Hub rules-privacy

rules-privacy

v2 public Verified

Privacy

Privacy rules provide a foundation for data protection and user confidentiality. These rules govern the handling of sensitive information and ensure compliance with global privacy standards.

@sigmashakeinc 2 pulls 5 rules published Apr 8, 2026 synced Oct 11, 2026 sigmashakeinc/rules/rulesets/rules-privacy →
Severity
3 error 1 warn 1 info
demo.cast
Privacy rules provide a foundation for data protection and user confidentiality. These rules govern the handling of sensitive information and ensure compliance with global privacy standards.

Rules index

5 governance rules

Indexed from the repository's .rules files, grouped by technology. Expand any rule to read the raw source.

privacy

ask-data-retention info log

Personal data being stored. Ensure your data retention policy is documented — GDPR requires data to be deleted when no longer needed for its original purpose.

Rule source requires an active Pro or Enterprise subscription.
no-log-pii-fields error block

Logging PII fields (email, phone, SSN, credit card) violates GDPR Article 5 and most privacy regulations. Log user IDs or anonymized identifiers instead.

Rule source requires an active Pro or Enterprise subscription.
no-pii-in-url-params error block

PII in URL query parameters is logged in server access logs, browser history, and CDN logs. Pass sensitive data in the request body or headers instead.

Rule source requires an active Pro or Enterprise subscription.
no-plaintext-sensitive-fields error block

Storing passwords, SSNs, or credit card numbers in plaintext violates PCI-DSS and GDPR. Hash passwords (bcrypt/argon2), encrypt SSNs, and use a payment processor for card data.

Rule source requires an active Pro or Enterprise subscription.
no-tracking-without-consent warning log

Analytics or tracking script detected. GDPR and CCPA require explicit user consent before loading third-party tracking. Ensure this loads only after consent is granted.

Rule source requires an active Pro or Enterprise subscription.

Version metadata

Published metadata

The hash-locked record of this published ruleset. When source contents change, the maintainer resyncs and the version bumps.

Version
v2
Published
Apr 8, 2026
Source commits
0
Synced
Oct 11, 2026
Hash
af14a9ba5f884daf942b92037fcf9d20a2e286341b48d1a57ecb61f2429ed50b
Signature
Verified (publisher key)
Tested with
claude-code@current
Plan
Starter (free)
Visibility
Public

Source history

Recent commits

Latest commits touching rulesets/rules-privacy/.sigmashake/rules in sigmashakeinc/rules/rulesets/rules-privacy. The published version only bumps when a maintainer resyncs.

No commit history available.