2,299
edits
Changes
no edit summary
==Overview==
'''Privacy is a shared responsibility'''. This feature allows organizations to better highlight their privacy and other stated policies, provides tools to manage country and language combinations, and places persistent links to policies on login pages and user portals. ===General Data Protection Regulation===One of the largest aspects of [[SmartSimple]]'s privacy configuration is our compliance with the '''General Data Protection Regulation''' (GDPR). The GDPR is an EU legislation that is designed to protect the fundamental rights of citizens and their personal data. This law ensures that people not only know where their private data is kept, but it also holds organizations accountable and transparent with their practices. [http://EUGDPR.rg EUGDPR.org] lists the key changes brought about by the enforcement of the GDPR beginning '''May 25, 2018'''. As a directly binding regulation, the GDPR stipulates that controllers of personal data must put in place appropriate technical and organisational measures to implement its data-protection principles. This article describes which features and policies [[SmartSimple]] has implemented into our platform to help you comply with the GDPR.
==Feature Illustrated==
[[Image:Privacy_top.png|link=|400px]]<br />
''Privacy and Security link displayed on a users portal (above).''<br /><br />
[[Image:Privacy_configuration_page.png|link=|600px]]<br />
''Country and language policy configuration page is displayed above. Found under Configuration > Global Settings > Security tab.''<br /><br />
==Configuring the Privacy and Security Settings==
You must create a policy for the '''Default Country''' and '''English''' language first. The default will be displayed to all users prior to login.
# From the Configuration menu, click on '''[[Global Settings]]'''.
===Policies===
This section allows you to create specific country and language policy combinations.
* '''Language''' - Select the language that will be associated with the country selected from the above option.
===Policy Details===
This section allows for the labeling of policies and the adding of policy details via rich text or external link. Each policy can be labeled individually using the label field to the right of the policy name.
* '''Enforce User Acceptance''' - determine if/when policies require acceptance by end-users. Used in conjunction with the '''User Acceptance Required''' option to enforce acceptance specific to individual policies.
* '''Interval''' - Drop-down with fee interval options. If one of the options is selected it will make users re-accept the policies at the set interval.
* '''Introduction''' - This defines the first policy page displayed and can be used to introduce the policies that have been defined. Only the rich text option is available for defining the introduction (no URL option).
* '''Privacy Policy''' - This option allows the privacy policy to be defined. * '''Communications Policy''' - This option allows the communication policy to be defined. * '''Data Access''' - This option allows the data policy to be defined. * '''Accountability''' - This option allows the accountability policy to be defined. * '''Data Confidentiality''' - This option allows the data confidentiality policy to be defined. * '''Performance Integrity''' - This option allows the performance integrity policy to be defined. * '''International Data Privacy''' - This option allows the international data privacy policy to be defined.
The policies (with the exception of Introduction) have 3 options None, Rich Text, and URL. . .
* The '''None''' option means that this policy is not defined for this country/language policy combination
* The '''Rich Text''' option allows the creation of the specific policy using the rich text editor * The '''URL''' allows the specifying of a URL link resource to be referenced from an external site.<br />
They also have a '''User Acceptance Required''' option to indicate that the user is required to provide acceptance specific to individual policies after the date specified in the '''Enforce User Acceptance''' setting.<br /><br />
==Adding the Privacy & Security link to Existing login pages==
For login pages created prior to the introduction of this feature (April 2016) the Privacy & Security link will not show by default. This can be added manually by updating the Standard Template located on the [[Login Screen Content]] page. '''Note:''' Updating the Standard Template will remove any previous formatting. It is recommended that you start with the Standard Template and then customize the page to your satisfaction. In the case where you decide that you do not want to use the Standard Template the code below includes the link to insert it manually:
{|
|<a href="/-||[s_viewpolicies.jsp?companyid=@companyid@&policylang=@lang@&isexternal=1"><span><i class="fa fa-lock"></i>Privacy & Security</span></a>]
|}
* Each field includes a ''last modified by'' and ''modified date stamp''
* Policy formats include both rich text format and URL link to a webpage containing the policy
* Additional policies can be added by clicking the '''+ plus icon''' at the bottom of the Policy Details section.
==Privacy logs==
The PDF is named using the structure ''[userid]-[firstname]_[lastname]_policy-[policyid]-[countryid]-[langid]_V_[version].pdf''
[[Image:PrivacyViewLog.png|link=|1300px]]<br />
[[Category:How]][[Category:Global Settings]]
