Both giants of the IT market and small companies regularly fall into scandals related to the processing of personal data of users. But if conditional Google can recover from multimillion-dollar fines, then privacy policy mistakes can be fatal for a startup. I will tell you how to minimize risks from the legal side in this article.
It is worth thinking about creating a privacy policy (PC) already at the stage of product or service development. Launching a solution without a well-designed PC is like putting a target on the company for potential legal prosecution.
Laws that govern PC in Russia
To figure out how to correctly write a privacy policy, you need to know what legislation you need to rely on. In Russia, the PC regulates a number of laws:
Federal Law No. 152-FZ of 27.07.2006 "On Personal Data";
Federal Law No. 149-FZ of July 27, 2006 "On Information, Information Technologies and Information Protection";
Civil Code of the Russian Federation;
RF Code of Administrative Offenses;
The Criminal Code of the Russian Federation;
Labor Code of the Russian Federation.
In addition, it is important to closely follow the explanations of Roskomnadzor, which, as the example of unblocking Telegram shows, can change quite quickly.
What must be in a PC
Any privacy policy consists of sections:
General.
Collection and use of personal information.
Collection and use of non-personal information.
About cookies and other technologies.
.
.
.
.
.
.
, .
.
.
.
. , . , , , , . , .
: , , cookie . , .. – .
, . , , – , , , .. . , – (IMEI), URL- , .. .
. : , , . , , , , .
, , , – . , , , , . , , . , , – , .
(Terms & Agreements) – , . Terms & Agreements, . : , Volkswagen Terms & Agreements , IP- , . – , Volkswagen , .
, , . , Terms & Conditions , .
? ( , ) ( ), , , - . , , .
Cambridge Analytica. , 87 Facebook 2016 . Cambridge Analytica , , Facebook. , . Facebook: – 5 . .
, . , . , .