One-Page Privacy Audit Checklist What to Include

 

A complete one-page privacy audit checklist covering 7 core sections with 30 to 40 checkbox items — designed to be scanned in under 2 minutes and completed in under 30 minutes each month.

A one-page privacy audit checklist should include 7 core sections: password hygiene, two-factor authentication, browser privacy settings, social media permissions, phone and app privacy, data broker opt-outs, and a review schedule. When I think about it, the biggest reason most people skip privacy audits is that every guide online feels like a 20-page college textbook nobody wants to read. A single print-friendly page with clear checkboxes changes that completely. This guide breaks down exactly what belongs on your one-page privacy audit checklist so you can print it, pin it to your wall, and run through it in under 30 minutes each month.

Key Takeaway

A complete one-page privacy audit checklist covers 7 sections with roughly 30 to 40 checkbox items total.

The checklist should be scannable in under 2 minutes and completable in under 30 minutes.

Print-friendly formatting means no color dependency, clear section headers, and generous checkbox spacing.

Table of Contents

① 🔑 Password and Authentication Section for Your Privacy Audit Checklist

② 🌐 Browser Privacy Settings Section for Your Checklist

③ 📱 Phone and App Permissions on a Privacy Audit Checklist

④ 👤 Social Media Privacy Section Every Checklist Needs

⑤ 🗂️ Data Broker Opt-Outs and Account Cleanup Comparison

⑥ 🖨️ Print-Friendly Formatting Tips for Your Privacy Audit Checklist

⑦ ❓ FAQ

① 🔑 Password and Authentication Section for Your Privacy Audit Checklist

The first section of any one-page privacy audit checklist should cover passwords and authentication because compromised credentials are the single most common entry point for privacy breaches. A reused password on a breached service can cascade into your email, banking, and social media accounts within hours. This section does not need to be long, but it needs to be specific and actionable. Every item should be a concrete yes-or-no checkbox that you can verify in under a minute.

The essential checkbox items for this section start with whether you are using a dedicated password manager. Tools like Bitwarden, 1Password, or the built-in managers in Chrome and Apple Keychain all qualify. The key question is whether every account has a unique, randomly generated password rather than something you typed from memory. Your checklist should include a checkbox for running a password breach check, which most password managers offer as a built-in feature. Chrome's Safety Check, for example, flags compromised passwords in under 30 seconds.

Two-factor authentication is the single most effective upgrade you can add to any account, and your checklist should include a checkbox for verifying it is active on every critical account. Critical accounts include email, banking, cloud storage, your password manager itself, and any account that could be used to reset passwords elsewhere. The checklist should specify the type of 2FA as well. SMS-based codes are better than nothing, but authenticator apps or hardware security keys provide significantly stronger protection.

There was a time when a streaming service password got leaked in a breach and within the same day suspicious login attempts appeared on two other accounts that shared the same password. The sinking feeling of watching notification emails pile up while scrambling to change passwords was something that stuck deeply. That experience made it clear that a monthly password check is not paranoia but basic digital hygiene. The lesson was simple: unique passwords and 2FA on everything that matters.

Your checklist should also include a checkbox for reviewing recovery options. Recovery email addresses and phone numbers should be current and accessible. If you changed your phone number six months ago and never updated your Google or Apple account recovery settings, you could be locked out permanently if something goes wrong. This is an item people forget constantly, and it takes less than 2 minutes to verify.

A good password section on your one-page checklist should have no more than 5 to 6 checkbox items to keep it scannable. Each item should be phrased as a clear action: "Run password breach check," "Verify 2FA on email," "Confirm recovery phone number is current." Avoid vague items like "improve password security" because they do not translate into a specific action you can complete and check off.

Passwords and authentication are the foundation of every privacy audit, and this section should always appear first on your checklist. Next, we will cover what browser privacy items belong on the page.

💡 Tip: If you are building your checklist from scratch, start this section with just 3 items: password breach check, 2FA verification on email, and recovery option review. You can expand later once the habit is established.

