# What this does not cover

The report says plainly what Jadpo covers and what it doesn't:

- **Covered by the language:** minimisation and storage limitation,
  access, rectification (by ordinary updates), erasure, portability,
  privacy by design, records of processing (most of Article 30), and
  security of processing.
- **Supported, but your app's choice:** restriction and objection, and
  consent.
- **Not code at all:** the lawful basis, the privacy notice, data
  protection impact assessments (DPIAs), processor contracts, and the data
  protection officer (DPO).
- **Still to add:** breach notification, which lists the people whose
  marked data a breached store or provider held, from the report and
  access records; and international transfers, where provider packages
  declare where data is processed and the report shows it.

This is not legal advice. A privacy professional reviews the report.