GDPR Privacy Policy

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

GDPR
Privacy Policy

The General Data Protection Regulation
(GDPR) took effect on May 25, 2018.
If the GDPR applies to you, you’ll need to
make...

Who the GDPR
Applies to

The GDPR will apply to your business if you:
Offer products or services to EU citizens, or
Collect personal information fr...

Note that it doesn’t matter where your business
is located/headquartered. If you meet either of
these criteria, the GDPR a...

For example, a U.S.-based business that simply
collects email addresses from users in the EU
will fall under the scope of ...

What the GDPR
Requires

(1) Link to https://termsfeed.com/blog/gdpr-compliance-plan/#Requirements_for_GDPR_Data_Controllers
(2) Link to https://te...

The main focus of the GDPR is the protection of
personal data and digital privacy.
Users must be provided with thorough in...

GDPR-Compliant
Privacy Policy

(4) Link to https://gdpr-info.eu/art-12-gdpr/
Article 12 of the GDPR (4) requires that
you communicate information about y...

Most Privacy Policies tend to be long and
dense, filled with legal jargon and less than
clear for most readers.
The GDPR i...

Update your Privacy Policy by:
Cutting out legalese
Simplifying overly technical information
Using short, clear sentences
...

In addition to the standard required components
of your Privacy Policy (5), your GDPR-compliant
policy will need to disclo...

The following 6 concepts must be covered
somewhere in your Privacy Policy.
They can be separate, standalone clauses,
or in...

1. Who is your data controller?
The data controller is the party in charge of
deciding what personal data is collected.
Le...

Make sure your users have a way to
contact you.
This is a fast, easy and important
update to make to your Privacy Policy
i...

If you have a Data Protection Officer (DPO),
include contact information for this individual
as well.

(6) Link to https://www.vividfish.co.uk/blog/gdpr-8-rights-under-gdpr
3. The 8 rights of users under the GDPR
Inform users...

The 8 rights of users:
Right to be informed
Right of access
Right of rectification
Right to erasure
Right to restrict data...

Twitter includes a separate chapter in its Privacy Policy to
address some of these rights:

Let users know what purposes you
use collected data for, such as for
communication and billing.
4. Your purposes for colle...

Let users know if you transfer their
personal data to a different country.
Include a description and explanation
of suitab...

The GDPR provides 6 lawful bases (7).
You’ll likely satisfy this requirement in
your clause that covers what data you
coll...

For example, you collect email addresses for communication purposes,
financial information for payment purposes, place coo...

Getting Agreement and
Consent to your Privacy
Practices

Whenever you get consent, use
checkmark boxes or another active
method of clickwrap (8).
(8) Link to https://termsfeed.com...

Have Privacy
Notices

Because the GDPR focuses on creating
transparency and understanding for users,
having Privacy Notices will help you be
GDP...

A Privacy Notice is a short, concise notice that
helps users understand why you’re requesting
their personal data.
They sh...

The GDPR requires your Privacy Policy to
be more informative.
However, it requires that you provide this
information in a ...

Review the language in your Privacy Policy and
drop the legalese. Make it be easy to understand
by your average user
Updat...

GDPR Privacy Policy

Share SlideShare

Facebook
Twitter
LinkedIn

Embed

Size (px)

Show related SlideShares at end

WordPress Shortcode

Link

LinkedIn
Facebook
Twitter
Email

Replay

Top clipped slide

1 of 39 Ad

1 of 39 Ad