A01 chaf6542 06 se fm indd

privacy statement

 and (b) suggests 

that explicit opt‑in to cookies is required – this is what we now see on many sites fol‑

lowing the implementation of the law in 2013. In other words, on the first visit to the 

site, a box has to be ticked to agree to the use of cookies. This was thought by many 

commentators to be a curious provision since this facility is already available in the 

web browser.

Privacy statement

Information on a website 

explaining how and why 

an individual’s data are 

collected, processed and 

stored.

M04_CHAF6542_06_SE_C04.indd   149

7/23/14   12:18 PM

---

150

Part 1  Introduction

(

www.imrg.org/ISIS

). Another initiative, aimed at education, is GetSafeOnline (

www.get‑

safeonline.org

), which is a site created by government and business to educate consumers to 

help them understand and manage their online privacy and security.

Government initiatives will also define best practice in this area and may introduce laws 

to ensure guidelines are followed.

We conclude this section on privacy legislation with a checklist summary of the practical 

steps that are required to audit a company’s compliance with data protection and privacy 

legislation. Companies should:

  1 

Follow privacy and consumer protection guidelines and laws in all local markets. Use 

local privacy and security certification where available.

  2 

Inform the user, before asking for information:

● 

who the company is;

● 

what personal data are collected, processed and stored;

● 

what is the purpose of collection.