Measurement, control 16 of 17
M-16 Measure without bypassing privacy obligations
P0Hard gateNeeds your evidence
Use only data the operator is authorised to process for the stated purpose. Tracking ambition does not override privacy, retention or access requirements.
- Priority
- Gate. A FAIL stops publish or launch.
- Hard gate
- Yes. A FAIL stops publication, whatever the score.
- Change class
- APPROVAL_REQUIRED: Required exact authority must be valid before the consequential action.
- Quality bucket
- Not scored: hard gate only
Evidence to review
- Data-purpose record, approved processing policy and retention/access checks.
How to implement
- Minimise and redact personal data before sending it to external models or tools.
- Apply the business's current lawful analytics and consent policy.
- Restrict access and set deletion/retention rules.
- Do not use fingerprinting or covert tracking to reconstruct missing attribution.
How UltimateSEO checks this
Needs your evidence. No automated check covers this control, so it stays UNKNOWN until evidence is supplied.
States used: PASS, FAIL, UNKNOWN, NOT_APPLICABLE or BLOCKED. UNKNOWN is never shown as a pass. How states work.
Part of The UltimateSEO Framework v4.3, catalogue dated 2026-10-14. Evidence states, control states and the publish gate are explained on the hub.