Privacy is more than simply updating your website

Business owners and employers know they need to comply with privacy laws, but the scope of compliance has expanded. In the past, organizations created general privacy policies, posted them on their websites, and went about their business. Today, privacy compliance requires more. Organizations must complete both external and internal tasks to create a successful privacy program.

External compliance

To achieve external compliance, you should view your organization's website from a customer's perspective and make privacy information clear and readily available. A customer should see links to privacy notices and applicable policies when they first visit the site.

Typically, when visiting an organization's website, customers are greeted with a popup explaining how the website uses cookie data. You should add a sentence inviting users to visit the privacy policy if they have questions. The invitation gives users an opportunity to learn about the company's privacy practices before you collect their information.

Privacy notices should include: