The EU Website Compliance Checklist: 35 requirements sorted by fine risk, each with a real penalty example, a 60-second check and the exact fix. 4 of them are free below.
For any website with visitors from the EU · Excel + Google Sheets · Bonus AI fix-it prompt
These are straight from the paid checklist. If you fail any of them, your site is exposed today.
Why: The most common reason for fines. A small Belgian legal-info website (about 35,000 visits a month) was fined EUR 15,000 for its cookie practices (Belgian DPA, 2019). Dutch retailer Coolblue: EUR 40,000 (2024).
60-second check: Open your site in a private window. Do NOT click the banner. Press F12 > Application > Cookies. If you see _ga, _fbp, _gcl or hotjar cookies, you fail.
Fix: Use a consent tool (CookieYes, Cookiebot, Usercentrics, or free open-source Klaro / Orestbida CookieConsent). Block Google Analytics, Meta Pixel, Hotjar, TikTok etc. until consent. Turn on Google Consent Mode v2.
ePrivacy Directive Art. 5(3), GDPR Art. 6-7
Why: Spain fined Vueling EUR 30,000 because visitors could only accept cookies, not refuse them. Regulators in France, Belgium and the Netherlands treat a hidden 'reject' as invalid consent.
60-second check: Look at your banner: is there a 'Reject all' button on the first screen, same size and style as 'Accept all'? 'Settings' only does not count.
Fix: First layer: [Accept all] [Reject all] [Settings], equal buttons. No pre-ticked boxes. Add a 'Cookie settings' link in the footer so people can change their mind.
GDPR Art. 4(11), 7(3); EDPB cookie banner taskforce report
Why: A Munich court (LG Muenchen, 3 O 17493/20, 2022) ordered a website owner to pay EUR 100 damages for loading Google Fonts from Google's servers. It triggered a wave of letters demanding EUR 100-500 from thousands of site owners.
60-second check: F12 > Network tab > reload. Search for fonts.googleapis.com, fonts.gstatic.com, youtube.com, maps.google. Any request before consent = risk.
Fix: Download fonts (google-webfonts-helper) and serve them from your own domain. Use youtube-nocookie.com with a click-to-load placeholder. Replace live maps with a static image + 'Load map' button.
GDPR Art. 6, Art. 82 (damages)
Why: The EU ODR platform was shut down on 20 July 2025. Keeping the dead link can be seen as misleading and has already triggered warnings in Germany.
60-second check: Search your footer, terms and Impressum for 'ODR' or 'ec.europa.eu/consumers/odr'.
Fix: Delete the link and sentence. Add: 'Complaints: complaints@yourdomain.com'. Say whether you take part in alternative dispute resolution.
Regulation (EU) 2024/3228 (repealed ODR Regulation 524/2013)
A spreadsheet you can finish in an afternoon, not a 60-page legal PDF.
P1 Critical items apply to almost every website. Fix those first, then work down.
Every risk is backed by an actual fine, court case or law, with links in the Sources tab.
Plain-language tests anyone can do in a browser. No lawyer needed to find the problems.
Exact steps, tools and code snippets: consent setup, self-hosted fonts, footer links, button text.
Mark items Done or N/A and watch your score per priority level update.
A ready prompt for Claude Code or OpenAI Codex that scans your code and fixes the issues. Plus a no-code version for WordPress, Wix and Shopify.
14-day money-back guarantee · Secure checkout by Lemon Squeezy
If your website targets or serves visitors and customers in the EU, EU rules like GDPR and the consumer rules can apply to you, wherever you are based.
Most P1 items (cookies, privacy policy, legal notice, third-party embeds) apply regardless of size. Some rules, like the accessibility act for services, exempt microenterprises; the checklist tells you which.
No. It's a practical checklist based on EU laws, regulator guidance and real cases. Rules differ by country, so for your specific situation confirm with a lawyer or your national authority.
Open your project in Claude Code or OpenAI Codex, paste the prompt with your details and the checklist. It scans your code, reports pass/fail per item and makes the fixes it can, with templates for your legal pages marked for review.
An .xlsx file that works in Excel and Google Sheets (File > Import). Delivered instantly after payment.
This checklist is practical guidance, not legal advice. Penalty examples are real published cases; amounts in your case depend on country, authority and circumstances.