Wazygoose and General Data Protection Regulation

One of the biggest changes in data privacy regulation goes into effect on May 25, 2018. To strengthen the security and protection of EU citizen personal data, the European Union will require businesses who collect and handle an EU citizen's personal data to comply with the General Data Protection Regulation commonly referred to as GDPR.

Central to Wazygoose's mission is our commitment to be transparent about how we protect our customers's data. We recognize the trust and responsibility granted to us and we will be ready for the GDPR by May 25, 2018.

Along with updating our own internal business processes to be ready, here is how we'll support our business customers with the GDPR:

As one of your data processors, we will ensure compliant data processing controls and will reflect such controls in updated agreements with our customers and vendors.
We are building new product capabilities and processes that allow us to quickly respond to request to erase or access user data.
We are also refining how we gather and track consent to perform certain types of data processing.

Data Processor Responsibilities

As a data processor and as outlined by the GDPR, we are committed to providing our customers with:

An updated Data Processing Agreement (DPA) that reflects the requirements of the GDPR and ensures compliant data transfer and storage outside of the EU.
Technical and organizational security measure to secure data in transit and at rest as well as continuously monitoring for intrusions.
Prompt notification of breaches involving customer data.

Capabilities

Existing Capabilities

Though the GDPR is not yet in effect, Wazygoose already enables several of the requirements included in the Regulation, including these capabilities:

Right of Access: All users have a right to access their personal data and may do so from their account profile.
Right of Rectification: All users have the right to correct any personal data that is inaccurate or incomplete. Corrections may be made by a user in the account profile or by contacting Wazygoose support.
Right to Data Portability: In addition to being able to get all user data from within the account, users may request their data by contacting Wazygoose customer support.
Data Transfer: Wazygoose's platform is hosted on servers in the United Kingdom. We ensure the EU citizens can use Wazygoose and be compliant with the EU rules on data transfer under both the 1995 Directive and the GDPR.

Upcoming Capabilities

To comply with specific user rights and processor obligations outlined in the GDPR, we are developing new capabilities that will be available to all Wazygoose customers in early 2018:

Clear Transparency and Consent: Upon account creation, the notification that users receive regarding the data we collect and the purposes of collection will be updated to be GDPR-compliant. Additionally, users will have to "opt-in" to receive specific types of communications. After an account is created, users will have the ability to easily change those preferences regarding communications in the account profile.
Notification of Cookie Use: When you log in to your account, we will display notification and consent banners that clearly outline how we use cookies on our site.
Support for Erasure Requests: We are making it easier to honor requests to be forgotten by adding a "close account" feature. When we receive a request to delete an account, all personal data associated with that account will no longer be retrievable.

Our Commitment