The GDPR wave has come and gone, but I still see countless websites that don’t comply with the new, more transparent regulations. Below are the 3 things your website needs to comply with GDPR 2018.
This is arguably the most important element, as providing clear, concise information about how you obtain, manage and share data, is essential for GDPR compliance.
Finally, the policy needs to include clear instructions on how an individual can opt-out of all further communications from you, and have their details permanently removed from your system. This is a vital piece of the puzzle which not all companies are currently complying with.
Anywhere that you’re capturing personal data on your website e.g. someone’s name, email address, telephone number etc, needs to have a compulsory opt-in checkbox that the user must tick prior to submitting their information.
GDPR compliance isn’t really that complicated, and the scaremongering going on when it was first introduced, was primarily carried out by unethical companies looking to earn a quick buck by causing unnecessary panic.
As long as you’re transparent about how you manage your data, who you share it with and how an individual can have that information removed from your database, you’re pretty much ticking all of the minimum requirement boxes.