4 ms·

so would it be sufficient to add a line to the TOS checkbox label: "I affirm that I am not a citizen of a EU-affiliated country" that seems simple enough - I t

so would it be sufficient to add a line to the TOS checkbox label: "I affirm that I am not a citizen of a EU-affiliated country" that seems simple enough - I think I'll add that to the projects I'm working on.

joering2 9y ago
Not enough. You also need a screenshoot of the form they completed and you need to keep it on file. There is so much info I read on this today I closed the article but it said that their ticked-box consent and IP is not sufficient.
- tscs37 9y ago
  You don't necessarily need a screenshot, a copy of the webpage the user saw would IMO be sufficient. You need to be able to show the user agreed and what they agreed to exactly. A screenshot might do that but might also not be sufficient (if there is more text elsewhere on the signup process related to privacy)
  - AlgorithmicTime 9y ago
    Are you a lawyer specializing in EU privacy laws?
  - joering2 9y ago
    For all downvoters: https://www.mailjet.com/gdpr/consent/ https://www.mailjet.com/gdpr/consent/ Scroll to: How do I store consent under GDPR? The record of the IP address, location and time at which someone submitted a consent form is insufficient without a screen capture of the form itself. You welcome!
    - tscs37 9y ago
      The specific recital is here: https://gdpr-info.eu/recitals/no-42/ https://gdpr-info.eu/recitals/no-42/ A screen capture is the easiest way to achieve compliance but the regulation leaves open other methods as long as you can show that someone gave consent and to what exactly. (IMO you could also store the HTML of the webpage they viewed at the time)
- LoSboccacc 9y ago
  That’s the weirdest thing. What do the law mean with a “screenshot of the form”
  - zaarn 9y ago
    There is nothing about a screenshot in the law. The law says you have to be able to prove the user ticked the box and provide an audit trail for it, IIRC some recitals mentioning that you should be able to reproduce the exact agreements the user made (ie, either in text or as a screenshot) so that you can later show the user and any regulatory body that asks what they agreed on.

joering2 9y ago

Not enough. You also need a screenshoot of the form they completed and you need to keep it on file. There is so much info I read on this today I closed the article but it said that their ticked-box consent and IP is not sufficient.

tscs37 9y ago
You don't necessarily need a screenshot, a copy of the webpage the user saw would IMO be sufficient. You need to be able to show the user agreed and what they agreed to exactly. A screenshot might do that but might also not be sufficient (if there is more text elsewhere on the signup process related to privacy)
- AlgorithmicTime 9y ago
  Are you a lawyer specializing in EU privacy laws?
- joering2 9y ago
  For all downvoters: https://www.mailjet.com/gdpr/consent/ https://www.mailjet.com/gdpr/consent/ Scroll to: How do I store consent under GDPR? The record of the IP address, location and time at which someone submitted a consent form is insufficient without a screen capture of the form itself. You welcome!
  - tscs37 9y ago
    The specific recital is here: https://gdpr-info.eu/recitals/no-42/ https://gdpr-info.eu/recitals/no-42/ A screen capture is the easiest way to achieve compliance but the regulation leaves open other methods as long as you can show that someone gave consent and to what exactly. (IMO you could also store the HTML of the webpage they viewed at the time)
LoSboccacc 9y ago
That’s the weirdest thing. What do the law mean with a “screenshot of the form”
- zaarn 9y ago
  There is nothing about a screenshot in the law. The law says you have to be able to prove the user ticked the box and provide an audit trail for it, IIRC some recitals mentioning that you should be able to reproduce the exact agreements the user made (ie, either in text or as a screenshot) so that you can later show the user and any regulatory body that asks what they agreed on.