The Senior Care SEO Checklist for 2026

Secure lead capture and privacy handling Evidence: inspect the forms, transport security, privacy disclosures, data destinations, and the approved internal process for handling enquiry data. Pass: the published form uses secure transport and follows the organisation's applicable privacy and data-handling requirements.

Fail: sensitive or personal data is collected through an insecure or unapproved path. Severity: critical when a real data-handling risk exists. Owner: website owner plus the organisation's privacy or compliance owner.

Corrective action: repair the insecure or unapproved collection path and route regulatory interpretation to the qualified owner. Validation: submit a controlled test and verify the data reaches the approved destination. Do not present HIPAA as a search-ranking factor.

Accessibility and readable interaction Evidence: test keyboard navigation, labels, contrast, focus behaviour, text scaling, and screen-reader output on representative pages. The source referenced WCAG 2.2 Level AA; preserve that as the stated accessibility target without claiming it is an SEO ranking threshold.

Pass: priority journeys are usable with the tested assistive methods and known defects are documented. Fail: a core care, contact, or navigation task is blocked. Severity: critical for blocked access to essential information, high for material barriers, and lower for isolated defects.

Owner: developer and accessibility owner. Corrective action: remediate the reproducible accessibility failure. Validation: repeat the same test after release.

Core page performance Evidence: save mobile performance diagnostics for the homepage, care pages, location pages, and contact path. Pass: no reproducible performance defect materially blocks reading or interaction.

Fail: loading, layout shift, or interaction problems prevent a core task. Severity: high for a blocked enquiry journey and medium for material but non-blocking debt. Owner: developer or technical site owner.

Corrective action: address the measured causes rather than chasing a perfect tool score. Validation: repeat the same tests on the corrected pages.

Structured data accuracy Evidence: compare any LocalBusiness, NursingHome, or other structured data with the visible page and the provider's approved information. Pass: markup accurately represents visible content and the correct entity.

Fail: markup contains unsupported services, reviews, pricing, locations, or claims. Severity: high for materially false data and medium for technical errors. Owner: technical SEO or developer with editorial review.

Corrective action: remove unsupported properties and repair invalid markup. Validation: test the published markup and compare it with the visible page. Do not claim structured data guarantees a rich result or ranking gain.

Multi-location architecture Evidence: map each real facility to its canonical URL, title, internal links, contact details, and local content. Pass: every genuine location has a clear role and unique factual information where a separate page is justified.

Fail: several location pages are templated duplicates or compete for the same location intent. Severity: high when the architecture materially confuses search or users. Owner: SEO, editorial, and development owners.

Corrective action: consolidate redundant pages or strengthen genuine facility pages with accurate location-specific information. Validation: recheck the URL map, canonicals, internal links, and search landing pages.

Image alternatives Evidence: sample important care, staff, facility, and functional images and review alt text in context. Pass: meaningful images have concise alternatives that describe their purpose without stuffing locations or care terms.

Fail: informative images are missing useful alternatives or decorative images create noise. Severity: medium for broad accessibility defects. Owner: editorial and development owners. Corrective action: write appropriate alternatives and fix template-level omissions. Validation: inspect the rendered output and screen-reader experience.

Broken-page recovery Evidence: review Search Console, internal crawls, and important external links for destinations returning 404. Pass: broken URLs with continuing value are repaired or redirected to the most relevant live destination, while intentionally removed content returns the intended status.

Fail: families or important links land on dead pages without a useful path forward. Severity: high for broken care or contact paths and medium for secondary content. Owner: developer or technical SEO.

Corrective action: restore, redirect, or intentionally retire the URL based on its purpose. Validation: request the affected URLs again and verify internal links now resolve.

Mobile phone links Evidence: test every published care and admissions phone link on representative mobile pages. Pass: the visible number and link target reach the intended contact. Fail: tapping the number does nothing or dials the wrong destination.

Severity: critical for a broken primary contact path. Owner: website owner. Corrective action: repair the link target and visible number. Validation: repeat the mobile call action after publishing.

XML sitemap and index discovery Evidence: compare the XML sitemap with the intended public, indexable page set and review its Search Console status. Pass: important public pages are represented appropriately and obvious broken, redirected, duplicate, or private URLs are not being promoted.

Fail: the sitemap materially conflicts with publishing intent. Severity: high when important discovery is affected. Owner: technical SEO or developer. Corrective action: repair sitemap generation or inclusion rules. Validation: fetch the sitemap again and recheck the relevant Search Console report.

