team that does not maintain the statement

Dit is het níet

This is not about whether the processing was lawful. It is about the gap between the measurement and the party's own account of it.

Hoe je het vaststelt

Indicator

Set difference: recipients observed in the capture minus recipients named in the privacy statement of the same date is non-empty. Both sources belong to the party; the researcher only does the arithmetic.

Methode

document-comparison

Kwaliteit van de detectie

97 van 100

De grenzen van deze bevinding

Wat dit patroon zou weerleggen

  • The recipient is named elsewhere in the statement or in a linked cookie overview.met de hand te toetsende bevinding vervalt
  • The recipient falls within a category of recipients that the statement does name, and the category is specific enough to identify the kind of party.met de hand te toetsende bevinding wordt zwakkerThe provision allows categories. 'Analytics providers' covers an analytics provider; 'our partners' covers nothing. Quote the category verbatim in the finding and let the reader judge it.
  • The statement was updated outside the measured window.met de hand te toetsende bevinding vervalt

Wat dit patroon níet vaststelt

  • harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
  • severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
  • unlawfulness; that is for a supervisory authority or a court
  • intent; a fault is usually a build decision, not a plan
  • absence: not finding it in one capture is not evidence that it is not there

Reproduceren

  • manualMETHOD.mdno dedicated reproduction exists yet; follow the general method and the indicator above

Ook zichtbaar met openbare scanners

waybackurlscan.io

Juridisch kader

Bepalingen

eu-gdpr-13eu-gdpr-5-1-aeu-gdpr-6-1-a

Veelgehoorde tegenwerpingen

The statement is generic on purpose.

Article 13 requires the recipients or categories of recipients. A statement that omits a category entirely is not generic but incomplete.

Geldt wanneer

to-processing

Aangetroffen in

De onderzoeken waarin dit patroon gemeten is.

Verwante patronen

← alle patronen