{
  "schema": "ecomark-automated-analysis-v2",
  "generated_at": "2026-08-28T03:42:19.437Z",
  "algorithm": {
    "version": "2",
    "status": "current",
    "name": "EcoMark v2",
    "published": "2026-08-28",
    "rubric": {
      "0": "Fails materially or creates clear harm in this criterion.",
      "1": "Poor. Significant problems or unnecessary impact remain.",
      "2": "Mixed. Some good practice is present, but material gaps remain.",
      "3": "Good. The criterion is mostly met with only limited gaps.",
      "4": "Strong. The criterion is deliberately and consistently met."
    },
    "formula": {
      "criterion": "criterion_points = max_points × level ÷ 4",
      "category": "category_score = sum(criterion_points)",
      "overall": "overall_score = round(sum(category_score × category_weight))",
      "ranking": "competition ranking: equal scores share a rank and the next rank skips accordingly (1, 1, 3)",
      "comparison": "rankings compare assessments produced by the same EcoMark version only",
      "historical_cutoff": "historical rankings use published_at, not assessed_on"
    },
    "analysis": {
      "type": "automated-observable-web",
      "rendered_homepage": true,
      "max_pages": 3,
      "max_policy_pages": 5,
      "max_asset_samples": 16,
      "freshness_hours": 24,
      "dns_record_types": [
        "A",
        "AAAA",
        "CNAME",
        "MX",
        "NS",
        "TXT"
      ],
      "green_web_check": true,
      "rules": {
        "efficiency": {
          "payload": {
            "metric": "average_page_kb",
            "direction": "lower",
            "bands": [
              500,
              1000,
              2000,
              4000
            ],
            "unit": "KB/page"
          },
          "javascript": {
            "metric": "average_javascript_kb",
            "direction": "lower",
            "bands": [
              100,
              250,
              500,
              1000
            ],
            "unit": "KB/page"
          },
          "requests": {
            "metric": "average_resource_references",
            "direction": "lower",
            "bands": [
              20,
              40,
              70,
              100
            ],
            "unit": "resources/page"
          },
          "media": {
            "metric": "media_issue_count",
            "direction": "lower",
            "bands": [
              0,
              1,
              3,
              6
            ],
            "unit": "issues"
          },
          "caching": {
            "metric": "cacheable_asset_percent",
            "direction": "higher",
            "bands": [
              80,
              60,
              40,
              20
            ],
            "unit": "%"
          }
        },
        "privacy": {
          "trackers": {
            "metric": "tracker_count",
            "direction": "lower",
            "bands": [
              0,
              1,
              2,
              4
            ],
            "unit": "known trackers"
          },
          "analytics": {
            "metric": "analytics_risk",
            "direction": "lower",
            "bands": [
              0,
              1,
              2,
              3
            ],
            "unit": "risk level"
          },
          "cookies": {
            "metric": "nonessential_cookie_count",
            "direction": "lower",
            "bands": [
              0,
              1,
              3,
              6
            ],
            "unit": "response cookies"
          },
          "third_party_data": {
            "metric": "third_party_percent",
            "direction": "lower",
            "bands": [
              0,
              10,
              25,
              50
            ],
            "unit": "%"
          },
          "invasive_techniques": {
            "metric": "invasive_tracker_count",
            "direction": "lower",
            "bands": [
              0,
              0,
              0,
              1
            ],
            "unit": "known invasive tools"
          }
        },
        "sovereignty": {
          "provider_jurisdiction": {
            "metric": "us_provider_count",
            "direction": "lower",
            "bands": [
              0,
              1,
              3,
              6
            ],
            "unit": "visitor-facing provider ecosystems"
          },
          "data_location": {
            "metric": "known_non_eu_data_percent",
            "direction": "lower",
            "bands": [
              0,
              10,
              30,
              60
            ],
            "unit": "%"
          },
          "portability": {
            "metric": "proprietary_embed_count",
            "direction": "lower",
            "bands": [
              0,
              1,
              3,
              6
            ],
            "unit": "embeds"
          },
          "concentration": {
            "metric": "top_provider_share_percent",
            "direction": "lower",
            "bands": [
              0,
              40,
              65,
              85
            ],
            "unit": "%"
          },
          "openness": {
            "metric": "open_technology_score",
            "direction": "higher",
            "bands": [
              90,
              75,
              60,
              40
            ],
            "unit": "openness score"
          }
        },
        "accessibility": {
