data privacy policy australia data privacy policy india data privacy policy template data privacy policy pdf data privacy policy template india data privacy policy in tech mahindra data privacy policy for employees data privacy policy sample data privacy policy aws data privacy policy and procedures data privacy policy amazon data privacy policy act data privacy act policy sample data privacy and policy data privacy policy south africa data and privacy policy privacy and data protection policy privacy and data protection policy template privacy and data protection policy kenya privacy and data security policy privacy and data protection policy canada sample of data privacy policy example of data privacy policy data privacy policy bank data privacy breach policy data privacy policy best practices data privacy policy icici bank bir data privacy policy biometric data privacy policy big data privacy policy privacy policy data breach procedures data privacy policy canada data privacy policy content data privacy policy checklist data privacy policy cloud data privacy company policy data privacy complaints policy data privacy act company policy data privacy and confidentiality policy data privacy policy document data privacy policy definition data privacy policy draft data privacy policy deutsch data privacy policy daimler discord data privacy policy dimension data privacy policy dell data privacy policy data privacy policy europe data privacy policy example data privacy policy eu data privacy policy employees data privacy policy en français data privacy policy en español personal data privacy policy example gdpr data privacy policy example data privacy policy facebook data privacy policy for instagram data privacy policy for banks data privacy policy for schools data privacy policy framework data privacy policy for company data privacy policy for website data privacy policy google data privacy policy generator data privacy policy gdpr data privacy policy gdpr template data privacy policy guidelines data privacy governance policy data protection privacy policy gdpr employee data privacy policy gdpr g data security data privacy policy hospital data privacy policy hong kong personal data privacy policy hong kong tech mahindra data privacy policy how many principles hr data privacy policy hp data privacy policy data handling privacy policy hsbc data privacy policy data privacy policy indonesia data privacy policy in kenya data privacy policy ico data privacy policy in french data privacy policy information data privacy policy in india data protection and privacy policy kenya kpmg data privacy policy data protection privacy policy law privacy policy location data log data privacy policy linkedin data privacy policy lloyds data privacy policy lse data privacy policy ayala land data privacy policy data protection legislation privacy policy data privacy policy meaning data privacy policy manual data privacy policy microsoft data privacy management policy data privacy policy tech mahindra sample data privacy policy manual data privacy policy principles in tech mahindra mailchimp data privacy policy privacy policy no data collection netflix data privacy policy nonprofit data privacy policy ntt data privacy policy novartis data privacy policy nhs data privacy policy data protection policy privacy notice privacy policy notifiable data breach data privacy policy of facebook data privacy policy of tech mahindra data privacy policy of data protection policy or privacy policy data protection policy or privacy notice oracle data privacy policy office 365 data privacy policy o que significa data privacy policy data privacy policy principles data privacy policy philippines data privacy policy pag ibig data privacy policy philippine airlines data privacy policy template philippines data privacy policy sample philippines data privacy policy requirements data privacy policy regulatory user data privacy policy recommendations data privacy policy for recruitment data protection privacy policy requirements privacy policy data retention reddit data privacy policy rya data privacy policy data privacy policy statement data privacy policy snapchat data privacy policy singapore data privacy policy smart data privacy policy sans data privacy policy template uk data privacy policy thailand data privacy policy template gdpr data privacy policy template free data privacy policy usa data privacy policy uae data privacy policy university data privacy policy us data privacy policy uk data protection and privacy policy uk eu data privacy policy data protection policy vs privacy policy data protection policy vs privacy notice vodafone data privacy policy privacy policy vs data processing agreement verizon wireless data privacy policy privacy policy v data protection policy privacy notice v data protection policy privacy policy what data breach procedures we have in place walmart data privacy policy privacy policy when no data is collected what is data privacy policy world bank data privacy policy data privacy policy youtube accenture data privacy policy 0090 data protection act 2018 privacy policy data privacy policy 90 data privacy policy 90 applies where accenture is accenture data privacy policy 90
DATA PRIVACY POLICY
DATA PRIVACY POLICY
DRAFTING
2
Privacy Policy Agreement
The agreement where you specify if you collect personal
data from your users, what kind of personal data you
collect and what you do with that data.
This agreement is required by law if you collect personal
data. Personal data is any kind of data or information that
can be considered personal (identifies an individual) such
as:
-Email address
-First and last name
-Billing and shipping address
-Credit card information
3
What is a Privacy Policy ?
A Privacy Policy is a legal statement that
specifies what the business owner does with the
personal data collected from users, along with
how the data is processed and for what purposes.
"Privacy Policy" refers to the legal agreement,
the concept of privacy and protecting user data is
closely related.
6
A Privacy Policy can be used for both your
website and mobile app
The requirements for Privacy Policies may differ
from one country to another depending on the
legislation.
8
privacy laws identify the following critical points that a business must comply
with when dealing with personal data:
Notice - Data collectors must clearly disclose what they are doing with the
personal information from users before collecting it.
Choice - The companies collecting the data must respect the choices of users on
what information they choose to provide.
Access - Users should be able to view, update or request the removal of personal
data collected by the company.
Security - Companies are entirely responsible for the accuracy and security
(keeping it properly away from unauthorized eyes and hands) of the collected
personal information.
9
Who Needs a Privacy Policy ?
Any entity (company or individual) that collects or uses personal
information from users will need a Privacy Policy.
A Privacy Policy is required regardless of the type of platform your
business operates on or what kind of industry you are in:
-Websites
-WordPress blogs, or any other platforms: Joomla!, Drupal etc.
-E-commerce stores
-Mobile apps - Not having a Privacy Policy can be a reason
for rejection during the app review.
-For example, as of October 2018, a Privacy Policy will be required
for all iOS apps.
-Facebook apps - Facebook requires all pages, groups and events that
collect user data to have a Privacy Policy.
11
The Basics of Privacy Policy:-
In the EU, the GDPR requires companies dealing with
EU citizens to have a Privacy Policy-As a general rule, if
you're compliant with Privacy Policy requirements of the
GDPR, you'll by default end up complying with most
other privacy laws around the world. That's because the
GDPR is so robust and comes with stringent requirements.
13
In the US, privacy legislation may vary from one state to
another :-
a. The Gramm-Leach-Bliley Act - This act obliges
organizations to offer clear and accurate statements about
their information collecting practices and it also limits
usage and sharing of financial data.
b. COPPA -This act is especially for businesses that collect
information about children under 13 years of age.
14
c. Health Insurance Portability and Accountability Act -
This act applies to online health services as well.
d. (CalOPPA) - California's privacy law affects anyone
collecting personal information from residents of
California.
e. SOPIPA - This act applies if you collect personal data
from students.
16
What to include in a Privacy Policy
Users need to know exactly what kinds of personal data you
collect from them.
Your Privacy Policy must also disclose why you collect this
kind of data.
You should always inform users about any updates or
changes to your Privacy Policy.
Disclose if any third parties are involved in collecting
personal information in your name, i.e. you use MailChimp to
collect email addresses to send weekly updates to your
members.
17
Sections in a Privacy Policy
The Information Collection and Use section is the most
important section of the entire agreement where you need
to inform users what kind of personal information you
collect and how you are using that information.
A Log Data disclosure section should inform users that
certain data are collected automatically from the web
browser users are using and through the web server you're
using: IP addresses, browser types (Firefox, Chrome etc.),
browser versions and various pages that users are visiting.
18
How to Enforce a Privacy policy ?
• Always use the click wrap method to
get your users to agree to your
terms.
20
Comments