Why am I getting all those privacy emails?
Everyone is receiving privacy emails in response to the EU (European Union) GDPR (General Data Protection Regulation) enactment for websites. It can feel like a “house on fire” when you also start hearing fearful proclamations about making your own website compliant. So let’s take a deep breath and face reality.
Why website privacy laws?
The Internet has been largely unregulated for the past 20 years or more. There has been tremendous growth in businesses. 60 Minutes did a segment last week titled “How did Google get so big?” Facebook’s relationship with Cambridge Analytica and the transfer of users’ personal data also drew attention to the privacy of the website. The internet is now a booming industry used by almost everyone, so regulation is on the horizon.
A few months ago, website owners were rushing to get SSL certificates for their websites and make them appear more user friendly and Google search friendly. SSL not only changes your website from HTTP to HTTPS, but also offers a layer of protection for the web visitor…the consumer.
So now the EU has stepped in with laws that require disclosure of how websites treat personal data. Again, this is for the web visitor…the consumer. It offers a means to understand if your personal data is collected and how it is used.
I don’t live in Europe: why does the GDPR apply to my website?
Companies are adapting to the new EU regulations in the US in the form of adopting the GDPR as a matter of practice because it provides security for the consumer. People like to know that there is nothing wrong with their personal information. If he saw any of Mark Zuckerberg’s testimony in front of congress, he probably noticed that many of the questions were about what information is being collected and where it is going. That’s why you’re getting emails from everyone!
What does GDPR compliance look like?
The GDPR is all about disclosure, so by adopting the GDPR as a guide, compliance starts with two words “representation and consent”. Best practices are to have a Privacy Statement and ask for Consent when using your website to collect user information.
The Privacy Statement can be written from a sample page found in the latest version of WordPress (version 4.9.6). This is a new page is a guide and your own website may contain elements that differ from this outline. This new page can be added to your website structure, preferably via a link at the bottom of the website.
To demonstrate consent, a checkbox can be added to any form that collects information from a web visitor. Checking the box confirms that they are aware that they are giving you personal data.
It’s time to start. Having these pieces of the new regulations in place on your website will tell users that you are a good web steward!