          "semantics": {
            "metric": "semantic_issue_count",
            "direction": "lower",
            "bands": [
              0,
              1,
              2,
              4
            ],
            "unit": "issues"
          },
          "keyboard": {
            "metric": "keyboard_issue_count",
            "direction": "lower",
            "bands": [
              0,
              1,
              3,
              6
            ],
            "unit": "issues"
          },
          "controls": {
            "metric": "unlabelled_control_percent",
            "direction": "lower",
            "bands": [
              0,
              5,
              15,
              30
            ],
            "unit": "%"
          },
          "visual": {
            "metric": "visual_issue_count",
            "direction": "lower",
            "bands": [
              0,
              1,
              2,
              4
            ],
            "unit": "issues"
          },
          "resilience": {
            "metric": "raw_text_ratio_percent",
            "direction": "higher",
            "bands": [
              80,
              60,
              40,
              20
            ],
            "unit": "%"
          }
        },
        "responsibility": {
          "transparency": {
            "metric": "transparency_evidence_score",
            "direction": "higher",
            "bands": [
              90,
              75,
              55,
              35
            ],
            "unit": "evidence score"
          },
          "security": {
            "metric": "security_header_count",
            "direction": "higher",
            "bands": [
              5,
              4,
              3,
              2
            ],
            "unit": "headers"
          },
          "consent_design": {
            "metric": "consent_issue_score",
            "direction": "lower",
            "bands": [
              0,
              1,
              2,
              3
            ],
            "unit": "risk level"
          },
          "supplier_disclosure": {
            "metric": "undisclosed_provider_percent",
            "direction": "lower",
            "bands": [
              0,
              25,
              50,
              75
            ],
            "unit": "%"
          },
          "sustainability_governance": {
            "metric": "sustainability_evidence_score",
            "direction": "higher",
            "bands": [
              4,
              3,
              2,
              1
            ],
            "unit": "evidence signals"
          }
        }
      },
      "note": "EcoMark v2 is an automated approximation of observable public website behaviour. DNS, policy, registration, open-technology and Green Web evidence are included, but EcoMark does not claim to rate an organisation itself as ethical or sustainable."
    },
    "grades": [
      {
        "grade": "A",
        "min": 90,
        "max": 100
      },
      {
        "grade": "B",
        "min": 80,
        "max": 89
      },
      {
        "grade": "C",
        "min": 70,
        "max": 79
      },
      {
        "grade": "D",
        "min": 60,
        "max": 69
      },
      {
        "grade": "E",
        "min": 50,
        "max": 59
      },
      {
        "grade": "F",
        "min": 0,
        "max": 49
      }
    ],
    "categories": [
      {
        "key": "efficiency",
        "label": "Efficiency",
        "weight": 0.25,
        "short": "Resource use, page weight and avoidable computation.",
        "criteria": [
          {
            "key": "payload",
            "label": "Payload",
            "max_points": 20,
            "description": "Measured HTML and sampled asset payload is proportionate and optimised."
          },
          {
            "key": "javascript",
            "label": "JavaScript",
            "max_points": 20,
            "description": "Referenced JavaScript weight is kept proportionate."
          },
          {
            "key": "requests",
            "label": "Requests",
            "max_points": 20,
            "description": "Pages avoid excessive resource references and third-party connections."
          },
          {
            "key": "media",
            "label": "Media",
            "max_points": 20,
            "description": "Images and video avoid obvious loading and autoplay waste."
          },
          {
            "key": "caching",
            "label": "Caching and compression",
            "max_points": 20,
            "description": "Sampled static assets expose effective cache policy."
          }
        ]
      },
      {
        "key": "privacy",
        "label": "Privacy",
        "weight": 0.25,
        "short": "Tracking, cookies, profiling, analytics and consent.",
        "criteria": [
          {
            "key": "trackers",
            "label": "Behavioural tracking",
            "max_points": 20,
            "description": "Known advertising pixels and cross-site trackers are absent or minimised."
          },
          {
            "key": "analytics",
            "label": "Analytics minimisation",
            "max_points": 20,
            "description": "Analytics technology is absent or privacy-preserving and proportionate."
          },
          {
            "key": "cookies",
            "label": "Cookies and consent",
            "max_points": 20,
            "description": "Non-essential response cookies are avoided before interaction."
