{"id":23577,"date":"2023-05-01T06:03:05","date_gmt":"2023-05-01T06:03:05","guid":{"rendered":"https:\/\/e-cens.com\/?p=23577"},"modified":"2024-11-01T11:45:59","modified_gmt":"2024-11-01T11:45:59","slug":"privacidad-de-datos-en-alza-introduccion-y-analisis-de-riesgos","status":"publish","type":"post","link":"https:\/\/e-cens.com\/es\/blog\/privacidad-de-datos-en-alza-introduccion-y-analisis-de-riesgos\/","title":{"rendered":"Privacidad de datos en alza: Parte 1 – Introducci\u00f3n y an\u00e1lisis"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Overview<\/h2>\nSince GDPR came into effect in 2018 in Europe, more and more countries have followed suit. The shift toward consumer data protection across the globe has resulted in CCPA, LGPD, and POPI, among others.\n\nAccording to DLA Piper, the following are already in effect or will be in effect shortly:\n
\"GDPR<\/figure>\nAs such regulations spread worldwide, sooner or later, each and every business will be forced to adhere to data privacy regulations. This will impact anyone who runs a website, too.\n

Data collection prior to GDPR<\/b><\/h2>\nPrior to the introduction of the GDPR, data collection was completely hassle-free and did not require user consent.\n
\"GDPR<\/figure>\nThe user opened a web page in a browser on their device, and as soon as the website was downloaded, various scripts (so-called tags) sent data to the corresponding systems \u2013 regardless of whether these were web analytics systems or marketing automation platforms. Even the mere inclusion of certain technologies triggered data collection by third parties (e.g., Google Maps or YouTube).\n

(Some) Requirements to fulfill GDPR<\/h2>\nLet\u2019s briefly examine some of the requirements to fulfill GDPR regarding data collection on websites.\n
\n\n\n\n\n\n\n\n\n\n
\"\"<\/td>\nConsent on a free-will basis<\/strong>\nUser must be able to provide consent freely, and it must be possible to access the website without consent (i.e., access to view those services. It is not technically necessary to provide the service).<\/td>\n<\/tr>\n
\"\"<\/td>\nMaking informed decisions<\/strong>\nAll relevant information (i.e., purpose of processing, processor, etc.) must be available at the point of giving consent.<\/td>\n<\/tr>\n
\"\"<\/td>\nGranularity<\/strong>\nThe purpose of the data collection must be explained granularly; general consent is not valid.<\/td>\n<\/tr>\n
\"\"<\/td>\nExplicitness<\/strong>\nConsent must be given explicitly, e.g., by clicking or tapping; implicit consent is not considered valid.<\/td>\n<\/tr>\n
\"\"<\/td>\nConsent prior to data collection<\/strong>\nTechnologies not covered by legitimate interest should only be loaded if consent was given.<\/td>\n<\/tr>\n
\"\"<\/td>\n(Easy) Opt-out<\/strong>\nRefusing to consent or revoking a given consent must be as easy as giving consent.<\/td>\n<\/tr>\n
\"\"<\/td>\nDocumented consent<\/strong>\nThe website owner must be able to prove that the user\u2019s consent was given and<\/em><\/strong> that the consent meets the requirements for valid consent.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n

How data needs to be collected since GDPR came into effect<\/h2>\nGDPR revolutionized the way user behavior data is collected on websites. Such data, which ultimately also serves profiling purposes, may only be collected with the explicit consent of the user. This consent must be voluntary, must be based on informed consent, and must be possible for each technology used.\n\nSuch requirements created a necessity for consent management systems<\/a> because, after all, it must be meticulously noted for each user exactly which technology the consent was given for. Thus the idea of the Consent Management Platform, or CMP, was born, which is dedicated to precisely these tasks.\n
\"\"As per GDPR requirements, the user should also be given the opportunity to explicitly consent to the collection of data. This was, and is, mainly achieved with the help of consent banners, which are displayed by the consent management platform (CMP) when the user visits the website for the first time.\n\nA CMP ensures that only when the user gives consent to data collection, is the data collected accordingly and passed on to the respective platform.<\/figure>\n