Mixed-content and secure asset loading Evidence: inspect priority HTTPS pages for insecure assets and browser warnings. Pass: critical pages load securely without mixed-content errors. Fail: insecure assets trigger warnings or break important functionality.

Severity: critical for security warnings on enquiry pages and high elsewhere. Owner: developer or hosting owner. Corrective action: update asset references and configuration to secure destinations. Validation: reload the affected pages in a clean browser session and confirm the warning is resolved.

Use the existing senior care services route only as the preserved destination where the source previously referred users back to services.

Google Business Profile ownership and factual completeness Evidence: save the authorised management view and compare the live profile with current operational records. Pass: the correct profile is controlled and its name, address, phone, website, hours, categories, and service information are accurate.

Fail: access is missing or core facts are wrong. Severity: critical for lost control or wrong location and high for material factual errors. Owner: authorised profile manager. Corrective action: recover legitimate access or correct the inaccurate fields without creating unnecessary duplicates. Validation: reopen the live profile and compare it with the approved record.

Neutral review-request process Evidence: save the review-request wording, eligibility rule, and delivery workflow. The source used a target of 2-3 new reviews per month; treat that only as historical workload context, not a Google requirement.

Pass: eligible residents, customers, or families are asked consistently for honest feedback without incentives, discouraging negative feedback, or selecting only satisfied people. Fail: the process gates, manipulates, or rewards sentiment.

Severity: critical for deceptive practices and high for systematic gating. Owner: operations or customer-experience owner. Corrective action: replace selective requests with a neutral process. Validation: audit the live workflow and confirm the same rule is applied consistently.

Review responses and privacy Evidence: sample public responses and compare them with the organisation's approved communications and privacy approach. The source referenced 48 hours as an operating response example; do not present that timing as an official ranking factor.

Pass: responses are respectful, privacy-aware, and do not confirm sensitive resident or patient information unnecessarily. Fail: responses disclose protected information, threaten reviewers, or pressure them to change feedback.

Severity: critical for privacy exposure. Owner: authorised communications or operations owner. Corrective action: correct the response process and route privacy questions to the qualified owner. Validation: re-sample future replies against the documented standard.

NAP accuracy across important listings Evidence: compare the website and Google Business Profile with existing listings on relevant care, local, and general directories where the organisation is actually present.

Pass: core facts identify the same real organisation. Fail: wrong addresses, phone numbers, names, or destinations create material confusion. Severity: high for incorrect core contact data. Owner: local SEO or profile owner.

Corrective action: correct the source that is wrong. Validation: revisit the same live references after changes propagate.

Profile photography Evidence: review current profile imagery against approved assets and consent records. Pass: published photos are current, representative, and appropriately authorised. Fail: imagery is misleading, obsolete, generic where a real image is needed, or lacks required approval.

Severity: high for consent or material accuracy issues. Owner: profile manager and image-approval owner. Corrective action: remove or replace unsuitable images. Validation: compare the live gallery with the approved set. Do not claim a weekly upload schedule is a ranking requirement.

Location pages for genuine locations Evidence: compare each proposed or existing page with the provider's real facilities, service locations, travel context, and approved care information. Pass: the page represents a genuine location and gives useful location-specific information.

Fail: the page is a thin city or suburb variant with no distinct factual purpose. Severity: high when large-scale duplication or misleading location targeting exists. Owner: editorial and local SEO owners.

Corrective action: strengthen genuine location pages and avoid creating thin nominal-market pages. Validation: review the final page for unique purpose, factual accuracy, and correct internal links.

Google Business Profile updates Evidence: review whether published updates contain current information that helps families. Pass: updates are accurate and purposeful. Fail: the team posts filler solely to satisfy an assumed ranking cadence.

Severity: low unless inaccurate information is published. Owner: profile or communications owner. Corrective action: publish updates only when there is something useful to communicate. Validation: review the live post for accuracy and remove outdated content when appropriate.

Relevant directory citations Evidence: inventory existing specialist and local listings that families may encounter. Pass: listings are legitimate, accurate, and relevant to the provider. Fail: the strategy relies on bulk low-quality submissions or inaccurate listings.

Severity: medium, or high when wrong information could misdirect a family. Owner: local SEO owner. Corrective action: correct important listings and avoid indiscriminate submissions. Validation: recheck the live records.

