"Inadequate data security" in Merchant Center: what it means and how to fix it

What it usually looks like on a store

Usually an http page somewhere in the buying path: an old domain that doesn't redirect to https, a checkout on a different, insecure address, or a form that posts to http.

What Google says

Google's Data collection and use policy does not allow collecting personal information (names, addresses, phone numbers, card or bank numbers) on pages that are not SSL protected with a valid certificate. Google's checkout requirements say the checkout must be secured with a valid SSL certificate and third-party payment options must be HTTPS-secure. Violations get a warning at least 7 days before any suspension.

Collecting personal information over an unsecured page which is not SSL protected and without a valid certificate.Google, Data collection & use

warning will be issued at least 7 days prior to any suspension of your account.Google, Data collection & use

To protect your customers, you must secure your checkout with a valid SSL certificate.Google, Checkout requirements and best practices

Ensure that any third-party payment options are HTTPS-secureGoogle, Checkout requirements and best practices

Also seen as: "Data collection & use", "Data collection and use".

How to fix it

Based on Google's help pages, in plain language:

1. Serve signup, checkout and any page collecting personal details over HTTPS with a valid certificate.
2. Make sure third-party payment providers are HTTPS-secure and do not ask for unnecessary personal information.
3. Collect only the details needed to process the order.

What to check on your website

These are the checks we run that relate to this issue. A problem in any of them can be enough on its own.

• Secure connection (HTTPS): Your homepage, product pages and checkout load over HTTPS, plain http redirects to https, and forms don't post to insecure addresses.
• Customers can buy: Product pages have a working add-to-cart or buy button and the cart page loads securely.
• Privacy policy: A privacy policy page exists and is linked.

Requesting a review

Google says violations of this policy get a warning at least 7 days before any suspension. Request a review from the account-level issue (banner, Needs attention, or Diagnostics). Identity verification may be required before the review button is available. Google says reviews may take up to 7 business days. If issues are not resolved by the second review attempt, a one-week cool down period may begin, it cannot be shortened by support, and it may increase with each unsuccessful review. During a 7 or 28 day warning period you can request one courtesy review.

Questions

Sources

• support.google.com/merchants/answer/6150122
• support.google.com/merchants/answer/9158778
• support.google.com/merchants/answer/6363310
• support.google.com/merchants/answer/17250716

Checked against Google's help pages on 2026-10-08. Listvane is an independent tool made by Great Work LLC. It isn't affiliated with, endorsed by or sponsored by Google. Google and Google Merchant Center are trademarks of Google LLC.