Step-by-step structure

Direct identifier detection

Indirect identifier detection

Executable scanner code

GDPR article references

Risk levels in findings

Remediation recommendations

Data minimisation coverage

Encryption or security check

Structured output format

Data retention coverage

Production-ready tool

Data subject rights coverage

Lawful basis check

Consent mechanism check

Breach notification coverage

Data retention assessment

GDPR article references

Structured JSON or MD output

Industry best practice basis

Step-by-step process documented

Remediation guidance

Indirect identifier identification

Direct PII coverage

Step-by-step approach

Industry best practice references

GDPR article citations

Severity categorisation

Data minimisation assessment

Security of transmission

Data subject rights in API

Remediation for each finding

Structured report format