Questions and Answers monitoring Evidence: review public questions and any answers associated with the profile. Pass: material questions have accurate, appropriate answers where the organisation is able to respond.

Fail: incorrect information remains unaddressed despite the team being able to correct it through an authorised channel. Severity: medium for material factual confusion. Owner: profile manager with operational input.

Corrective action: provide accurate information without disclosing sensitive details. Validation: review the live result.

Geographic metadata claims Evidence: inspect the site's location signals and image metadata strategy. Pass: the team relies on genuine addresses, location pages, profile data, and visible content rather than claiming hidden geotags are required for local ranking.

Fail: staff spend time altering image coordinates solely because they believe it is an official ranking signal. Severity: low as a prioritisation issue. Owner: SEO owner. Corrective action: redirect effort toward verifiable location accuracy and useful content. Validation: confirm the documented local SEO plan no longer depends on unsupported geotagging claims.

Care-level service pages Evidence: compare each priority service page with the provider's actual services and approved operational information. Pass: each retained page has a distinct user purpose and accurately explains the care offered.

Fail: generic pages blur materially different services or claim care the provider does not offer. Severity: critical for materially inaccurate care claims and high for thin or duplicated service content.

Owner: editorial owner with the appropriate operational reviewer. Corrective action: rewrite, consolidate, or separate pages based on genuine service differences. Validation: compare the published page with approved service records. Use the existing senior care overview route only where it is contextually relevant.

Leadership and staff information Evidence: review staff biographies, roles, credentials, and any external profile links against current approved records. Pass: published information is accurate, attributable, and appropriately approved.

Fail: credentials, job titles, affiliations, or experience are outdated or unsupported. Severity: critical for materially misleading professional claims. Owner: editorial owner plus the person responsible for staff information.

Corrective action: correct, qualify, or remove unsupported statements. Validation: obtain factual sign-off before publication.

Cost and fee information Evidence: compare published pricing or cost guidance with the current approved commercial information. The source described cost as the #1 search query for families, but no supporting source URL is included, so treat that claim as historical context rather than a verified ranking or demand statistic.

Pass: cost information is accurate, current, appropriately qualified, or clearly routes families to the correct contact for current fees. Fail: outdated or invented price ranges are presented as current.

Severity: high for material pricing errors. Owner: commercial or admissions owner with editorial support. Corrective action: correct the information or replace it with a transparent route to current fees. Validation: compare the published page with the approved source.

Decision-support articles Evidence: map recurring family questions, search queries, and admissions conversations to existing content. The source used a '5 Signs' style example; retain that only as an editorial example, not as a required formula.

Pass: articles answer real questions accurately without diagnosing individuals or inventing outcomes. Fail: content relies on generic emotional triggers, unsupported medical advice, or exaggerated claims.

Severity: high for health-related inaccuracies. Owner: editorial owner plus the appropriate subject reviewer. Corrective action: rewrite around supportable decision information. Validation: compare claims with approved sources and the intended user question.

Internal linking Evidence: follow links from informational content to relevant care, location, and contact pages. Pass: links help readers move to the next relevant information and use descriptive anchor text.

Fail: important paths are broken, irrelevant, or engineered only to repeat keywords. Severity: high for broken core paths and medium for weak contextual linking. Owner: editorial or SEO owner. Corrective action: repair links and improve contextual pathways. Validation: re-run the click journey.

Resource hub content Evidence: inventory downloadable or educational resources and identify the user need each one serves. Pass: every resource is accurate, current, accessible, and useful. Fail: a resource exists only to capture leads or increase dwell time without meaningful value.

Severity: medium, or high when inaccurate care guidance is involved. Owner: editorial owner with the appropriate reviewer. Corrective action: update, consolidate, or remove weak resources. Validation: review the published asset and its landing page.

Content freshness and factual review Evidence: identify pages with time-sensitive regulatory, medical, service, staffing, or pricing claims and compare them with current approved sources. The source used content older than 2 years as an update trigger; treat that age only as an internal review example rather than a ranking rule.

Pass: time-sensitive statements remain current or are clearly dated. Fail: outdated claims could mislead families. Severity: critical for material care or regulatory inaccuracies. Owner: editorial owner and relevant subject reviewer.

Corrective action: update or remove stale statements and consult the senior care SEO mistakes guide for recurring content failures. Validation: record the source and review date used for the correction.