Data protection regulations cause data gaps<\/h2>\nThe requirement for explicit consent causes problems when it comes to new customers that were acquired by means of a campaign. Since data per se may only be collected after<\/i> the user has given consent, information regarding campaigns may be lost when the user is referred to the landing page for the first time and is asked to give consent to data collection.\n\nDepending on the campaign, channel, and technology used with regard to consent management, data relating to this user will only be collected from the second interaction<\/i> on the landing page or with the website.\n\nIn addition, every user has the right to refuse data collection and profiling on websites. The principle also applies that the user should be able to determine very granularly which technologies are allowed to collect data and which are not. This also applies to other existing and future regulations.\n
\"\"<\/figure>\nThere is, therefore, a significant danger that a data gap can, and will, occur in numerous places.\n

Well, the remainder are the new 100%..!<\/h2>\nAfter the GDPR was introduced and came into force in Europe, website owners had different experiences regarding data collection with Google Analytics (as well as other technologies). Decreases in data collection of 10% to even 90% could be observed \u2013 depending on the website and industry.\n\nThis repeatedly raised questions about the validity of the remaining data. It was also repeatedly speculated that very specific \u201ccustomer groups\u201d might want to avoid tracking. One of the most abstruse claims, however, was that there were certain users, who in the past had been responsible for high ecommerce sales numbers, who would now deliberately avoid data collection with Google Analytics in order to falsify the revenue statistics.\n\nOf course, a data protection regulation of this magnitude poses a challenge to marketers and website operators. Ultimately, both can only hope that as many website users as possible give their consent to data collection. Nevertheless, a change in mindset is now necessary in order to be able to continue to evaluate and interpret the remaining numbers with confidence.\n\nTherefore, as of the introduction of a CMP, the collected data and figures represent the new 100%. A further challenge offered by a marketer\u2019s new worldview is that it makes little sense to compare the data collected with the historical data from this point on.\n\nHere at e-CENS, we work to overcome these challenges and will continue to lead the conversation as to how we can best navigate the new Web2 realities.\n

Upcoming<\/h2>\nNext in the series, we consider how a CMP works…\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Visi\u00f3n general Desde que el GDPR entr\u00f3 en vigor en 2018 en Europa, cada vez m\u00e1s pa\u00edses han seguido su ejemplo. El cambio hacia la protecci\u00f3n de los datos de los consumidores en todo el mundo ha dado lugar a la CCPA, la LGPD y la POPI, entre otras. Seg\u00fan DLA Piper, las siguientes medidas […]<\/p>\n","protected":false},"author":7,"featured_media":21800,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_eb_attr":"","content-type":"","ub_ctt_via":"","footnotes":""},"categories":[1,212,211],"tags":[174,173,171,179,178,180,177,168,182,169,172,183,176,170,175],"class_list":["post-23577","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-cmp","category-data-privacy","tag-app","tag-appi","tag-ccpa","tag-cmp","tag-consent","tag-consent-management-platform","tag-data-collection","tag-data-privacy","tag-explicit","tag-gdpr","tag-lgpd","tag-opt-out","tag-pipeda","tag-popi","tag-ppb"],"acf":[],"featured_image_src":"https:\/\/e-cens.com\/wp-content\/uploads\/2023\/02\/e-cens_data-privacy-on-the-rise_banner-1.png","author_info":{"display_name":"Holger Tempel","author_link":"https:\/\/e-cens.com\/es\/author\/holger\/"},"_links":{"self":[{"href":"https:\/\/e-cens.com\/es\/wp-json\/wp\/v2\/posts\/23577","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/e-cens.com\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/e-cens.com\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/e-cens.com\/es\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/e-cens.com\/es\/wp-json\/wp\/v2\/comments?post=23577"}],"version-history":[{"count":1,"href":"https:\/\/e-cens.com\/es\/wp-json\/wp\/v2\/posts\/23577\/revisions"}],"predecessor-version":[{"id":31551,"href":"https:\/\/e-cens.com\/es\/wp-json\/wp\/v2\/posts\/23577\/revisions\/31551"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/e-cens.com\/es\/wp-json\/wp\/v2\/media\/21800"}],"wp:attachment":[{"href":"https:\/\/e-cens.com\/es\/wp-json\/wp\/v2\/media?parent=23577"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/e-cens.com\/es\/wp-json\/wp\/v2\/categories?post=23577"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/e-cens.com\/es\/wp-json\/wp\/v2\/tags?post=23577"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}