          },
          {
            "key": "third_party_data",
            "label": "Third-party disclosure",
            "max_points": 20,
            "description": "Resource loading does not unnecessarily disclose visits to third parties."
          },
          {
            "key": "invasive_techniques",
            "label": "Invasive techniques",
            "max_points": 20,
            "description": "Known session replay and similarly invasive tools are absent."
          }
        ]
      },
      {
        "key": "sovereignty",
        "label": "Sovereignty",
        "weight": 0.2,
        "short": "Ownership, geography, openness, portability and dependency.",
        "criteria": [
          {
            "key": "provider_jurisdiction",
            "label": "Provider jurisdiction",
            "max_points": 20,
            "description": "Observable visitor-facing dependencies minimise reliance on US-headquartered platform ecosystems."
          },
          {
            "key": "data_location",
            "label": "Third-party geography",
            "max_points": 20,
            "description": "Known non-EU third-party data exposure is minimised."
          },
          {
            "key": "portability",
            "label": "Portable delivery",
            "max_points": 20,
            "description": "Pages minimise proprietary embeds and platform-specific content dependencies."
          },
          {
            "key": "concentration",
            "label": "Supplier concentration",
            "max_points": 20,
            "description": "Third-party resource loading is not dominated by one provider ecosystem."
          },
          {
            "key": "openness",
            "label": "Open technology",
            "max_points": 20,
            "description": "Open standards, first-party delivery, open-source technology and public source code are preferred where practical."
          }
        ]
      },
      {
        "key": "accessibility",
        "label": "Accessibility",
        "weight": 0.15,
        "short": "Inclusive, semantic and resilient implementation.",
        "criteria": [
          {
            "key": "semantics",
            "label": "Semantics",
            "max_points": 20,
            "description": "HTML exposes basic language, heading and landmark structure."
          },
          {
            "key": "keyboard",
            "label": "Keyboard access",
            "max_points": 20,
            "description": "Markup avoids obvious keyboard-hostile interaction patterns."
          },
          {
            "key": "controls",
            "label": "Forms and controls",
            "max_points": 20,
            "description": "Form controls expose labels or accessible names."
          },
          {
            "key": "visual",
            "label": "Visual accessibility",
            "max_points": 20,
            "description": "Viewport and media markup avoid obvious visual accessibility barriers."
          },
          {
            "key": "resilience",
            "label": "Resilience",
            "max_points": 20,
            "description": "Meaningful text remains present without relying entirely on client rendering."
          }
        ]
      },
      {
        "key": "responsibility",
        "label": "Responsibility",
        "weight": 0.15,
        "short": "Transparency, security basics and responsible choices.",
        "criteria": [
          {
            "key": "transparency",
            "label": "Public accountability",
            "max_points": 20,
            "description": "Privacy, terms, accessibility, contact and applicable registration information are discoverable."
          },
          {
            "key": "security",
            "label": "Security basics",
            "max_points": 20,
            "description": "The main response exposes sensible browser security headers."
          },
          {
            "key": "consent_design",
            "label": "Consent design",
            "max_points": 20,
            "description": "Tracking and consent markup avoids obvious one-sided choice patterns."
          },
          {
            "key": "supplier_disclosure",
            "label": "Supplier disclosure",
            "max_points": 20,
            "description": "Detected material visitor-facing providers are reflected in discoverable privacy information."
          },
          {
            "key": "sustainability_governance",
            "label": "Sustainability evidence",
            "max_points": 20,
            "description": "Green hosting, carbon.txt and public sustainability information provide discoverable evidence of digital sustainability practice."
