# Cookie Audit Report Template

## Organization: [Organization Name]
## Audit Date: [YYYY-MM-DD]
## Auditor: [Name/Role]
## Report Version: [X.X]

---

## 1. Executive Summary

| Metric | Value |
|--------|-------|
| Total cookies found | [N] |
| Strictly necessary (exempt) | [N] |
| Analytics/performance | [N] |
| Functionality | [N] |
| Advertising/targeting | [N] |
| Unknown/unclassified | [N] |
| Cookies exceeding CNIL 13-month limit | [N] |
| Third-party tracking vendors | [N] |
| Critical compliance gaps | [N] |

**Overall Assessment**: [Compliant / Partially Compliant / Non-Compliant]

---

## 2. Cookie Inventory

### 2.1 Strictly Necessary Cookies (Consent Exempt)

| Cookie Name | Domain | Duration | Purpose | WP 194 Category |
|-------------|--------|----------|---------|-----------------|
| | | | | |

### 2.2 Analytics/Performance Cookies (Consent Required)

| Cookie Name | Domain | Duration | Purpose | Third-Party Vendor | CNIL Compliant Duration |
|-------------|--------|----------|---------|-------------------|------------------------|
| | | | | | |

### 2.3 Functionality Cookies (Consent Required)

| Cookie Name | Domain | Duration | Purpose | Persistent |
|-------------|--------|----------|---------|------------|
| | | | | |

### 2.4 Advertising/Targeting Cookies (Consent Required)

| Cookie Name | Domain | Duration | Purpose | Third-Party Vendor |
|-------------|--------|----------|---------|-------------------|
| | | | | |

### 2.5 Unclassified Cookies (Requires Review)

| Cookie Name | Domain | Duration | Discovered On Page | Recommended Category |
|-------------|--------|----------|--------------------|---------------------|
| | | | | |

---

## 3. Web Storage Entries

### 3.1 localStorage

| Key | Detected On Page | Contains PII | Category |
|-----|-----------------|-------------|----------|
| | | | |

### 3.2 sessionStorage

| Key | Detected On Page | Contains PII | Category |
|-----|-----------------|-------------|----------|
| | | | |

---

## 4. Third-Party Tracking Requests

| Vendor | Domain | Request Type | Data Shared | Consent Category |
|--------|--------|-------------|-------------|-----------------|
| | | | | |

---

## 5. Planet49 Compliance Assessment

| Requirement | Status | Evidence | Gap |
|-------------|--------|----------|-----|
| Active consent mechanism (not pre-ticked) | [ ] Compliant / [ ] Non-Compliant | | |
| Cookie duration disclosed before consent | [ ] Compliant / [ ] Non-Compliant | | |
| Third-party access disclosed before consent | [ ] Compliant / [ ] Non-Compliant | | |
| Granular per-category consent | [ ] Compliant / [ ] Non-Compliant | | |
| No cookie walls | [ ] Compliant / [ ] Non-Compliant | | |
| Equal ease of withdrawal | [ ] Compliant / [ ] Non-Compliant | | |

---

## 6. Compliance Gap Register

| Gap ID | Cookie/Issue | Severity | Description | Remediation | Deadline | Owner |
|--------|-------------|----------|-------------|-------------|----------|-------|
| GAP-001 | | High/Medium/Low | | | | |

---

## 7. Cookie Policy Review

| Policy Element | Present | Accurate | Action Needed |
|---------------|---------|----------|---------------|
| Complete cookie list | [ ] | [ ] | |
| Cookie durations stated | [ ] | [ ] | |
| Third-party vendors named | [ ] | [ ] | |
| Category descriptions | [ ] | [ ] | |
| How to manage cookies | [ ] | [ ] | |
| Last updated date | [ ] | [ ] | |

---

## 8. Recommendations

### Immediate Actions (Within 2 weeks)
1. [Action item]

### Short-Term Actions (Within 1 month)
1. [Action item]

### Medium-Term Actions (Within 3 months)
1. [Action item]

---

## 9. Next Audit

| Parameter | Value |
|-----------|-------|
| Scheduled date | [YYYY-MM-DD] |
| Scope changes | [Any additions/removals] |
| Special focus areas | [Based on this audit's findings] |

---

**Approved by**: [DPO Name] | **Date**: [YYYY-MM-DD]