Comparison content Evidence: compare pages that explain in-home care, assisted living, memory care, or other service options with the provider's actual scope. Pass: comparisons explain differences neutrally and accurately without steering readers through unsupported fear or outcome claims.

Fail: content blurs clinical meanings, invents eligibility, or promotes a service the provider does not offer. Severity: high for material care misinformation. Owner: editorial and operational reviewers.

Corrective action: clarify the comparison and remove unsupported claims. Validation: complete factual review before publishing.

Frequently asked questions Evidence: map FAQ questions to recurring enquiries and verify each answer against approved information. Pass: answers are accurate, concise, and useful. Fail: answers contain unsupported care, legal, pricing, or regulatory claims.

Severity: high for material inaccuracies. Owner: editorial owner plus the relevant subject owner. Corrective action: revise the answer. Validation: recheck against the approved source. FAQ content can help readers, but do not claim FAQPage markup earns a Google FAQ rich result.

Professional review for sensitive content Evidence: identify pages containing medical, clinical, regulated, or other sensitive claims and record who is responsible for reviewing them. Pass: the appropriate qualified owner reviews claims that require their expertise, and the byline or reviewer information is accurate if published.

Fail: SEO staff self-approve specialist claims they are not qualified to verify. Severity: critical when inaccurate health or regulatory information could affect a family decision. Owner: the relevant qualified reviewer and editorial owner.

Corrective action: route the material through the correct review process. Validation: retain factual approval evidence and verify the published attribution.

Primary enquiry action Evidence: test the most important care or tour enquiry action on desktop and mobile. Pass: the call to action is visible, accurately labelled, and completes successfully. Fail: the action is hidden, broken, misleading, or sends the user to the wrong destination.

Severity: critical for a broken primary enquiry path. Owner: website and admissions owners. Corrective action: repair the path and clarify the label. Validation: complete the same action after release.

Contact form friction Evidence: review the form fields and test completion on mobile. The source used 4-5 fields as a form-length example; retain that only as a usability reference, not a universal conversion rule.

Pass: every required field has a clear operational purpose and the form can be submitted successfully. Fail: unnecessary fields, validation errors, or layout problems block completion. Severity: high for a broken form.

Owner: admissions and website owners. Corrective action: remove unnecessary friction and repair validation defects. Validation: submit a controlled test and confirm delivery.

Location orientation Evidence: check whether each genuine location page gives a clear address, travel context, and directions information. Pass: families can understand where the home is and how to reach it.

Fail: location information is missing, wrong, or confusing. Severity: high for wrong directions. Owner: editorial and local SEO owners. Corrective action: correct the visible information. Validation: compare the published address and directions with current operational records. A map embed can be useful to readers but should not be described as a guaranteed ranking factor.

Video and media testimonials Evidence: review testimonial consent, attribution, captions, and claims. Pass: published media is authorised, accessible, and reflects genuine feedback without misleading editing.

Fail: consent is missing, captions are absent where needed, or claims are fabricated. Severity: critical for consent or deceptive-content issues. Owner: communications or editorial owner plus the relevant consent owner. Corrective action: remove or correct the asset. Validation: compare the published media with the approved record.

Trust badges and awards Evidence: verify every certification, accreditation, association, award, and badge against its current source. Pass: the reference is current and the organisation is entitled to display it.

Fail: an expired, irrelevant, or unsupported badge is presented as current. Severity: critical for materially misleading trust claims. Owner: compliance, operational, or editorial owner. Corrective action: remove or correct unsupported references. Validation: recheck the live badge against the authoritative source.

Post-enquiry next steps Evidence: test the confirmation page and admissions follow-up information. Pass: the user receives accurate next-step information and any promised resource is available. Fail: the page promises a response or resource the team cannot deliver.

Severity: high for materially misleading follow-up. Owner: admissions and website owners. Corrective action: align the page with the real workflow. Validation: complete a controlled enquiry and verify the published next step.

CTA experiments Evidence: document the hypothesis, variant, target action, and measurement method before testing. Pass: the test changes one meaningful decision variable and uses a reliable outcome measure.

Fail: results are declared from insufficient or incomparable data. Severity: low as a measurement-quality issue unless the variant is misleading. Owner: analytics and website owners. Corrective action: redesign or stop invalid tests.

Validation: reproduce the result from the experiment data. The source referenced Google Analytics 4 as a measurement tool and compared 'View Pricing' with 'Request a Brochure'; neither phrase should be treated as universally superior.

