GDPR compliance question

[Ymcmb]

Hi all,

Firstly, I'm hoping this is the correct forum for this thread (I couldn't figure out which other section to post it in).

So I have a query about GDPR.

To make it as simple as possible, I have a website (blog on Wordpress) and a forum that has Google Adsense ads on them. Nothing else. What do I need to do to make sure my website is GDPR compliant?

Do I need to have a Privacy Policy on my website? A Cookie Policy on my website? An "accept" or " reject" pop-up on my website. Am I able to copy a default template from somewhere or install a relevant free plugin? Am I better paying for something for this?

I just want to make blog articles daily and have people post on my forum without having to worry about all this GDPR stuff.

I know with Google Adsense, you can turn on a GDPR message that I believe will display on my website for every visitor. Is this enough to make my website GDPR compliant or do I still need to do something else?

Thank you all.

[not2easy]

Hi Ymcmb and welcome to WebmasterWorld [webmasterworld.com]

I've moved your question to the Google AdSense - Display Ads forum where AdSense users can better assist with compliance questions.

GDPR compliance is covered by using the AdSense GDPR message, but you should determine whether that would cover all of your traffic. UK and EEA requires a different compliance since late June: [webmasterworld.com...]

You may find other useful discussions regarding AdSense compliance here: [webmasterworld.com...]

[CommandDork]

I always include a Disclaimer, Privacy Policy, and Cookies page on all of my sites to cover all of my basis's's's'. No harm in doing that and, if I remember correctly, some of those were more or less required by Adsense at some point in the journey - but I could be wrong, again, it doesn't hurt.

I simply use the GDPR tools within the Adsense interface and haven't had any issues thus far. Plus there is a handy (if simplistic) report showing its effectiveness to date right on the GDPR page.

I would, however, suggest making the GDPR prompt specific to the site itself, as in customizing the message with your site logo and all - you'll get better results / acceptance; I was able to drive my acceptance rate from 75% to over 80% now.

[Peter_S]

In theory, using Google's own CMP should be fine. However, I note that , before making a choice, there are cookies being written, including one which is about profiling the visitor. This shouldn't happen....

But, the banner saying "Privacy managed by Google..." , should mean that Google is handling the responsibility regarding the GDRP compliance ...

[Ymcmb]

Thank you for the responses.

@CommandDork - How do you get on with the Google link at the bottom of your website? Do you just accept that as I can't find any way to customize it.

[mack]

Google's CMP does work, but I still prefer to have my own privacy policy on the website. You can provide the URL for this when creating your notice.

Mack.

[CommandDork]

@Ymcmb

The Disclaimer, Privacy Policy, and Cookie policies are all hard-coded separate pages on the site (my creation). But I feature them as well as Google's own GDPR system as a failsafe. And mack is right, you can use the Privacy Policy page on you site as the URL when the GDPR interface asks for one.

[allhearts]

Should I not show the "Do not consent" button on the GDPR message by turning it off?

[CommandDork]

@allhearts

Seems to be a choice right now as the "X" close-out button doubles as a "do not consent" based on what the Adsense interface shows.

I've left "Do Not Consent" off and have "Close (do not consent)" on for now.