② 🌐 Browser Privacy Settings Section for Your Checklist

The browser privacy section of your one-page privacy audit checklist covers the settings that control how your browsing activity is tracked, stored, and shared. Since most people spend hours each day inside a browser, this section has an outsized impact on overall privacy. The goal is not to list every possible browser setting but to identify the highest-leverage items that can be checked quickly during a monthly review. Five to seven checkbox items are ideal for keeping this section concise and print-friendly.

The first checkbox should cover third-party cookies. Blocking third-party cookies is the single biggest browser-level defense against cross-site tracking. Your checklist item should read something like "Confirm third-party cookies are blocked" with a note to review the exception list for stale entries. The second item should address site permissions for camera, microphone, location, and notifications. A monthly scan of the allowed sites list under Site Settings takes about 5 minutes and catches permission creep before it becomes a problem.

Safe Browsing mode and HTTPS-First mode deserve their own checkbox items. Safe Browsing protects against phishing and malicious downloads, while HTTPS-First mode ensures your connections are encrypted. Both can be verified in the Security section of Chrome settings in under 1 minute. Your checklist should also include a checkbox for Secure DNS, which encrypts your DNS queries and is especially important on public Wi-Fi networks. If Secure DNS has been silently disabled by a network change or browser update, your DNS queries are traveling in plain text and visible to anyone on the same network.

Extension audit is another essential browser checklist item. Extensions are the biggest hidden data path in any browser. Your checkbox should prompt you to remove unused extensions and verify that remaining ones have minimum necessary permissions. Privacy and security researchers consistently recommend keeping installed extensions to 5 or fewer to minimize attack surface. An extension you installed once for a specific task and forgot about can quietly read every page you visit if it has broad permissions.

The browser section of your privacy audit checklist should also include a checkbox for clearing browsing data selectively. This does not mean wiping everything monthly, which is disruptive and unnecessary. Instead, the item should prompt you to delete site data for services you no longer use and review autofill entries for outdated or sensitive information. Stale autofill data with old addresses, phone numbers, or even partial credit card numbers sitting in your browser is a privacy liability that is easy to overlook.

If you use multiple browser profiles for work, personal, and banking, your checklist should include a quick verification that profiles are properly separated and that you are not accidentally syncing personal data to a work profile or vice versa. Profile separation is one of the most effective privacy tools browsers offer, but it only works if you maintain the boundaries consistently.

A well-designed browser privacy section covers cookies, permissions, security settings, extensions, and data cleanup in 5 to 7 checkboxes. In the next section, we will move from the browser to your phone and app permissions.

📌 Summary: Essential browser checklist items include third-party cookie status, site permissions review, Safe Browsing and HTTPS-First verification, Secure DNS check, extension audit, and selective data cleanup.

③ 📱 Phone and App Permissions on a Privacy Audit Checklist

Your phone is the most privacy-sensitive device you own. It knows your location around the clock, has access to your camera and microphone, stores your messages and photos, and runs dozens of apps that each request their own set of permissions. The phone and app section of your one-page privacy audit checklist should focus on the permissions and settings that leak the most data with the least user awareness. This section typically needs 5 to 7 checkbox items to cover the essentials without overwhelming the page.

The first checkbox should address location services. Both iOS and Android allow you to review which apps have access to your location and whether that access is set to "Always," "While Using," or "Never." During your monthly audit, open your phone's privacy settings and check the location permissions list. Any app that has "Always" access but does not genuinely need constant location data, such as a weather app or a food delivery service you use once a month, should be downgraded to "While Using" or "Never." This single change can dramatically reduce the amount of location data collected about you.

Camera and microphone permissions on your phone work the same way. Review the list of apps that can access your camera and microphone, and revoke access from any app that does not need it for core functionality. A calculator app or a flashlight app has no business accessing your microphone. Both iOS and Android now show indicator dots or icons when the camera or microphone is actively in use, but these indicators only help if you actually notice them, which is why a monthly permissions review matters.