          }
        ]
      }
    ]
  },
  "algorithm_sha256": "b43a38b3e1e6d0aec05906d5fc5453391f3c05c36e5719eefe476658a629888a",
  "source_fingerprint": "776015ffab279943bc0e62e1a1560dee112774e83ebbe252de586462e24c6659",
  "external_sources": {
    "dns": "Cloudflare 1.1.1.1 DNS over HTTPS",
    "green_hosting": "Green Web Foundation Greencheck API"
  },
  "metrics": {
    "pages_checked": 3,
    "browser_rendered_homepage": false,
    "average_page_kb": 482,
    "average_javascript_kb": 0,
    "average_resource_references": 97,
    "media_issue_count": 24,
    "cacheable_asset_percent": 100,
    "tracker_count": 0,
    "analytics_risk": 0,
    "nonessential_cookie_count": 0,
    "third_party_percent": 98,
    "invasive_tracker_count": 0,
    "us_provider_count": 2,
    "known_non_eu_data_percent": 0,
    "proprietary_embed_count": 0,
    "top_provider_share_percent": 60,
    "first_party_asset_percent": 2,
    "semantic_issue_count": 2,
    "keyboard_issue_count": 23,
    "unlabelled_control_percent": 0,
    "visual_issue_count": 0,
    "raw_text_ratio_percent": 100,
    "missing_transparency_links": 0,
    "security_header_count": 5,
    "consent_issue_score": 0,
    "undisclosed_provider_percent": 100,
    "responsible_default_issue_count": 0,
    "dns_record_count": 41,
    "policy_pages_discovered": 5,
    "legal_identifier_count": 0,
    "public_source_repository": false,
    "open_source_technology_count": 0,
    "open_technology_score": 61,
    "transparency_evidence_score": 72,
    "sustainability_evidence_score": 1,
    "green_hosting_verified": false,
    "carbon_txt_found": false
  },
  "analysis_quality": {
    "status": "good",
    "browser_result": "blocked-or-incomplete; static fallback used",
    "raw_homepage_status": 200,
    "raw_homepage_text_chars": 21112,
    "raw_homepage_resources": 230
  },
  "pages": [
    {
      "url": "https://www.bbc.co.uk/news",
      "status": 200,
      "browser_rendered": false,
      "html_bytes": 1016436
    },
    {
      "url": "https://www.bbc.co.uk/accessibility/",
      "status": 200,
      "browser_rendered": false,
      "html_bytes": 84544
    },
    {
      "url": "https://www.bbc.co.uk/aboutthebbc",
      "status": 200,
      "browser_rendered": false,
      "html_bytes": 360899
    }
  ],
  "documents": {
    "accessibility": {
      "url": "https://www.bbc.co.uk/accessibility/",
      "reachable": true
    },
    "sustainability": {
      "url": "https://www.bbc.co.uk/news/science_and_environment",
      "reachable": true
    },
    "about": {
      "url": "https://www.bbc.co.uk/iplayer/episode/m002qzv0?at_mid=IuRWoIrDzM&amp;at_campaign=The_Truth_About_My_Murder&amp;at_medium=display_ad&amp;at_campaign_type=owned&amp;at_nation=WLS&amp;at_audience_id=SS&amp;at_product=iplayer&amp;at_brand=m002qzv2&amp;at_ptr_name=bbc&amp;at_ptr_type=media&amp;at_format=image&amp;at_objective=consumption&amp;at_link_title=The_Truth_About_My_Murder&amp;at_bbc_team=BBC",
      "reachable": true
    },
    "terms": {
      "url": "https://www.bbc.co.uk/usingthebbc/terms",
      "reachable": true
    },
    "contact": {
      "url": "https://www.bbc.co.uk/contact",
      "reachable": true
    }
  },
  "legal_identifiers": [],
  "dns": {
    "records": {
      "A": [
        "151.101.64.81",
        "151.101.128.81",
        "151.101.192.81",
        "151.101.0.81"
      ],
      "AAAA": [
        "2a04:4e42:200::81",
        "2a04:4e42:400::81",
        "2a04:4e42:600::81",
        "2a04:4e42::81"
      ],
      "CNAME": [],
      "MX": [
        "10 cluster1.eu.messagelabs.com",
        "20 cluster1a.eu.messagelabs.com"
      ],
      "NS": [
        "dns0.bbc.co.uk",
        "dns0.bbc.com",
        "dns1.bbc.co.uk",
        "dns1.bbc.com",
        "ddns0.bbc.co.uk",
