EdWeb deployment update May 2018
On May 24 we will apply our GDPR compliance features, plus minor module security updates to EdWeb. These will allow us, and you, to meet new data protection requirements.
If you are an EdWeb form or tech user – or you are a lead publisher of an EdWeb site – you must deal with the new features. If you are not in one of these categories, you should still be aware of the changes taking place on the website.
On Friday 25 May 2018 the General Data Protection Regulation (GDPR) comes into force, regulating how we collect, use, store and dispose of personal data.
Global cookie consent
We will add a cookie consent banner for website visitors to the top of every page on EdWeb. Visitors will be able to choose to stop being tracked by performance cookies, by targeted advertising, or other cookies where locally applied. Once their preferences are saved, this banner will be minimised.
EdWeb form consent mechanism
We are adding a consent check box to all EdWeb forms. Website visitors will need to consent to their data being collected before they submit a form. For all current and future forms containing personal data, you must state a clear purpose and retention period for the data collected.
HTML Asset and Web Application overlay for materials that set cookies
The custom HTML asset and the Web Application content type allow you to embed content from 3rd parties. This can result in cookies being set by these 3rd parties: you must ask consent from visitors to set these.
- What information we collect about website visitors and why
- How we obtain consent and what the legal basis of this is
- Data controller contact details
- How to make a complaint
- Update of the cookies we use
You do not need to take any action as a result of this, but it is worth reading the contents of the new policy.
If you run a website that is not in EdWeb, you will need to consider your privacy notice.
We have updated our privacy notice and you are able to use this as a template. Do not simply point users to the University Website privacy notice, though, as it is unlikely that the personal data collected is exactly the same. You’ll need to create your own and include details of the data that you collect.