Home Verified permalink · Latest public audit

nhs.uk

UK compliance audit.

Scan complete

Compliance Score

How the score was calculated

Starting score: 100
2 medium findings: −10
Final score: 90

AI Analysis

The NHS UK website has achieved a score of 90/100 in its cookie consent and privacy compliance audit, passing 19 out of 22 evaluated checks. However, the audit identified critical non-compliance issues: the cookie banner does not meet GDPR requirements due to an incomplete explanation of cookies and a lack of clarity on user rights to withdraw consent and data sharing practices with third parties.

Report Details

Playbook: UK Cookie Compliance
Domain: nhs.uk
Started At: 1 Jan 2026, 21:57
Duration: 2m 48s
Total Checks: 35
Report ID: 65w0KQdfa64u

Check Results

Data Capture

3 checks All passed

capture_html_initial

INFO

Captured HTML (206281 bytes) from https://www.nhs.uk/

Captured HTML:

View rendered

screenshot_initial

INFO

Screenshot saved: https://artifacts.smesolutions.uk/artifacts/artifacts/de7ee9a2-2dba-4096-81d5-510b33fdc43a/screenshots/initial_state.png

Screenshot Evidence:

Click to view full size

capture_cookies_initial

INFO

Captured 1 cookies

Captured Cookies:

View full list

Pre-Consent Cookies

1 check All passed

check_initial_cookies

CRITICAL

No non-essential cookies found

PECR Regulation 6(1)

Cookies (except strictly necessary) require user consent BEFORE being set

View guidance

Cookie Consent Banner

6 checks All passed

find_banner

INFO

Found consent banner via heuristic (height: 325px)

PECR Regulation 6(2)

Clear and comprehensive information must be provided about cookie use

View guidance

find_cookie_banner

INFO

Value true == true: true

verify_banner_visible

INFO

Element visibility is true as expected

screenshot_banner

INFO

Screenshot saved: https://artifacts.smesolutions.uk/artifacts/artifacts/de7ee9a2-2dba-4096-81d5-510b33fdc43a/screenshots/cookie_banner.png

Screenshot Evidence:

Click to view full size

extract_banner_text

Extracted 50 words

check_banner_content

LOW

Value 50 >= 10: true

PECR Regulation 6(2)(a)

Cookie notice must provide clear, comprehensive information about purposes

View guidance

Cookie Controls

4 checks All passed

find_reject_button_semantic

INFO

Found reject button: <?> (confidence: 100%)

find_accept_button_semantic

INFO

Found accept button: <button#nhsuk-cookie-banner__link_accept_analytics.nhsuk-button> text='Accept analytics cookies' (confidence: 100%)

find_reject_button_any

CRITICAL

Value 1 == 1: true

find_accept_button_any

Value 1 == 1: true

Dark Pattern Detection

1 check All passed

compare_button_prominence

HIGH

Buttons have similar prominence

EDPB Guidelines 03/2022 on Dark Patterns

Reject option must have equal prominence to accept - asymmetric design is a deceptive pattern

View guidance

AI Dark Pattern Analysis

2 checks All passed

check_dark_patterns_vision

HIGH

No specific dark patterns identified in cookie banner

EDPB Guidelines 03/2022 on Dark Patterns

Visual deceptive patterns including color manipulation and hidden controls are prohibited

View guidance

check_deceptive_buttons

HIGH

Button labels are clear and not deceptive

EDPB Guidelines 03/2022 on Dark Patterns

Button labels must accurately reflect their function without ambiguity or deception

View guidance

AI Content Analysis

3 checks1 failed

check_banner_quality_llm

MEDIUM-5

Banner content is not GDPR compliant

Cookie banner does not meet GDPR compliance requirements

incomplete explanation of cookies

lack of mention about user rights to withdraw consent

unclear on whether data is shared with third parties

missing information about the types of cookies used

Banner Text Analyzed:

"Cookies on the NHS website We use some cookies to make this website work. Help improve online NHS services by also accepting analytics cookies. Your choice will be remembered for other online NHS services, such as the NHS App. Accept analytics cookies Reject analytics cookies More information about our cookies"

PECR Regulation 6(2)(a)

Cookie notices must provide clear, comprehensive information about purposes

View guidance

check_language_consistency

LOW

Banner language (en) matches page language

PECR Regulation 6(2)(a)

Information must be provided in a language users can understand

check_cookie_purposes

MEDIUM

No cookies available for purpose matching

PECR Regulation 6(2)(a)

All cookies used must be disclosed and explained in the notice

View guidance

AI Accessibility Analysis

1 check1 failed

check_visual_accessibility

MEDIUM-5

Failed to capture banner screenshot: context deadline exceeded

Equality Act 2010

Cookie banners must be accessible to users with disabilities including visual impairments

View guidance

Consent Verification

1 check1 failed

click_reject_button

Failed to resolve element: element not found or not visible

Accessibility

1 check All passed

wcag_aa_scan

HIGH

No accessibility violations found (WCAG AA)

Public Sector Bodies Accessibility Regulations 2018, Equality Act 2010

UK websites must meet WCAG 2.1 Level AA standards; failure may constitute disability discrimination

View guidance

Share this report

Wear the badge.

Score 90/100

Live preview

Drop one of these snippets into your site footer, About page, or README. The badge auto-links back to this report so visitors can verify the result.

HTML

<a href="https://smesolutions.uk/verify/uk-compliance/nhs.uk" target="_blank" rel="noopener"><img src="https://smesolutions.uk/api/verify/uk-compliance/nhs.uk/badge.svg" alt="UK Compliance Audit 90/100 — nhs.uk" width="280" height="64" /></a>

Markdown

[![UK Compliance Audit 90/100 — nhs.uk](https://smesolutions.uk/api/verify/uk-compliance/nhs.uk/badge.svg)](https://smesolutions.uk/verify/uk-compliance/nhs.uk)