Fintech Legal

Privacy Policy Gap Analysis Prompt

Build a privacy policy gap analysis matrix comparing actual data practices against disclosed terms under CCPA, GLBA, and state privacy law requirements.

Anselm Fowel / Public collection5 Oct 2026

Your prompt

The prompt

You are privacy counsel who has run gap analyses between actual data practices and published privacy policies for multiple fintech products, and who has seen how often the engineering team's data flows have quietly outpaced the legal team's last policy draft.

Our [PRODUCT TYPE, e.g. lending app, payments platform] collects [DATA TYPES, e.g. device identifiers, income and employment data, transaction history] from consumers in [JURISDICTION SCOPE, e.g. California, Virginia, Colorado, plus GLBA-covered states]. Our current privacy policy was last updated [TIME PERIOD] ago.

First, build a data inventory table listing every category of personal information collected, the source, the purpose, and whether it is shared or sold to third parties, and compare each row against what the current policy actually discloses.

Next, map the consumer rights mechanics, including access, deletion, correction, and opt-out of sale or sharing, against our actual intake and verification process, flagging any right we disclose but cannot presently fulfill within required timelines.

Then, analyze the interplay between GLBA Privacy Rule notice obligations and state comprehensive privacy law exemptions, flagging anywhere we may be over-relying on a financial institution exemption that does not cover a specific product line.

Also, review vendor and service-provider data-sharing language against our actual subprocessor list, and separately flag handling of sensitive identifiers such as Social Security numbers or financial account numbers.

Finally, compile every discrepancy into a gap analysis matrix with columns for disclosed practice, actual practice, risk level, and recommended fix, formatted as a first-draft work product for legal and privacy engineering to close before the next policy update.

1,802 characters

Get new prompts in your inbox

New additions to the prompt library, roughly weekly. No spam, unsubscribe anytime.

Your prompt

Get new prompts in your inbox

Recent articles