It is a fact that technology has an effect on human rights. Especially today, when people spend much of their online time browsing and shopping for various products and services. Back in 1968, the Council of Europe studied these effects. Just one year later, Convention 108 was introduced. In 1973 we had the first Privacy Law - the Swedish Data Act. Germany followed with the Data Protection Act in 1977 and many others on the old continent were to follow these examples.
Back in 2008 a big name in the online retail industry, Life is Good, INC. and Life is good Retail, Inc. settled FTC charges that it failed to safeguard consumer sensitive information. This was a violation of federal law.
The most important thing to explore and get familiar with when in eCommerce waters, is definitely Payment Card Industry Compliance. PCI compliance has one standard, in particular, PCI Data Security Standard that dictates to all online retailers how to store, process and transmit all credit card data.
Visa, MasterCard, and JCB International are just some of the organizations that make the PCI Security Standards Council organization. Their primary concern is how to enhance payment account data security.
Any online shop has to meet all PCI Data Security Standard requirements:
- Build and Maintain a Secure Network and Systems
- Protect Cardholder Data
- Maintain a Vulnerability Management Program
- Implement Strong Access Control Measures
- Regularly Monitor and Test Networks
- Maintain an Information Security Policy
Since many things in this area are not carved in stone, it is strongly advised to stay tuned to the latest developments in the field. For instance, you can read authoritative insights on the legal and regulatory issues affecting online business.
The best practices to follow when you run an eCommerce website go as follows:
- Consider using the clickwrap agreement technique if users can register an account on your eCommerce website.
Get familiar with standards
Decide who will be responsible
Follow the examples
Check the privacy practices of your eCommerce website
Here are the most common data entries collected by eCommerce websites:
- Personal user information such as shipping address, phone number, email, name, etc.;
- Financial and payment data: credit card number, CVV, expiration date, etc.;
- Data collected by cookies: behavior tracking and other site analytics;
- Usernames and passwords if websites require registration.
- Make Sure to know What Happens with the Data
- The most important things regarding user data include the following: where it is stored, how long it stays stored and how it will be used and/or shared. It is important to know whether your site just uses payment processing info as a gateway and doesn't store it at all, or it stores this confidential data.
Post it on your eCommerce website
Keep it updated
A much better approach is to use an online generator. It will guide you through a series of questions to ensure the final policy is applicable to your eCommerce business and how you run it.
And don't forget to keep it updated. This way, you will not only minimize the risk of getting sued and be subject to numerous penalties, but you will also build trust with your customers and increase customer satisfaction and retention rates.
- May 29, 2017