The European Data Protection Board (EDPB) has introduced a user-friendly website auditing tool designed to enhance compliance checks for data protection. Developed under an SPE project contract by Jérôme GORIN, the EDPB Website Auditing Tool (EDPB WAT) is an open source project aimed at simplifying the collection, analysis, and reporting of evidence related to website trackers. The tool is intended to facilitate website inspections for auditors, both legal and technical, at data protection authorities (DPAs) and for entities wishing to assess their own compliance.
The EDPB WAT is licensed under the European Union Public License (EUPL) 1.2, and comprehensive end-user documentation is available in the git repository.
Building on the strengths of open source projects, the EDPB WAT integrates features from various sources to enhance its functionality and reliability. One such project is WEC (Web Evidence Collector), an EDPS command-line tool used for gathering evidence on personal data processing operations of websites. The EDPB WAT project is influenced by WEC, allowing users to visualise audits conducted with WEC and ensuring future compatibility.
The tool also incorporates the EasyList project, initially designed for Adblock, which provides rules to automatically remove unwanted content from the internet, including ads, banners, and tracking elements. By using the EasyPrivacy list and “Fanboy’s Annoyance list”, the EDPB WAT aims to offer a more comprehensive approach to website audits.
Developed using the Electron framework, a free and open source software framework maintained by the OpenJS Foundation, the EDPB WAT allows the creation of cross-platform desktop applications. This framework provides a solid foundation for the development of the user-friendly and versatile auditing tool.
The introduction of the EDPB WAT aligns with the EDPB's commitment to simplifying compliance checks and enforcement efforts by providing a tool accessible to users with varying levels of expertise. As the software continues to evolve, with plans for a second version featuring additional functionalities, it is poised to become a valuable resource in the ongoing efforts to uphold data protection standards in the digital landscape.
Photo by Muhammad Zaqy Al Fattah on Unsplash