Text enquiry option Evidence: verify that any text-message option routes to a monitored, approved channel and presents appropriate privacy information. Pass: messages reach the intended team and the workflow is operationally supported.

Fail: the number is unmonitored, wrong, or collects information through an unapproved route. Severity: high for a broken or insecure contact path. Owner: admissions and communications owners. Corrective action: repair or remove the option. Validation: send a controlled test message.

Readable typography Evidence: inspect priority templates at common viewport sizes and with text scaling. The source used 16px as a readability example; do not treat it as the only acceptable size for every context.

Pass: body text and controls remain comfortably readable and usable. Fail: text becomes illegible or controls overlap when scaled. Severity: high for material accessibility barriers. Owner: designer or developer. Corrective action: adjust typography and layout. Validation: repeat the viewing and scaling test.

Benefit and feature wording Evidence: compare headlines with the actual service and approved claims. The source used a 24/7 staffing example; preserve that wording only as an editorial illustration and do not publish it for a provider unless it is true.

Pass: the headline communicates a real benefit without adding unsupported outcomes. Fail: emotional wording exaggerates the service or implies guarantees. Severity: high for materially misleading claims.

Owner: editorial and operational reviewers. Corrective action: rewrite around supportable facts. Validation: complete factual sign-off.

Relevant editorial outreach Evidence: review prospective sites and the reason each would legitimately reference the provider. Pass: outreach is relevant, transparent, and based on a real editorial relationship or useful resource.

Fail: links are pursued mainly for perceived authority or are paid, exchanged, or manufactured in a way that creates search-policy risk. Severity: high for manipulative link schemes. Owner: SEO and relationship owners.

Corrective action: stop low-quality outreach and focus on legitimate mentions. Validation: inspect the live context and destination.

Healthcare and community resource references Evidence: inventory real referral, community, hospital, local authority, or professional relationships that already exist. Pass: any requested link accurately reflects a genuine relationship or useful resource.

Fail: the provider claims a relationship or endorsement that does not exist. Severity: critical for false affiliation claims. Owner: relationship owner and SEO. Corrective action: remove unsupported language and request references only where appropriate.

Validation: verify the live page and relationship context. Do not claim a .gov or .org domain automatically provides extraordinary ranking value.

Community sponsorships Evidence: document the real sponsorship or participation and review any resulting event-page reference. Pass: the mention accurately reflects genuine involvement. Fail: a sponsorship is purchased solely to manufacture a link or the public claim exaggerates involvement.

Severity: medium, or high for deceptive claims. Owner: community or marketing owner. Corrective action: align public references with the real activity. Validation: inspect the live event page and destination.

Scholarship link tactics Evidence: review whether any scholarship exists for a real educational purpose and whether outreach is targeted primarily at obtaining links. Pass: the programme is genuine and any references arise naturally from legitimate participation.

Fail: a nominal scholarship is created mainly to solicit .edu links. Severity: high for manipulative link acquisition. Owner: marketing, legal, and SEO owners as applicable. Corrective action: stop link-first scholarship tactics. Validation: confirm the programme and outreach documentation reflect the real purpose.

Unlinked brand mentions Evidence: identify genuine public mentions of the provider that omit a link. Pass: a link request is contextually appropriate and does not misrepresent the relationship. Fail: outreach pressures publishers or tries to rewrite independent coverage.

Severity: low unless the tactic becomes manipulative. Owner: communications or SEO owner. Corrective action: make a factual, optional request where useful. Validation: verify any resulting link points to the correct page.

The source listed Brand24 among monitoring tools; retain that reference only as a tool example, not evidence that monitoring itself affects rankings.

Press and media activity Evidence: review whether the event, opening, service change, or community news is genuinely newsworthy and accurately described. Pass: press activity communicates real information.

Fail: releases exist mainly to manufacture backlinks or contain exaggerated claims. Severity: high for misleading public claims. Owner: communications owner. Corrective action: remove unsupported claims and use media outreach only for real news. Validation: review published coverage and linked destinations.

Professional cross-referrals Evidence: document legitimate relationships with relevant local professionals and organisations. Pass: any links or referrals accurately represent the relationship and provide user value.

Fail: reciprocal links are exchanged solely to manipulate rankings. Severity: high for systematic link schemes. Owner: relationship and SEO owners. Corrective action: keep only legitimate user-serving references. Validation: inspect both live pages and relationship documentation.

