Helping to speed
up your GDPR
implementation

A comprehensive checklist created from the Information Commissioner's Office regulatory guidance and combined with best practice material to deliver over 500 GDPR compliance safeguards.

Our website Tag Monitor identifies personal data calls
Companies with a web presence need to ensure that they have modified or removed any tags that process personal data (including IP address) without the user’s consent.

Consent

Companies that wish to track online users who are EU citizens and collect data about them will have to get clear and voluntary consent.

This cannot include pre-marked opt-in boxes and companies are not allowed to deny access to users if they do not consent.

Consent will have to be received for each activity, if a company wants to track a user’s behaviour via web analytics and use their data for advertising then they will have to get consent for both.

Challenges

An organisation with multiple brands and numerous websites faces a significant challenge, not only to accurately register such assets but also identify and fix any tags that connect with site users that haven’t granted their consent.

An asset list will only contain websites built by development teams known to the company. It may not include online and offline agents, third party companies and other partner built sites.

It may also not include non-direct brand sites that are built and maintained in each country. Each site may not be driven by one CMS or controlled by one team so every page needs to be checked.

The global picture of websites and tags can change on a daily basis so continual reviews are important.

Options

One option is to identify tags manually using web analytics tools, which can be a lengthy and costly exercise:

This involves a software licence cost per website which can soon become expensive. These licences must be renewed annually and limit the number of website pages they can process.

Additional skilled (and often outsourced) resource may be required to run and interpret the reports and if the software experiences any difficulties with a particular site there is no option to fix it.

There are no automated monitoring functions to speed up the process and reduce operating costs. These applications cannot be tailored to fit any client specific requirements for a particular website.

There may also be no integration with any GDPR compliance framework for reporting purposes.

Solution

Solvassure Tag Monitor solves these problems by automating the website compliance process. A brand internet asset register enables all relevant websites and pages to be catalogued.

A tag register enables all known tags to be catalogued and white-listed for each website. A schedule configurator automates tag monitoring to run in the background.

Exceptions reporting highlights issues to key stakeholders when they are identified and our Tag Monitor is fully integrated with our GDPR Compliance Technology.

Solvassure. Compliance Technology.