search

InteractiveMechanics / historyofvaccines-drupal8

0 stars 0 forks source link

[x] Question re: EU data privacy requirements #373

Closed amberreeves closed 6 years ago

amberreeves commented 6 years ago

FROM KARIE I was wondering if you folks at IM have any thoughts for the history of vaccines site regarding the EU changes soon to be required for data privacy even for non EU entities that serve EU residents.

Do you think that any parts of our use of Google Analytics will need to be changed or any cookie notices will need to be added to the site for us to be in compliance?

I could be way off here, but I do notice that EU sites like History of Vaccines do use a cookie notice.

mtedeschi commented 6 years ago

From my research, we do not need a cookie consent, but it would be a good practice to include one. Some details online: http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm

There are some easy ways to do this: https://silktide.com/tools/cookie-consent/download/

It seems like writing or having a cookie policy to more clearly define what we do/do not do with cookies and user data collected via Google Analytics would be a good choice as well.

amberreeves commented 6 years ago

sent to karie for review

amberreeves commented 6 years ago

from karie I agree about a cookie notice – but I’m going to have a talk with my communications director and get back to you. I agree about the legal requirement – from what I read we’d have to follow the policies if we were marketing specifically/directly to EU customers.