Ask IH: GDPR Privacy Policy Tools
I was wondering if the community knew of any tools that help generate solid legal privacy policies for startup founders.
I’ve contacted a few legal firms in light of GDPR coming into effect however the fees are quite expensive. Would love to hear what other people are doing or is a solicitor the only way to go?
Hi @seanquinn, I've just come across your post skimming the latest GDPR questions. I've been working on iubenda for 5 years + and this is exactly what we do. We productise privacy policies (among other things).
We're in the middle of rolling out our newest version with support for GDPR. I'm happy to answer any questions you might have.
Awesome, I'd love to check out the latest product. Feel free to send me an email at sean@timekeepr.co.uk :)
Hey @seanquinn, just a small tip: be careful with searching for lawyers specifically related to the GDPR. While doing research for GDPR Wall (thread on IH), I came across a lot of "marketing lawyers" who looked like better marketers than lawyers, and who also became very expensive.
For your communication towards your visitors (e.g. privacy notice), particularly article 12 is important. Communication doesn't only happen via a Privacy Policy, so making sure that your forms (consent forms, opt-in checkboxes) comply with the GDPR's transparent communication rules is more than half of the battle.
Sharing the cost of a lawyer can also be tricky, many lawyers I've talked to preferred to stay local (only comment on regulation in the local country) or to wait until the ePrivacy directive is also updated.
Hey Sebastien,
Thanks for the tips and the links, I’ll read into them. I’ve specifically reached out to local reputable legal firms thus far, no experts that say they specialise in GDPR.
If you google search for privacy policy generator a few of the larger companies have GDPR generators already which are at least an order of magnitude cheaper than the lawyers fees you quoted below.
How much were they asking? I'd love to see us all chip in to get a solid GDPR-compliant privacy policy that we could share under a permissive license.
I've read a few "GDPR in plain English" posts. I'm afraid that the law is so specific about disclosing what data is collected and how it's used that it may be impossible to get a one size fits most privacy policy. Lawyers may be the only way to go if you want it bulletproof.
Yeah that’s the thing, I’d like to ensure the policy doesn’t cost us further down the line. Really interested to hear what others are doing.
Quotes provided were around £3000, not a life changing amount of money but costly for an indie maker. For full disclosure these quotes also included a terms and conditions document, but privacy policy is my priority.
I have an appointment with a TM attorney today to cover TMs, privacy policies, and terms of services. They mentioned they work with TrustArc to handle GDPR, so I'll see what comes of it.
We're working on a SaaS solution related to the GDPR, will also have Privacy policy generator. We will have several pricing packages, if you're not in a hurry, wait for a while. You can also join our beta if you like, but note that Privacy policy generator is still not ready for public use.
The URL is: https://www.gdprhq.io/
We all know how hard running a startup can be especially if it is bootstrapped.
I compiled 40 free tools that can be useful in starting and managing a startup
Use this link to get your copy and pay whatever you want to pay to access it.
http://bit.ly/2FF1g4o