This tool has not been reviewed for US law. It is a fork of a British tool and still cites 2 UK-only rules (ICO, CQC). Treat the compliance guidance here as British, not American, until somebody who knows US law has been through it. How this was found