On May 24 we will apply our GDPR compliance features, plus minor module security updates to EdWeb. These will allow us, and you, to meet new data protection requirements.

If you are an EdWeb form or tech user – or you are a lead publisher of an EdWeb site – you must deal with the new features. If you are not in one of these categories, you should still be aware of the changes taking place on the website.

On Friday 25 May 2018 the General Data Protection Regulation (GDPR) comes into force, regulating how we collect, use, store and dispose of personal data.

Global cookie consent

We will add a cookie consent banner for website visitors to the top of every page on EdWeb. Visitors will be able to choose to stop being tracked by performance cookies, by targeted advertising, or other cookies where locally applied. Once their preferences are saved, this banner will be minimised.

Details of the banner on the EdWeb support wiki

EdWeb form consent mechanism

We are adding a consent check box to all EdWeb forms. Website visitors will need to consent to their data being collected before they submit a form. For all current and future forms containing personal data, you must state a clear purpose and retention period for the data collected.

Audit your forms – and read the form consent guidance on the EdWeb support wiki

HTML Asset and Web Application overlay for materials that set cookies

The custom HTML asset and the Web Application content type allow you to embed content from 3rd parties. This can result in cookies being set by these 3rd parties: you must ask consent from visitors to set these.

Audit your site for technical elements – and read overlay guidance on the EdWeb support wiki

Website privacy policy

In accordance with our obligations under GDPR, we have updated the University website privacy policy. The areas that have been updated are:

• What information we collect about website visitors and why
• How we obtain consent and what the legal basis of this is
• Data controller contact details
• How to make a complaint
• Update of the cookies we use

You do not need to take any action as a result of this, but it is worth reading the contents of the new policy.

You do not need to set a local privacy policy in EdWeb for website activities.

If you run a website that is not in EdWeb, you will need to consider your privacy notice.

We have updated our privacy notice and you are able to use this as a template. Do not simply point users to the University Website privacy notice, though, as it is unlikely that the personal data collected is exactly the same. You’ll need to create your own and include details of the data that you collect.