Your checklist should include a checkbox for reviewing app notification permissions. Notification access may seem harmless, but apps with notification permissions can track your activity patterns and, in some cases, read the content of notifications from other apps. Disable notification access for any app that does not need it. While you are in the notifications settings, also review which apps are allowed to show notifications at all and turn off the ones that primarily send marketing messages.

The advertising identifier on your phone is another critical checklist item. Both iOS and Android assign a unique advertising ID to your device that apps and ad networks use to track your behavior across different apps. On iOS, you can disable tracking entirely under Settings, Privacy and Security, Tracking. On Android, you can delete your advertising ID under Settings, Privacy, Ads. Resetting or disabling your advertising ID once a month breaks the continuity of cross-app tracking profiles that advertisers build about you.

App cleanup deserves its own checkbox. Scroll through your installed apps and delete anything you have not used in the past 30 days. Unused apps still run background processes, collect data, and maintain permissions you granted months ago. Removing them is the simplest way to shrink your mobile privacy footprint. If you might need the app again later, you can always reinstall it, and a fresh install means fresh permissions rather than legacy access you forgot about.

The phone section of your privacy audit checklist should cover location, camera, microphone, notifications, advertising ID, and app cleanup in 5 to 7 focused checkboxes. Next, we will cover what social media privacy items belong on a print-friendly checklist.

⚠️ Warning: If an app requests permissions that seem unrelated to its purpose, such as a game requesting microphone access or a photo editor requesting your contacts, treat it as a red flag and consider removing it entirely.

④ 👤 Social Media Privacy Section Every Checklist Needs

Social media accounts are among the richest targets for privacy erosion because they combine personal information, behavioral data, and social connections in one place. The social media section of your one-page privacy audit checklist should focus on the settings and habits that expose the most data with the least effort to fix. Platforms change their privacy options frequently, which is precisely why monthly reviews are necessary. What was private last month may have been reset or restructured by a platform update this month.

The first checkbox should prompt you to review the privacy settings on each active platform. On Facebook, check who can see your posts, friend list, and profile information. On Instagram, verify whether your account is public or private and who can send you messages. On X (formerly Twitter), review who can tag you, find you by email or phone number, and see your liked posts. Each platform hides these settings in slightly different places, but the core question is always the same: who can see what, and is that what you actually want.

Connected apps and services deserve a dedicated checkbox. Over time, you accumulate third-party apps that have access to your social media accounts through OAuth or similar login integrations. These connected apps can read your profile data, post on your behalf, and in some cases access your direct messages. Go to the connected apps or authorized applications section of each platform and remove anything you do not recognize or no longer use. A single compromised third-party app with broad social media permissions can expose your entire account history and contact list.

Login alerts are a simple but powerful checklist item. Most major platforms offer the option to notify you when someone logs into your account from a new device or location. Enabling these alerts means you will know immediately if your account is accessed without your knowledge. Your checklist should include a checkbox for verifying that login alerts are turned on for every active social media account. This takes about 1 minute per platform and provides an early warning system that costs nothing.

Old or unused social media accounts are a frequently overlooked privacy liability. An old Myspace, Tumblr, or LinkedIn account you created years ago and forgot about still contains personal information, may still be publicly searchable, and could be targeted in a data breach. Your monthly checklist should include a checkbox prompting you to identify and delete at least one unused account. The fewer dormant accounts you have floating around the internet, the smaller your overall attack surface becomes.

Profile content review is the final social media checkbox worth including. Scroll through your recent posts and check whether anything reveals more than you intended. Photos with location metadata, posts mentioning your workplace or daily routine, and public comments on sensitive topics can all be used for social engineering or targeted attacks. A monthly scroll-through takes about 5 minutes and gives you a chance to remove or restrict anything that no longer reflects what you want public.

The social media section of your privacy audit checklist should cover platform privacy settings, connected apps, login alerts, unused accounts, and profile content in 5 to 6 checkboxes. In the next section, we will cover data broker opt-outs and account cleanup, two areas that most personal checklists miss entirely.

