Welcome to the Gibraltar Regulatory Authority website

International Enforcement Operation finds Website Privacy Notices are too vague and Generally Inadequate

International enforcement operation finds website privacy notices are too vague and generally inadequate.

Organisations need to be more open, honest and transparent in their online privacy notices about how they handle people’s personal data, an international study has found.

The study, or Privacy Sweep in data protection terms, was conducted by the Global Privacy Enforcement Network (“GPEN”), and included input from 24 data protection regulators from around the world, including the Gibraltar Regulatory Authority (GRA), in its role as Data Protection Commissioner.

The GPEN Privacy Sweep, which was led by the UK’s Information Commissioner’s Office, concluded that ‘there is significant room for improvement in terms of specific details contained in privacy communications’.

To see the full document, please download it on the link below.