What is GDPR?
TheĀ General Data Protection Regulation (GDPR) is the biggest change to our data protection laws in the past 20 years. On the 25th of May 2018, the EU’s GDPR will come into effect and it will impact millions of businesses of every size.
Why is GDPR important for SoccerNet?
As SoccerNetĀ is a social network, it will store various kind of user data including personal details (name, age, gender, address, phone number, etc.) as well as their IP address and timestamps and other demographic data that will contribute in understanding the user personas.
According to the latest GDPR paper the following practices need to be applied:
If Collecting The Data Directly:
You must inform the individual of:
- Your Organisationās identity.
- Your Data Protection Officerās identity.
- The purpose of the data processing.
- The legal basis for your data processing.
- Details of transfer to any third country.
- The retention period, or criteria.
- The existence of the individualās rights.
- Their right to withdraw consent at any time.
- Their right to complain to a supervisory authority.
- Existence of any automated decision making, including profiling.
- If provision is part of a statutory or contractual requirement, and consequences of not providing data.
GDPR Principles
The illustrations below indicates the fundamental principles of the GDPR which have to be followed at all times
To ensure that SoccerNet is GDPR compliant, each time a user registers with the platform we need to explicitly stateĀ in our terms and conditions what information we are going to collect and the reason we need the data. The T&C’s check box must be unchecked at all times as it is against the law to have it automatically checked.
Furthermore, user data must not be shared or sold to any third parties without informing the users and having their consent.Ā To ensure that user data are always kept safe, all sensitive information must be encrypted so that if there is a data breach, sensitive information will be in an unreadable format.