💡 Tip: Set a calendar reminder to check social media privacy settings every month. Platforms like Facebook and Instagram frequently update their privacy menus, and a setting you configured 3 months ago may have been moved or reset.

⑤ 🗂️ Data Broker Opt-Outs and Account Cleanup Comparison

Privacy audit checklist comparing data broker opt-outs, account cleanup tasks, time needed, and review frequency.

Checklist Item	What It Covers	Time Needed	Frequency
Data broker opt-out	Remove personal info from broker databases	15 to 30 minutes (first time), 5 minutes (follow-up)	Quarterly
Google account privacy checkup	Activity controls, ad settings, data sharing	5 to 10 minutes	Monthly
Email account cleanup	Unsubscribe from lists, review forwarding rules	10 minutes	Monthly
Old account deletion	Close unused accounts that hold personal data	5 to 15 minutes per account	Quarterly
Cloud storage review	Check shared files, remove sensitive documents	5 to 10 minutes	Monthly

Data broker opt-outs are one of the most impactful privacy actions most people never take. Data brokers are companies that collect, aggregate, and sell personal information including your name, address, phone number, email, and in some cases your social security number. These brokers build profiles from public records, online activity, purchase history, and other sources, then sell that data to advertisers, background check services, and sometimes scammers. Opting out removes your information from their databases, or at least from the publicly searchable versions.

In January 2026, California launched the DELETE Act's DROP platform (Delete Request and Opt-out Platform) at privacy.ca.gov/drop. This tool allows California residents to submit a single request that instructs all registered data brokers to delete their personal information. Starting August 1, 2026, data brokers must process these requests within 90 days. Even if you are not in California, many data brokers honor opt-out requests from any U.S. resident. Your checklist should include a checkbox for submitting or verifying data broker opt-out requests at least quarterly.

For people outside California, services like Incogni, Kanary, and Optery automate the opt-out process across hundreds of data brokers for a monthly fee, typically between 7 and 13 dollars per month. Your checklist can include a checkbox for either manual opt-outs through individual broker sites or a verification that your automated removal service is actively running and producing deletion confirmations. The first round of opt-outs takes 15 to 30 minutes if done manually, but follow-up checks only take about 5 minutes per quarter.

Google account privacy is another cleanup item that belongs on your checklist. Google's Privacy Checkup at myaccount.google.com/privacycheckup walks you through activity controls, ad personalization, data sharing with third-party apps, and location history. Your checklist should include a checkbox for running this checkup monthly. Pay particular attention to Web and App Activity, which logs your search history and activity across Google services. Setting auto-delete to 3 months keeps useful recent data while limiting long-term accumulation.

Email account cleanup is a checklist item that directly reduces your exposure to phishing and data harvesting. Unsubscribe from marketing emails you no longer read, review email forwarding rules for any you did not create, and check connected apps that have access to your email through OAuth. A compromised or abandoned third-party app with email access can read your messages silently. This review takes about 10 minutes and is one of the highest-impact items on the entire checklist.

Cloud storage review rounds out this section. If you use Google Drive, Dropbox, iCloud, or OneDrive, check your shared files and folders monthly. Files you shared with a colleague two years ago may still be accessible to them. Sensitive documents like tax returns, medical records, or identity documents should not sit in cloud storage with sharing enabled. Revoke sharing permissions on anything that no longer needs to be shared, and consider whether sensitive files should be in cloud storage at all.

Data broker opt-outs, Google privacy checkup, email cleanup, old account deletion, and cloud storage review belong on every serious privacy audit checklist. The final section covers how to format your checklist so it actually works as a single printed page.

📌 Summary: Data brokers are the largest source of personal information leakage most people ignore. California's DROP platform and automated removal services make opt-outs easier than ever. Add a quarterly data broker checkbox and a monthly Google privacy checkup to your one-page checklist.