        "ddns0.bbc.com",
        "ddns1.bbc.co.uk",
        "ddns1.bbc.com"
      ],
      "TXT": [
        "v=spf1 ip4:212.58.224.0/19 ip4:132.185.0.0/16 +include:spf.sis.bbc.co.uk +include:spf.messagelabs.com ~all",
        "docusign=50f10407-e3e4-4f6a-aae4-712d4eb31329",
        "docusign=a10ad7b6-cf7e-472d-8157-23061f5b5116",
        "AqhruG504x81J/Xfsr7HTj4H/GbgcSiCDh6vzEb+x2RvclAu9VyYzaxkjgsnVnzT5P3qGwbGYXOE/FeVU5SUog==",
        "google-site-verification=Rhy5gpa1LeMjUY6gxrds3K4bhB_SUv-fYU9D3kpeAc8",
        "google-site-verification=g4yTjpPOOs0WodzDuZ19ElG4j-r0Ipc1FW8fsUTmGVo",
        "dropbox-domain-verification=l5djk65wpy3z",
        "adobe-idp-site-verification=9b850a4a56e3fac19aea1e0ac5db302e5cefab444cd73519dce1c72ccd4db058",
        "google-site-verification=RaiMXJBIiFvqXHd43kv_ekzmXT2l8ibq5Xy0mulndvU",
        "atlassian-domain-verification=SQsgJ5h/FqwMTXuSG/G4Nd1Gx6uX2keREOsZSa22D5XT46EsEuyaic8Aej4cR4Tr",
        "Huddle",
        "J0kgGm0XqA3/6pLD4DHeC5x/dAduzT809P1Iwx/PRCYvVS32rv75RIHKC2aVz47dJxKhPlxGf3h3KXiL6+dyXw==",
        "apple-domain-verification=jFFO0rdS9IrxgWUR",
        "msfpkey=3e29l8m08bqxp19k63t73fj5b",
        "docker-verification=aab67462-78f7-4ade-a86b-358645923430",
        "slack-domain-verification=wMCDUxtzgNFdmaVVeB6w6mDT8srz7ZIWqzV31zPu",
        "asv=0f1cb0a74a95764aafe8161309533029",
        "access-domain-verification=d2445ac4134b4b6322bf8d546458c73e00100ee3eca47fa1a8646350ea2c18bb",
        "mongodb-site-verification=XEpCXFkFHrAUlb6oIEIe3hJz6NjerLhU",
        "_globalsign-domain-verification=nru5P3kr6LQEU2v-_jv_VIViaFjoKlPwrKQsRqnKVf",
        "yahoo-verification-key=+1K3fj4MM7tT8erFBTbBdDwhSGqBf37fO60f7R7MHbE=",
        "jamf-site-verification=4q3gnFlazt-0uiCXTEJsgw"
      ],
      "WWW_CNAME": [
        "www.bbc.co.uk.pri.bbc.co.uk"
      ]
    },
    "record_count": 41,
    "carbon_txt_location": null
  },
  "open_technologies": [],
  "source_repository": null,
  "green_web": {
    "checked": true,
    "green": false,
    "hosted_by": null,
    "supporting_documents": []
  },
  "carbon_txt": {
    "found": false,
    "method": null,
    "location": null
  },
  "providers": [
    {
      "name": "Cloudflare",
      "us_headquartered": true
    }
  ],
  "tracker_urls": [],
  "assessment": {
    "id": "69fc90bc-1f4f-4432-915e-374dbf2cfd58",
    "domain": "bbc.co.uk",
    "site_name": "Home - BBC News",
    "website_url": "https://www.bbc.co.uk/news",
    "ecomark_version": "2",
    "overall_score": 69,
    "grade": "D",
    "summary": "Automated EcoMark v2 approximation using technical crawl evidence, DNS, public policy/identity signals and a Green Web hosting check. Browser Run was blocked or incomplete, so the normal public HTML response was used instead. Analysis quality: good.",
    "assessed_on": "2026-08-28",
    "categories": [
      {
        "category": "efficiency",
        "score": 65,
        "criteria": {
          "payload": {
            "level": 4,
            "points": 20
          },
          "javascript": {
            "level": 4,
            "points": 20
          },
          "requests": {
            "level": 1,
            "points": 5
          },
          "media": {
            "level": 0,
            "points": 0
          },
          "caching": {
            "level": 4,
            "points": 20
          }
        },
        "priority": "medium",
        "finding": "3 pages · ~482 KB measured/page · 97 resource references/page · 100% sampled assets cacheable.",
        "evidence": "3 pages · ~482 KB measured/page · 97 resource references/page · 100% sampled assets cacheable.",
        "why_it_matters": "Lighter pages consume less bandwidth and device work and remain usable on slower connections.",
        "action": "Lazy-load below-the-fold media and remove autoplay."
