5 Ways To Make Your Site GDPR Ready

On May 25th this year, the UK’s data protection act will be changed to the General Data Protection Regulation. This new law puts a greater focus on how companies and any business use personal customer data. The development of this reform has emerged following the hacking of global tech companies. The number of data breaches against companies are rising annually and GDPR is set to punish websites and business owners that do not look after data seriously and put people and their identities at risk.

To ensure compliance, we look at some of the ways to make sure your website is GDPR ready.

1. Be careful with mailing lists

Some important changes to data protection now mean that you cannot add people to your mailing list without them physically opting in. This has been the case for several years but now potential penalties have been increased from £500,000 to £20 million euros, making it a real game changer.

A common tactic by websites is to automatically subscribe you if you have made an enquiry, comment or purchase. This is not the same as being subscribed and now websites have to be more careful. This can be achieved my making much stronger opt-ins and making the messaging much clearer.

2. Have a strong privacy policy

If they do not already, each website should have a strong and detailed privacy policy in place for May 2018. This page should clearly inform subjects how long the data will be stored for and who they should contact if they have any questions relating to their data.

To be compliant, websites should give users a simple way to request their data and receive a copy by email or post.

3. Add encryption

Websites are strongly encouraged to add extra encryption to their website to avoid the threat of hackers or data breaches. Again, this is something that has been recommended for some time but GDPR means it could be compulsory.

Websites can purchase an SSL certificate which makes the site start with https instead of http and this adds a layer of encryption, making it harder for hackers to access the back of the site.

The average cost of an SSL certificate is around £100 from the likes of GoDaddy, which Big Red can include and install within any website build project.

Other encryptions include the development of specific IDs for customers. So, in the event that data is stolen, the names of customers will not be available since it will be under a number or ID.

4. Allow deletion of customer information

Internally, a company must now create a way for someone’s data to be fully removed from their system. This is not just opting someone out of weekly newsletters. It is a case of completing wiping the person’s information off the system if they have requested this.

5. Handle submissions and applications with care

GDPR requires websites to state what data is being processed and for what purposes. For instance, those looking for a car insurance quote or loan will be accustomed to filling in details – but now there requires greater transparency over what these details are for.

Websites will need to take advice by Big Red as to whether it is sufficient to include this information in the privacy policy or mention it clearly within an online form or on the ‘thank you page.’ This must be done to log and gain user consent.

Big Red Digital has been working with our clients for the last 12 months ensuring that existing websites are ready for the new regulations in May 2018. We are also consulting with new clients on the best site design, marketing strategy, and ensuring compliance is met at every stage of the data journey through your business.

Want To Know More?

To have an initial discussion on GDPR regulations around your website – call us on 0141 771 7242 or Contact Us Here.