⑥ 🖨️ Print-Friendly Formatting Tips for Your Privacy Audit Checklist

A privacy audit checklist only works if you actually use it, and the biggest factor in consistent use is how the checklist is formatted. A print-friendly one-page checklist needs to be scannable in under 2 minutes, completable in under 30 minutes, and physically comfortable to write on. This means the design itself is just as important as the content. If the checklist is cluttered, uses tiny fonts, or packs too many items onto the page, people stop using it after the first month.

Keep the total number of checkbox items between 30 and 40. This sounds like a lot for one page, but with compact formatting and clear section headers, it fits comfortably on a single letter-size or A4 sheet. Each section should have 5 to 7 items, and you should aim for 6 to 7 sections total. Use short, action-oriented phrases for each item instead of full sentences. "Block third-party cookies" is better than "Make sure that third-party cookies are blocked in your browser's privacy and security settings." Every word that does not add clarity should be removed.

The most effective print-friendly checklists use a monochrome design with no color dependency, because many people print in black and white. Instead of using colored text for emphasis, use bold text, section dividers, and slightly larger font sizes for headers. Checkboxes should be at least 5 millimeters square so they are easy to mark with a pen. Leave a small blank space next to each section for notes, such as the date you completed it or a reminder to follow up on a specific item.

Section headers should be visually distinct and immediately recognizable. Use a consistent format like a number, a short title, and a horizontal line underneath. For example: "1. Passwords and Authentication" followed by a thin divider and then the checkbox items. This visual pattern lets your eyes jump between sections quickly without reading every item. When you are doing your monthly review, you can skip sections you already completed earlier in the month and focus on the ones that need attention.

Include a date field and a completion tracker at the top of the page. A simple row of 12 boxes labeled January through December lets you mark each month as you complete the audit. This visual progress tracker creates a sense of accomplishment and makes it obvious when you have skipped a month. Consistency is the entire point of a recurring privacy audit, and a visible tracker is one of the simplest tools for maintaining that consistency.

At the bottom of the page, include a small quick-reference section with the most important URLs and menu paths. Items like "Chrome cookies: Settings then Privacy and security then Third-party cookies" or "Google Privacy Checkup: myaccount.google.com/privacycheckup" save time during the audit and eliminate the need to search for these paths each month. Keep this reference section to 5 to 8 lines maximum so it does not crowd the checklist items above.

Print-friendly formatting means monochrome design, generous checkboxes, action-oriented phrasing, clear section headers, a monthly tracker, and a quick-reference footer. Below you will find answers to the most common questions about building and using a one-page privacy audit checklist.

💡 Tip: Laminate your printed checklist and use a dry-erase marker. This way you can reuse the same sheet every month without reprinting, and it stays clean and readable all year long.

⑦ ❓ FAQ

How many items should a one-page privacy audit checklist include

Aim for 30 to 40 checkbox items across 6 to 7 sections. This gives you comprehensive coverage without making the page feel overwhelming. Each item should be a specific, actionable task you can complete and check off in under 2 minutes.

How often should I run through the privacy audit checklist

Monthly is ideal for most items like browser settings, app permissions, and social media reviews. Some items like data broker opt-outs and old account deletion can be done quarterly. Include both frequencies on your checklist with clear labels so you know which items to tackle each month.

Do I need separate checklists for my phone and my computer

No. A well-designed one-page checklist covers both in separate sections. Having everything on one page makes it easier to maintain consistency and ensures you do not skip the phone section because it is on a different sheet you cannot find. Keep all devices on a single page with clear section headers.

What is the most important section on a privacy audit checklist

Passwords and authentication. Compromised credentials are the most common entry point for privacy breaches. If your password is leaked and you reuse it across accounts, no amount of browser privacy settings will protect you. Always start your audit with the password section.

Should I include data broker opt-outs on a personal checklist

Absolutely. Data brokers collect and sell personal information including your name, address, and phone number. California's DROP platform and services like Incogni make opt-outs easier than ever. Include a quarterly checkbox for data broker removal requests.

