Alex Lotsu’s Post

📱 𝐌𝐨𝐛𝐢𝐥𝐞 𝐀𝐩𝐩 𝐏𝐫𝐢𝐯𝐚𝐜𝐲 𝐏𝐨𝐥𝐢𝐜𝐲 𝐂𝐡𝐚𝐥𝐥𝐞𝐧𝐠𝐞𝐬: Drafting a mobile app's privacy policy is a collaborative effort. Developers and Data Privacy Officers (DPO) must work closely to ensure technical functionality aligns with user privacy rights.  After my postings to GDPR and mobile apps, I had further insightful discussions with other developers and DPOs. These discussions showed me that app developers often work with lawyers or DPOs to compile an informative data privacy policy, and there are still some open issues. #MobilePrivacy #AppDevelopment 📱🔒🤝 I've outlined some key challenges we face when drafting mobile app privacy policies. While these are based on my conversations and experiences, I'd love to hear from all of you: 🤔 𝐃𝐨 𝐭𝐡𝐞𝐬𝐞 𝐩𝐨𝐢𝐧𝐭𝐬 𝐫𝐞𝐬𝐨𝐧𝐚𝐭𝐞 𝐰𝐢𝐭𝐡 𝐲𝐨𝐮𝐫 𝐞𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞? ✏️ 𝐇𝐚𝐯𝐞 𝐈 𝐦𝐢𝐬𝐬𝐞𝐝 𝐚𝐧𝐲 𝐜𝐫𝐮𝐜𝐢𝐚𝐥 𝐜𝐡𝐚𝐥𝐥𝐞𝐧𝐠𝐞𝐬 𝐨𝐫 𝐚𝐬𝐩𝐞𝐜𝐭𝐬? 💡 𝐀𝐫𝐞 𝐭𝐡𝐞𝐫𝐞 𝐨𝐭𝐡𝐞𝐫 𝐢𝐧𝐬𝐢𝐠𝐡𝐭𝐬 𝐨𝐫 𝐩𝐞𝐫𝐬𝐩𝐞𝐜𝐭𝐢𝐯𝐞𝐬 𝐲𝐨𝐮'𝐝 𝐥𝐢𝐤𝐞 𝐭𝐨 𝐬𝐡𝐚𝐫𝐞? Your feedback will not only help refine this discussion but also shape future conversations on this topic. Let's collaborate and learn from each other!

Compliance for apps in the UK requires an adaptive and flexible strategy. Guidelines directly impact data privacy, accessibility, and quality assurance processes. Our latest blog discusses how to navigate the complex landscape. Contents: 1. How to ensure the app is compliant with UK regulations 2. Common challenges and solutions 3. Best practices to follow 🔗 https://lnkd.in/g24yrq_T #GeekyAntsUK #GeekyAntsBlog #Compliance #AppDevelopment #SoftwareDevelopment

This learning activity is designed to provide practical, legal, and ethical considerations for identifying appropriate apps, understanding privacy policies, integrating apps into a treatment plan, and proper documentation. This program is designed to provide practical, legal, and ethical guidance for: - Explaining the difference between non-evidence-based and evidenced-based apps I- dentifying appropriate apps - Understanding privacy policies - Formally introducing an app in clinical care - Assuring its fit with the treatment model and orientation - Much more. See Details: https://lnkd.in/dQGfPjSz. #telehealth #telemedicine

This learning activity is designed to provide practical, legal, and ethical considerations for identifying appropriate apps, understanding privacy policies, integrating apps into a treatment plan, and proper documentation. This program is designed to provide practical, legal, and ethical guidance for: - Explaining the difference between non-evidence-based and evidenced-based apps I- dentifying appropriate apps - Understanding privacy policies - Formally introducing an app in clinical care - Assuring its fit with the treatment model and orientation - Much more. See Details: https://lnkd.in/dQGfPjSz. #telehealth #telemedicine

Data-hungry dating apps ranked from top to bottom “To see what user data they collect and what they do with it, we’ve reviewed 10 popular dating apps based on their privacy practices disclosed on the App Store as part of Apple’s privacy requirements. All of these apps collect your personal data – some more, others less. While most of that information is necessary to keep the app running, some is also used for advertising and may even be shared with third parties, apps, and websites owned by other companies.” News Source: https://lnkd.in/gzj6ukjV #dataprivacy #privacymatters #gdpr #compliance #regulatorycompliance #dataprotection #data #privacypolicy #appstore #advertisingandmarketing #datasharing #datagovernance

Data-hungry dating apps ranked from top to bottom “To see what user data they collect and what they do with it, we’ve reviewed 10 popular dating apps based on their privacy practices disclosed on the App Store as part of Apple’s privacy requirements. All of these apps collect your personal data – some more, others less. While most of that information is necessary to keep the app running, some is also used for advertising and may even be shared with third parties, apps, and websites owned by other companies.” News Source: https://lnkd.in/gzj6ukjV #dataprivacy #privacymatters #gdpr #compliance #regulatorycompliance #dataprotection #data #privacypolicy #appstore #advertisingandmarketing #datasharing #datagovernance #datarisk

This learning activity is designed to provide practical, legal, and ethical considerations for identifying appropriate apps, understanding privacy policies, integrating apps into a treatment plan, and proper documentation. This program is designed to provide practical, legal, and ethical guidance for: - Explaining the difference between non-evidence-based and evidenced-based apps I- dentifying appropriate apps - Understanding privacy policies - Formally introducing an app in clinical care - Assuring its fit with the treatment model and orientation - Much more. See Details: https://lnkd.in/dQGfPjSz. #telehealth #telemedicine

This learning activity is designed to provide practical, legal, and ethical considerations for identifying appropriate apps, understanding privacy policies, integrating apps into a treatment plan, and proper documentation. This program is designed to provide practical, legal, and ethical guidance for: - Explaining the difference between non-evidence-based and evidenced- based apps - Identifying appropriate apps - Understanding privacy policies - Formally introducing an app in clinical care - Assuring its fit with the treatment model and orientation - Much more. See Details: https://lnkd.in/dQGfPjSz. #telehealth #telemedicine

📱 CNIL - Commission Nationale de l'Informatique et des Libertés published its draft recommendations regarding mobile applications. The recommendations are open for public consultation until October 8. Here are some guidelines from the draft that I found worth sharing: 📍According to CNIL, the #GDPR doesn’t apply to app publishers processing personal data if two conditions are met: 🔹The user of an application controls, decides and implements the data processing solely for their benefit. 🔹The data processing happens in a self-contained environment where the third party, after providing the processing tools, doesn't manipulate or act upon the data. They merely supply the software for the user's use. 📍The #appstore acts in some cases as a data controller if the app store uses personal data for its own goals (like examining developer data during app review, using a unique identifier for its own needs, or tracking which apps a user has installed), it could be considered a data controller if it sets the ways and reasons for this data processing. 📍App publishers should use the least intrusive permissions needed, such as approximate instead of precise location, one-time instead of permanent permission, and no third-party data sharing when possible. If applicable, they should offer alternatives like manual data entry and process data locally when possible. 📍Consent should be obtained for remote collection of location data, and location data should be as precise as necessary only. Preferably, data should be stored in the app rather than on remote servers. Continuous location tracking should be limited to specific apps and the user should be reminded and asked for their agreement regularly if the user granted permanent permission 🎤 The app publisher should determine precisely the need and the reasons for the app access to the microphone, and in particular, if it is mandatory for the operation of the application #mobileapps #apps #privacy #rodo #dataprotection