Re:GDPR consent design: how granular must adtech opt-ins be?
by stingraycharles on Wednesday January 10, 2018 @05:11AM
(#16113813)
> Any insight from HN insiders on how seriously companies big and small are taking this?
CTO of a video service platform that caters to webshops here. We take it very seriously; we had discussions with our lawyers about this about 1.5 years ago, and have been preparing our data warehouse in the meantime to be able to fall under the "analytics exempt". On a weekly basis, there is at least one customer whose legal team is asking for some documentation / proof on how we handle this.
We have had a compliance audit, which effectively tested whether
- we were not doing third-party tracking, but only first-party
- all our customers' data is segregated / separated from each other (which effectively means a different database per customer), so that data cannot be combined
Perhaps this is a bit different in the ecommerce space than industry-wide, so YMMV.
CTO of a video service platform that caters to webshops here. We take it very seriously; we had discussions with our lawyers about this about 1.5 years ago, and have been preparing our data warehouse in the meantime to be able to fall under the "analytics exempt". On a weekly basis, there is at least one customer whose legal team is asking for some documentation / proof on how we handle this.
We have had a compliance audit, which effectively tested whether
- we were not doing third-party tracking, but only first-party
- all our customers' data is segregated / separated from each other (which effectively means a different database per customer), so that data cannot be combined
Perhaps this is a bit different in the ecommerce space than industry-wide, so YMMV.