What makes a checklist print-friendly

Monochrome design with no color dependency, checkboxes at least 5 millimeters square, short action-oriented item text, clear section headers, and a quick-reference footer with key URLs and menu paths. Avoid tiny fonts, dense paragraphs, or decorative elements that waste space on a printed page.

Can I use a digital checklist app instead of printing

Yes, digital tools like Notion, Google Keep, or Todoist work well for recurring checklists. However, a printed version has the advantage of physical visibility. Pinning it next to your desk creates a visual reminder that digital lists often lack. Many people find that having both a printed version and a digital backup works best.

What is the DROP platform for data broker opt-outs

DROP stands for Delete Request and Opt-out Platform. It was launched by the California Privacy Protection Agency in January 2026. California residents can submit a single request through privacy.ca.gov/drop that instructs all registered data brokers to delete their personal data. Brokers must comply within 90 days starting August 2026.

3-Sentence Summary

1. A one-page privacy audit checklist should include 7 sections covering passwords, browser settings, phone permissions, social media, data brokers, account cleanup, and a review schedule.

2. Keep the total to 30 to 40 checkbox items with short, action-oriented phrasing so the entire audit can be completed in under 30 minutes.

3. Print-friendly formatting with monochrome design, generous checkboxes, and a monthly tracker turns a one-time effort into a sustainable privacy habit.

Ready to Build Your One-Page Privacy Audit Checklist

Throughout this guide, we broke down every section that belongs on a one-page privacy audit checklist: passwords and authentication, browser privacy settings, phone and app permissions, social media privacy, data broker opt-outs, account cleanup, and print-friendly formatting. Each section was designed to translate directly into clear, actionable checkbox items that you can verify quickly during a monthly review.

What should a one-page privacy audit checklist include? Now you have the complete answer. The 7 sections covered here give you comprehensive privacy coverage without the complexity that makes most people give up after the first attempt. A single printed page with 30 to 40 focused items is all it takes to stay on top of your digital privacy year-round.

Take 15 minutes today to draft your own checklist using the sections and items from this guide. Print it out, pin it somewhere visible, and commit to running through it once a month. The hardest part is the first review. After that, it becomes a quick routine that protects your data, your accounts, and your peace of mind every single month.

If you found this guide useful, bookmark it and come back whenever you want to update or refine your checklist. Your privacy is worth 30 minutes a month.

Disclaimer: The information in this article is for general educational purposes only. Privacy laws, platform settings, and tool availability change frequently. Always verify current settings and legal requirements through official sources. This article does not constitute professional legal or cybersecurity advice.

AI Disclosure: This article was written with the assistance of AI. The content is based on the author(White Dawn)'s personal experience, and AI assisted with structure and composition. Final review and editing were completed by the author.

Experience: This article is based on years of personal experience building and refining privacy audit checklists for individual use across multiple devices, browsers, and platforms. It includes lessons learned from real credential breach incidents, the practical impact of data broker opt-outs, and the difference between checklists that get used consistently and ones that get abandoned after one month.

Expertise: Research for this article referenced Google Safety Center privacy tools, Chrome Privacy Sandbox documentation, California Privacy Protection Agency DROP platform documentation, Fulton Bank's online security checklist, IronCore Labs security checklist, Harvard Cyber Law privacy audit framework, and Cybernews data broker opt-out guide. All recommendations were cross-verified against current platform settings and official documentation.

Authoritativeness: Sources include Google Safety Center (safety.google), California Privacy Protection Agency (privacy.ca.gov), Chrome Help (support.google.com/chrome), Cybernews (cybernews.com), Security.org, CNBC data removal service reviews, Consumer Reports privacy settings guide, and Fulton Bank education center (fultonbank.com).

Trustworthiness: This article includes a disclaimer and AI disclosure. It contains no advertising, affiliate links, or sponsored content. Personal experience and official documentation are clearly distinguished throughout the text. No specific paid product or service is endorsed over alternatives.

Author: White Dawn | Published: 2026-04-02 | Updated: 2026-04-02