How The New Data Protection Law Affects Your Website?

Read Time:3 Minute, 50 Second

Do you know how the new data protection law affects your website? The user linked to a specific page can have more control over the use of their own personal data thanks to this new regulation that will be effective as of May 25, 2018.

Much more demanding than the current organic law of data protection (LOPD), especially in relation to digital environments, the RGPD will be imposed on the legal regulations of each country to the point that those responsible for a website should take note of each one of their demands if they want to avoid fines of up to 20 million euro’s that can bring about the breach of any of the points stipulated by this new regulation of influence at European level.

Despite the fact that the previous legislation was obligatory for all those who had a web page, the truth is that many marketers and bloggers did not move within the framework of legality. And, is that, rather than guarantee the rights of users, what was sought was to achieve a greater number of subscriptions or conversions. One of the main changes imposed by this new law is that it will focus on ensuring the rights of the user, who is given maximum control and power over their own personal information.

This is how the new data protection law or RGPD affects your website

To know how this new regulation affects your website, you must remember that you must comply with a series of requirements such as the ones indicated below:

The principle of responsibility must be complied with, in the sense that you must prove on your website that all necessary measures have been taken to process personal data as required in the RGPD. And, is that now it is not enough to copy and paste the data protection policy published on any website, given that each business will have its own treatment of the data.

The information contained in the legal notices and privacy policies should be easier so that anyone can understand the content quickly, at the same time they should be more complete. For this, we must provide our information by layers so that at the first level you can provide more basic information in the form of user recruitment and another more completes the conventional privacy policy page.
Equally, it will be necessary to account for any security breach produced in your own data, which means that, if for example, we have been hacked by hackers who have accessed the personal data of our subscribed users, we should not keep to the margin, but we must communicate this attack to the competent authority on data protection.

How to adapt my website to protection law

Once we take into account how this new regulation may affect digital environments, we will analyze how we can adapt the web to the new data protection law to meet these new requirements:

The first thing you have to do is adapt the contact forms, ending all the automatic opt-ins. This means that the user can click on a consent box to complete the requested action. In addition to this necessary checkbox, the form must contain an information clause with the main aspects of your data processing. It should be linked to a section where you talk more carefully about your privacy policy.
You must update the privacy policy, for which it will be necessary to indicate that you expressly comply with the new data protection law. Likewise, you must specify in detail what type of information you collect from users, that is, their IP addresses, from which device they navigate, telephone, shipping and billing address, etc.
On the other hand, you must also indicate who has access, in addition to you, to the user’s information such as Google, MailChimp or Disqus. All are recipients of the information of your users and should be consigned in your privacy policy.

You should also explain if, for example, there are automated processes such as, for example, those that include a user in one segment or another of your list based on the actions that have been carried out.

In the event that you have a blog, if you collect the user data through a contact form, subscription or request some information to leave a comment, everything specified in previous lines affects you fully.

With all this will significantly reduce spam and aggressive advertising when it comes to capturing leads or, at least, that is what is intended.

What do you think about how the new data protection law can affect the web?