Search

How can we help?

Icon

Most organisations failing to inform users about use of their personal data

The ICO has led a global investigation of website privacy communications on behalf of the Global Privacy Enforcement Network (GPEN) and found many organisations’ data protection practices are lacking.

Globally, GPEN came to the conclusion that in relation to privacy communications, organisations tended to be vague, and lacked specific details. A majority of organisations reviewed also demonstrated failures in:

  • specifying how and where information would be stored;
  • adequately explaining whether data would be shared with third parties and what information would be shared;
  • providing users with a clear means of removing their personal data from a website;
  • making it clear how a user could access data held about them; and,
  • providing information on the safeguarding of data.

Jacob Montague

Senior Solicitor

View profile

+44 118 960 4613

Providing users with a clear means of removing their personal data from a website

The findings come as instant messaging giant WhatsApp has received a further warning from the Article 29 Working Party, which found that the information provided on WhatsApp’s privacy policy was “seriously deficient as a form of consent.” It also did not inform users that by agreeing to the terms and conditions, they would be agreeing to their personal data being shared with Facebook group companies. There are also concerns that WhatsApp users are unable to freely consent to data being shared and the Working Party have requested that the company introduces these controls in order to comply with the GDPR.

Clearly, many companies worldwide still have a long way to go to meet upcoming GDPR requirements. These requirements are not only applicable to organisations based within the EU, but also those that do business within the EU. The UK government has confirmed that despite Brexit, the GDPR will apply to the UK.

About this article

Disclaimer
This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.

Jacob Montague

Senior Solicitor

View profile

+44 118 960 4613

About this article

Read, listen and watch our latest insights

art
  • 10 July 2024
  • Employment

Redundancy : Back to Basics FAQs

Redundancy can be a scary and overwhelming time both for employees being made redundant, and for those that have to make the decision. It is important for both parties to know their rights and obligations in this time.

art
  • 09 July 2024
  • Public Procurement

Buyer Beware: Practical Guidance for Breach of Warranty in an SPA

Are you buying a business? Whether you are buying shares in a company or purchasing its assets… the general Latin common law principle “caveat emptor” applies.

art
  • 08 July 2024
  • Corporate and M&A

Navigating corporate transparency: ECCTA reforms series

This is the second article in a series exploring the changes brought by the Economic Crime and Corporate Transparency Act 2023 (ECCTA).

art
  • 08 July 2024
  • Immigration

Right to Work Check Guidance – Key Changes for Employers

This updated guidance introduces several significant changes aimed at streamlining the right to work verification process for employers.

Pub
  • 02 July 2024
  • Privacy and Data Protection

Data protection unlocked for HR: Introduction to data protection

Lucy Densham Brown and Sana Nahas from the data protection team will discuss data protection issues encountered by HR professionals in the first episode of the ‘Data Protection Unlocked for HR’ podcast series.

Pub
  • 27 June 2024
  • Employment

TUPE Podcast Series: What Transfers

In this sixth podcast in our TUPE Podcast Series, Amanda Glover will delve into the automatic transfer principle and what transfers to the incoming employer under TUPE.