Data protection

Development model: MVC Portal Engine
✖
Copy to clipboard

Across the world, certain privacy laws that restrict the manipulation and processing of personal data are in effect. Most notable are the European Union’s Cookie law and the General Data Protection Regulation (GDPR).

Kentico provides functionality that facilitates compliance with these legislations. For more information, see the GDPR compliance overview, and the Working with cookies page.

General Data Protection Regulation

The General Data Protection Regulation is a regulation on the protection and free movement of personal data of all individuals within the European Union. Assembled by the European Parliament and the Council of the European Union, the regulation is in effect from the 25th of May 2018 across all EU member states. It applies to organizations that collect or process data from EU residents or cooperate with EU-based organizations that process the data on their behalf.

The Cookie Law is a piece of privacy legislation that requires websites to get explicit consent from visitors to store or retrieve any information on their devices. It was designed to protect online privacy by making consumers aware of how information about them is collected and used online, and giving them a chance to refuse such data collection.

CCPA (California Consumer Privacy Act)

The CCPA is a legislation designed to protect consumers in California. Coming into effect on January 1, 2020, the CCPA will ensure that companies are transparent on the personal information they collect, sell, and disclose, and detail how it is used. The CCPA applies to companies that collect, share, or sell California consumers’ personal data, and have annual gross revenues of more than $25 million, or possess the personal information of 50,000 or more consumers, or earn more than half of its annual revenue from selling consumers’ personal information.

To comply with this legislation, you can use data protection functionality provided by the system. See Creating consents and Implementing personal data collection for more information.