Competitor backlink research Evidence: review competitor links for relevant opportunities and context. Pass: the analysis identifies legitimate directories, publications, associations, or resources worth evaluating independently.

Fail: the team copies every competitor link or assumes inclusion on a 'best' list is required. Severity: medium. Owner: SEO owner. Corrective action: qualify opportunities by relevance, legitimacy, and factual fit. Validation: document why each pursued reference is appropriate.

Linkable informational resources Evidence: evaluate the accuracy, originality, source quality, and maintenance plan for proposed resources. Pass: the asset is useful and supportable on its own merits.

Fail: sensitive legal or healthcare information is published without appropriate review merely to attract links. Severity: critical for materially inaccurate sensitive content. Owner: editorial and qualified subject reviewers.

Corrective action: obtain appropriate review or narrow the topic. Validation: verify all material claims before publication.

Social profile links Evidence: review official social profiles and their website destinations. Pass: profiles represent the real provider, point to the correct site, and contain current information. Fail: old or unofficial profiles misdirect users.

Severity: medium for material confusion. Owner: communications owner. Corrective action: update or retire inaccurate profiles. Validation: follow the live links. Do not present social activity as a direct ranking factor without supporting evidence.

Backlink risk review Evidence: inspect suspicious referring domains, historical SEO activity, and any manual-action or security evidence before taking action. Pass: harmful-link decisions are based on a documented reason rather than a commercial tool score alone.

Fail: links are mass-disavowed solely because a tool labels them toxic. Severity: high if a mistaken action could remove legitimate signals or if manipulative historical work is confirmed. Owner: experienced SEO owner.

Corrective action: investigate before removal or disavowal. Validation: retain the rationale and monitor the relevant search or manual-action evidence.

Broken external links to the site Evidence: find external links that currently land on 404 pages. Pass: valuable references point to a relevant live destination or intentionally removed content remains appropriately retired.

Fail: important external references land on broken pages when a clear replacement exists. Severity: high for significant referral or authority loss. Owner: technical SEO or developer. Corrective action: restore the page or redirect to the closest relevant live content. Validation: request the old URL and follow the external link again.

Profile accuracy check - High - 30 minutes Evidence: compare current facility photos, hours, phone, website, and service information with approved operational records. Pass: the profile is current. Fail: a material field is outdated. Owner: profile manager. Corrective action: update inaccurate information. Validation: recheck the live profile.

Internal-link repair - Medium - 1 hour Evidence: identify high-traffic informational pages that should naturally link to the main senior care service page. Pass: links are relevant and working.

Fail: important contextual paths are missing or broken. Owner: editorial or SEO owner. Corrective action: add or repair useful links. Validation: follow the published path.

Mobile call-path repair - High - 30 minutes Evidence: test all important click-to-call links on mobile. Pass: each reaches the intended number. Fail: a link is broken or incorrect. Owner: website owner. Corrective action: repair the link target. Validation: repeat the call action after publishing.

• Unverified photography: Evidence - compare website imagery with approved assets and consent records. Pass - images are current, representative, and authorised. Fail - imagery is misleading or lacks required approval. Severity - high for consent or material accuracy issues. Owner - editorial or communications owner. Correction - remove or replace unsuitable images. Validation - compare the live page with the approved asset set.
• Thin nominal-location targeting: Evidence - review pages that target neighbourhoods, towns, or postcodes. Pass - each page represents a genuine location or useful location context. Fail - place names are inserted into templated copy without distinct value. Severity - high when duplication is extensive. Owner - local SEO and editorial owners. Correction - consolidate thin pages and improve genuine location content. Validation - recheck page purpose and internal links.
• Review-response gaps: Evidence - sample recent reviews and responses. Pass - the organisation has a privacy-aware, professional process for responding where appropriate. Fail - critical feedback is ignored without a reason or responses expose sensitive information. Severity - high for privacy or conduct issues. Owner - authorised communications or operations owner. Correction - improve the response process. Validation - re-sample future replies.
• Mobile technical debt: Evidence - test navigation, content, forms, phone links, and performance on representative devices. Pass - core family tasks work. Fail - a mobile defect blocks a care or contact journey. Severity - critical for broken enquiry paths. Owner - developer or website owner. Correction - repair the reproducible defect. Validation - repeat the same mobile task.