Let's consider these reasons in more detail:
To Comply with the Law
Not only is it good business practice to provide users with an update notice, but it's often a legal requirement.
For example, if your business has customers within the European Union (EU) it will be subject to the General Data Protection Regulation, which requires companies to inform users of updates to their legal agreements.
The GDPR came into effect on May 25, 2018 and the regulation applies to any business that allows EU citizens to use their products or services, even if the business is not based in the EU.
To Meet User Expectations
People are becoming increasingly concerned with the safety of their data when accessing websites and apps. Privacy is paramount to users, as is a company's transparency about their privacy practices.
Update notices make your business seem more trustworthy and enables you to build a better relationship with your customers.
To Avoid Misunderstandings and Disputes
A customer has the power to take a business to court for failing to follow its own policy. Not only would this be costly, but it could damage the company's reputation.
You can avoid this happening to your business by providing users with update notices. If you've notified your users, they cannot say they haven't been informed of the changes or say it's not what they agreed to.
An update notice also gives users the chance to opt-out or to close their account if they're dissatisfied with the changes.
Children Under 13
What Should You Include in an Update Notice?
Users will appreciate a paragraph which states how the changes will affect them. If you've made a change which enhances the privacy of the user this is a great opportunity to build trust.
You may also wish to include why you've made the changes. Is it due to changes in the way your company operates or has a new law come into effect?
You should also state the date the changes come into effect. Ideally you should give users at least 2 weeks notice. If this is not possible, you can give a shorter notice period or state that the change has already come into effect.
Lastly, follow the GDPR guidance when writing your notice.
How Should You Send The Update Notice?
Let's review some of the methods:
An email could be sent at the same time the change comes into effect, or prior to the change coming into effect.
It's best to send the email before the change and to advise users of the date the updated policy comes into effect. This gives users a chance to review the changes to see if they're happy with them prior to them taking effect.
An advantage of emailing your update notice to users is that it makes your business seem open and proactive. Another advantage is that the email provides you with an opportunity to include a concise summary of the changes you've made.
A disadvantage is that in order to send an email update, you'll need a list of your users' email addresses.The email also advised users when the changes would come into effect.
The main advantage is that the notice will be the first thing users see when arriving at your site. This gives them the chance to leave the site or close the app if they're unhappy with the policy revision.
News Page or Blogpost
The advantages of this is there will be space to include a summary of key changes and it doesn't require you to know user's email addresses.
A disadvantage is that users might not check your blog or news page regularly. A user could come across an old blogpost about a previous update and mistakenly believe the post related to a current update. To avoid this, make sure you clearly mark the date on the blogpost.
It's advisable to combine methods to ensure you have done everything you can to notify users of your update. This will help to prevent user grievances. Plus, if a user did bring a lawsuit, you would be able to show the court that your users weren't just informed of the updates, but that you also made them as accessible as possible.
Ascentrix Consulting has the latest security tools to help you quickly and effectively meet GDPR requirements. Contact us today for more information.