Privacy notices are broken. Here's how we used legal design at Juro to build a GDPR-compliant privacy policy that people would actually read.

1. Building a privacy notice people might actually read
Richard Mabey, CEO of Juro
Dr Stefania Passera, Legal Information Designer, Passera Design

2. Privacy notices
are broken

3. GDPR Article 12:
Privacy notices must be “concise,
transparent, intelligible and easily
accessible”
WP29 Guidelines on Consent:
“Controllers cannot use long privacy
policies that are difficult to
understand…”
The
regulators
agree

4. We built a multi-
disciplinary team

5. MarketingLawyer
DesignerCEO
Developer

6. We prototyped
and rapidly iterated

7. Sketches
& prototypes
to think
& communicate

8. Problem 1
Information overload

11. Problem 2
Notices written
by lawyers for lawyers

14. We conducted
user research

15. ExpertsProxiesUsers

16. The results
were astonishing

19. Comply with spirit of GDPR
Build trust with stakeholders
Shift in team mindset
And it’s
more
than that

20. blog.juro.com | @GetJuro stefaniapassera.com | @StewieKee