'Most Innovative Startup 2020' by RSA - Watch the videoLearn More
Published on April 28, 2021 AUTHOR PRIVACY RESEARCH TEAM
When a person logs on to a website, the server assigns them a distinctive, user-specific identity. This identity is stored on the mobile or computer on which the browser is running. In case the user enters the website again, the browser sends cookie information to the server, allowing the website to remember the user.
In other words, cookies function as a kind of memory of the internet running through protocols that provide data flow. As sneaky as they can be, they were not created with malicious intent in mind. In 1994, Netscape Communications was developing an e-commerce application, and computer programmer Lou Montulli coined an idea which would hold great value to the e-commerce sector.
By remembering the information in the user's shopping cart, organizations can benefit from better user experience, and this is where cookies were used for the first time. With cookie consent becoming front and center, it is important for company websites that drop cookies or use other online tracking technologies to comply with various consent requirements.
In order to stay compliant, organizations need to have a cookie banner in place to obtain explicit, freely given consent to obtain these cookies. Failure to do so can lead to non-compliance amongst various data privacy laws.
In this article we will specifically address cookie consent under the LGPD and what organizations need to be careful about.
The new data protection law of Brazil known as the LGPD (Lei Geral de Proteção de Dados Pessoais) will provide a comprehensive and overall regulatory framework which offers individuals with a set of rights which can be exercised. This is a huge upgrade from previous sectoral federal laws that offered partial protection. The LGPD is greatly influenced by the EU’s GDPR.
The LGPD contains sixty-five articles and was passed in August, 2018, sanctioned by President Bolsonaro in July 2019. The enforcement date for the LGPD is set to be August 15, 2020.
Under the LGPD, there are certain requirements with regards to cookie consent. LGPD requires organizations to take freely given consent before collecting consumer data. This can be done by implementing a cookie banner on your website. Under the LGPD, organizations need to make sure that the cookie banner should support the following:
It is vital that data controllers provide consumers with the right to withdraw their consent. This option should be available in plain language and made clearly visible. In case a consumer wants to withdraw their consent, the data controller must provide the consumer with a free of charge procedure and facilitated procedure to revoke consent. if this is done, the controller cannot process data for which consent was previously given..
A compliant LGPD Cookie Banner requires:
Under article 5 of the LGPD defines consent as "free, informed and unambiguous manifestation whereby the data subject agrees to her/his processing of personal data for a given purpose.” This clearly states that LGPD requires opt-in consent, much like the GDPR. Before the consumers data is collected, the consumer must consciously give consent to the organization for storing cookies.
The LGPD has brought legal certainty with regards to a consumer's personal data, and the ANPD is responsible for providing the guidelines towards compliance as well as enforcing the laws under the LGPD. This includes defining and clarifying what constitutes as a controversial use of internet cookies.
A cookie banner is merely a script that you can embed into your website and it shows up as a banner when a user visits your website. Securiti is offering organizations a free cookie banner script that they can integrate into their website in mere seconds. This cookie banner has benefits such as:
With data collection exponentially increasing online, automation is necessary, now more than ever, for any organization that is hoping to comply with privacy regulations in a scalable way.
Securiti has created a free service that will enable organizations to simplify their cookie consent process and take a step in the right direction towards complying with privacy regulations all over the world.