      },
      {
        "category": "privacy",
        "score": 80,
        "criteria": {
          "trackers": {
            "level": 4,
            "points": 20
          },
          "analytics": {
            "level": 4,
            "points": 20
          },
          "cookies": {
            "level": 4,
            "points": 20
          },
          "third_party_data": {
            "level": 0,
            "points": 0
          },
          "invasive_techniques": {
            "level": 4,
            "points": 20
          }
        },
        "priority": "low",
        "finding": "0 known trackers · 0 tracking-style response cookies · 98% third-party resource references.",
        "evidence": "0 known trackers · 0 tracking-style response cookies · 98% third-party resource references.",
        "why_it_matters": "Minimising tracking and third-party disclosure reduces profiling and unnecessary visitor data exposure.",
        "action": "Move commonly used assets and services first-party where practical."
      },
      {
        "category": "sovereignty",
        "score": 70,
        "criteria": {
          "provider_jurisdiction": {
            "level": 2,
            "points": 10
          },
          "data_location": {
            "level": 4,
            "points": 20
          },
          "portability": {
            "level": 4,
            "points": 20
          },
          "concentration": {
            "level": 2,
            "points": 10
          },
          "openness": {
            "level": 2,
            "points": 10
          }
        },
        "priority": "medium",
        "finding": "2 US-headquartered visitor-facing provider ecosystems · 2% first-party assets · open technology 61/100 · no framework signal required/detected. DNS: NS dns0.bbc.co.uk, dns0.bbc.com · MX 10 cluster1.eu.messagelabs.com, 20 cluster1a.eu.messagelabs.com · CNAME www.bbc.co.uk.pri.bbc.co.uk.",
        "evidence": "2 US-headquartered visitor-facing provider ecosystems · 2% first-party assets · open technology 61/100 · no framework signal required/detected. DNS: NS dns0.bbc.co.uk, dns0.bbc.com · MX 10 cluster1.eu.messagelabs.com, 20 cluster1a.eu.messagelabs.com · CNAME www.bbc.co.uk.pri.bbc.co.uk.",
        "why_it_matters": "A more portable and less concentrated stack gives organisations more control over technology and jurisdiction.",
        "action": "Serve fonts, scripts and media first-party where practical."
      },
      {
        "category": "accessibility",
        "score": 70,
        "criteria": {
          "semantics": {
            "level": 2,
            "points": 10
          },
          "keyboard": {
            "level": 0,
            "points": 0
          },
          "controls": {
            "level": 4,
            "points": 20
          },
          "visual": {
            "level": 4,
            "points": 20
          },
          "resilience": {
            "level": 4,
            "points": 20
          }
        },
        "priority": "medium",
        "finding": "2 semantic issues · 23 keyboard markup issues · 0% unlabelled controls · 100% raw/rendered text ratio.",
        "evidence": "2 semantic issues · 23 keyboard markup issues · 0% unlabelled controls · 100% raw/rendered text ratio.",
        "why_it_matters": "Accessible, resilient markup works for more people, assistive technology and older or constrained devices.",
        "action": "Replace clickable non-controls and positive tabindex values with native keyboard-accessible controls."
      },
      {
        "category": "responsibility",
        "score": 55,
        "criteria": {
          "transparency": {
            "level": 2,
            "points": 10
          },
          "security": {
            "level": 4,
            "points": 20
          },
          "consent_design": {
            "level": 4,
            "points": 20
          },
          "supplier_disclosure": {
            "level": 0,
            "points": 0
          },
          "sustainability_governance": {
            "level": 1,
            "points": 5
          }
        },
        "priority": "high",
        "finding": "Privacy ✗ · Cookies n/a · Terms ✓ · Accessibility ✓ · Contact/About ✓. Public registration IDs: none detected. no verified green-hosting evidence found. carbon.txt ✗ · 5/5 security headers.",
        "evidence": "Privacy ✗ · Cookies n/a · Terms ✓ · Accessibility ✓ · Contact/About ✓. Public registration IDs: none detected. no verified green-hosting evidence found. carbon.txt ✗ · 5/5 security headers.",
        "why_it_matters": "Transparent, secure defaults make digital impact understandable and give visitors meaningful choices.",
        "action": "Name material visitor-facing technology providers in the privacy notice when they receive visitor data."
      }
    ]
  }
}
