Today, almost everything from banking, shopping, learning, employment applications to registration for services is done online, via a website or mobile App. A person making use of the various platforms (Data Subject) is required to provide some form of personal information, otherwise known as Personal Data.
i. that the Data Subject has the right to consent to the collection of their data and what constitutes giving of consent i.e. ticking a box. It should also state that the Data Subject has the right to withdraw consent, be forgotten, rectify information provided, to restrict processing and Personal Dataportability
ii. a description of the collectable Personal Data i.e. what information is required
iii. the purpose for the collection and processing of the Personal Data – i.e. as a result of a contractual obligation – provision of details to receive a service, loan, etc.
iv. the Technical Methods used to collect and store personal information, cookies JWT, web tokens,etc.
v. what access (if any) Third Parties have to the Personal Data collected and the purpose for the access
vi. period of storage of the Personal Data
viii. the time frame for the remedy