Overview
This check validates that every crawled page carries a visible, working link to your Privacy Policy, typically in the global footer or header navigation. ObservePoint audits the full page inventory and flags any page where the expected link text or URL pattern is missing, orphaned, or altered by a template change.
Note: This guide is provided for informational purposes only and does not constitute legal advice. Consult qualified legal counsel regarding your organization's specific CCPA/CPRA compliance obligations.
Why it is important
CCPA requires businesses to conspicuously post a privacy policy accessible from every page where personal information may be collected, and in practice that means every page on the property since forms, cookies, and analytics collection can appear almost anywhere. A missing or broken Privacy Policy link is one of the most commonly cited CCPA violations because it is trivially easy for a regulator, journalist, or plaintiff's attorney to find and screenshot. It also signals to auditors that governance over the footer/template layer has drifted.
Implementation
Create an Audit covering 100% of the domain (or a representative crawl for very large sites).
Check the pre-built ObservePoint report for Pages Missing Privacy Policy Link.
Any page returned in the report above is missing the link — check whether failures cluster by URL path or template before treating each as a one-off fix.
Remediation
For remediation, please check the following steps:
First confirm the failure is real and not a Rule or selector mismatch: pull the page screenshot and page HTML from the failing run and visually confirm the link is actually absent, since minor markup changes (a rebranded footer component, a new CMS block) can break a Text Search Rule without the link itself being gone.
If the link is genuinely missing, identify which template or CMS component renders the footer/header and confirm the fix in a staging environment before it ships and re-run the audit against staging where possible.
Verify the link resolves within two clicks to the correct, current Privacy Policy destination, not a 404, a redirect loop, or a stale cached version.
Once corrected in production, re-run the audit and confirm the pass rate returns to 100% before closing the remediation ticket.
Conclusion
A Privacy Policy link is the most basic and most visible artifact of a CCPA program, and keeping it verified across 100% of pages on a recurring cadence closes off one of the easiest violations for outside parties to spot.