Reduce unnecessary data collection
Take stock of the data you’re collecting. Gather only the data you need to be effective.
Obtain appropriate consent
When will consent be required and what form will it take? How will you provide delightful customer experiences with consent and without unwanted surprises? Consider the value proposition for consumer privacy, which can help drive conversion and loyalty.
Provide the required notice for data collection
Review and update your current privacy notices, policies and any information provided at data collection points.
Remove unique identifiers
Consider when to make some data anonymous or pseudonymous (by replacing obviously personal details with another unique identifier, typically generated through hashing, encryption or tokens) to help minimise compliance obligations and the risk of data and privacy breaches and claims.
Fulfil data access and deletion requests
Understand how your customer will keep in touch to you to make data access or deletion requests. Know how to define internal data retention and deletion policies and procedures.