How to Make a Website Privacy Policy Effective

[subornaakter40]

As part of the European Union regulation (679 of 2016), the so-called General Data Protection Regulation (GDPR) came into force on May 25, 2018. In this regard, Russian companies whose websites are used by residents of EU member states had to resolve a number of procedural issues. Now the privacy policy must comply with the provisions of the GDPR, plus the web platform interface must be adapted for users from the European Union. For example, the following requirements are mandatory: a person must be able to delete information about themselves from the site without contacting the administrator, unsubscribe from newsletters. If the user is under 16, consent to work with their personal data must be requested from their parents. A mandatory condition for operators who are not registered in the EU is to have a representative office (or appoint one, if there was none) in any of the EU countries.


Source: unsplash.com

It is quite obvious that issues related to the bank email list collection and processing of personal information about users on the Internet are given great importance all over the world.

There are many cases of serious fines being imposed by Roskomnadzor in Russia. For example, the Tambov City Legal Company was fined because there was no privacy policy on the site, but there was a feedback form. Or here's another example: a construction company in Astrakhan posted a form to fill out with the lines "name" and "surname", but "forgot" about the privacy policy. This was the reason for the fine. There are a great many similar situations.

It should be understood that the inspection bodies will easily detect other violations, since the site owner did not bother to place a privacy policy on his site and was fined for it. But the presence of a competently drawn up document will present you in the eyes of Roskomnadzor as a conscientious site owner. Then, most likely, other inspections will bypass you and will be directed at obvious violators.

In general, the technical side of the issue when drafting a website privacy policy should be handled by information security service employees and lawyers. This applies in general to any company documents that touch upon the issue of collecting and processing users' personal data.