Introduction

The Data Privacy feature is based on the Google Cloud Data Loss Prevention API, and is updated when the API is updated.

This document provides instructions for admin users on how to set up and configure the Data Privacy add-on.

Severity and likelihood

To find out more about how the scan calculates the prioritization of errors, as well as the severity and difficulty level, visit Issue priority.

Setup

This section provides instructions for admin users on how to set up the Data Privacy feature.

• Navigate to the Domain Overview page.

• Click Action on the same row as the domain and select Edit domain from the expanded list of options.

  The system opens the Edit Domain page.

• Locate the Features section.

• Turn the Data Privacy switch to ON. This activates the module and adds the link to configure the settings.

  

• Click the Open Data Privacy Settings link next to the Data Privacy button. 

  The system opens the Domain Data Privacy Settings page.

• Locate the Choose what to Scan section.

  

• Toggle the appropriate switches to ON. The required settings in the Global requirements list are automatically selected. The choices are:

  • GDPR: General Data Protection Regulation applies to any EU company and requires that all personal data that is collected and/or processed is made transparent, including the disclosure of the purpose for data collection.
  • CCPA: The California Consumer Privacy Act is basically a set of regulations that apply to organizations that collect personal data on any California resident.

  • APA: Australia's Privacy Act includes thirteen codes of conduct with regards to the disclosure of personal information.

    Websites, companies, and organizations that operate in Australia must follow these codes of conduct in order to be compliant.

  • SHIELD: The Privacy Shield Program Overview is a mechanism for companies to use to comply with data protection requirements when transferring personal data from the European Union and Switzerland to the United States in support of transatlantic commerce.
  • PIPEDA: The Personal Information Protection and Electronic Documents Act of Canada applies to transfers of personal information to a third party operating outside of Canada.

  Tip! If your region/regulation is not on this list, it is possible to customize the settings to create specific requirements. Just select the regulation that is most similar and tick/untick the boxes to add or remove specific items from the scan.

  

• Click Save Preferences. The Domain Data Privacy Settings pane closes. 

  The system displays the Edit Domain page.

• Click Save.
  • The system closes the Edit Domain page.
  • A new Data Privacy report is in the Data Center after the next scan. Choose users to send the report to automatically after every data privacy scan.
  • The data privacy issues are stored in the History Center for quick reference. See the status and number of issues that the scan finds, as well as issues that are repaired.

Set up and manage cookiesFor instructions on how set up new cookies and manage existing cookies, visit Cookie setup.

Data Privacy setup

Frequently asked questions

How does Web Governance identify potential data privacy security issues?

Frequently asked questions