---

layout: col-sidebar
title: OWASP Top 10 Privacy Risks
tags: PrivacyTop10
level: 3
type: documentation

---
![Version 2.0](https://img.shields.io/badge/version-2.0-brightgreen)
![OWASP Lab Project](https://img.shields.io/badge/OWASP-Lab-yellow)

The OWASP Top 10 Privacy Risks Project provides a top 10 list for privacy risks in web applications and related countermeasures. It covers technological and organizational aspects that focus on real-life risks, not just legal issues. The Project provides tips on how to implement privacy by design in web applications with the aim of helping developers and web application providers to better understand and improve privacy. The list uses the OECD Privacy Guidelines as a framework and can also be used to assess privacy risks associated with specific web applications.

## Top 10 Privacy Risks
The following table shows version 2.0 of the OWASP Top 10 Privacy Risks and compares it to the ranking of 2014.

```text
 2021  2014  Title 
 P1    1     Web Application Vulnerabilities 
 P2    2     Operator-sided Data Leakage 
 P3    3     Insufficient Data Breach Response 
 P4    New   Consent on Everything 
 P5    5     Non-transparent Policies, Terms and Conditions 
 P6    4     Insufficient Deletion of User Data 
 P7    New   Insufficient Data Quality
 P8    9     Missing or Insufficient Session Expiration 
 P9    13    Inability of Users to Access and Modify Data 
 P10   6     Collection of Data Not Required for the User-Consented Purpose
```

Detailed information is provided in the Top 10 Privacy Risks tab.

## Quick Download

* [Top 10 Privacy Risks Countermeasures v2.0 (PDF)](/OWASP_Top_10_Privacy_Risks_Countermeasures_v2.0.pdf)
* [Top 10 Privacy Risks Presentation v2.0 (PPTX)](/assets/OWASPTop10PrivacyRisks_v2.pptx)
* [Presentation from OWASP Roundtable "Stammtisch" Hamburg 2021 (PDF)](https://owasp.org/www-chapter-germany/stammtische/hamburg/assets/slides/2021-08-05_OWASP%20Top%2010%20Privacy%20Risks%20v2.0.pdf)
  
## Licensing

OWASP Top 10 Privacy Risks Project is free to use. It is licensed under the [Creative Commons CC-BY-SA v3.0 License](https://creativecommons.org/licenses/by-sa/3.0/).