Transformations  in
Business & Economics

DEVELOPMENT OF DIGITAL CONTENTS: PRIVACY POLICY MODEL UNDER THE GENERAL DATA PROTECTION REGULATION AND USER-FRIENDLY INTERFACE
Tadas Limba, Kestutis Driaunys, Mindaugas Kiskis, Aurimas Sidlauskas

ABSTRACT. Fast technological development due to the convergence of calculation power progress, increased storage capacity and advanced network technology makes it possible for companies to collect, process and interlink data in an expanded way. Organizations increasingly tend to use these data for various purposes, such as marketing and personalized services. The European Union's General Data Protection Regulation (hereafter referred to as GDPR) went into effect on 25 May2018. Its privacy regulations apply to any companies collecting or processing personal data in Europe. Many companies had to adjust their data handling processes, privacy policies, and consent forms to comply with the GDPR's transparency requirements. It is important for organizations to ensure that their privacy policies are GDPR compliant. However, it is also important for these policies to be designed with the needs of the human recipient in mind. The main problem discussed in this article is the fact that organizations' privacy policies do not comply with GDPR requirements and recommendations of a user-friendly interface. The article introduces the GDPR, including its associated requirements for companies, analyzes privacy policy requirements and best practice for a user- friendly environment. The main purpose of this article is to develop a theoretical privacy policy model under the GDPR, along with a user-friendly interface, the application which could enable organizations to provide relevant content in their privacy policies, ensure consumer rights and encourage greater dissemination of information. This novel theoretical privacy policy model would enable organizational privacy policies to become more user-friendly, more readable and easier to understand, and would bring them into line with the requirements of the GDPR. The privacy policy is the main medium of information dissemination between the data controller and the users. Non-compliance with the GDPR poses financial, legal and reputational risks to companies .

KEYWORDS:  GDPR, privacy policy, user friendly interface, personal data.

JEL classification:  K20, O21, O30. M10, M30.