It is a mistake to think that a blog or a website is exempt from legal or bureaucratic obligations, for example data protection, for example, most people are unaware that they have the obligation to declare the files in the AEPD and become depositaries of a series of obligations to guarantee the rights of your readers or subscribers. Actually, we all have good intentions, we are not going to sell data, nor to exchange them but we have to officially guarantee it, believe it or not, you collect data through mailing lists, comments and subscriptions without realizing it.
The AEPD is in charge of controlling the use made of the data files collected by companies, institutions, applications, surveys, forms, etc. and they are saved and stored either directly by the owner or the owner delegates custody or use to a third party.
There may be different types of files according to public or private ownership.
Not all files are the same because the information and the use that we give to each data file may be different, a subscription form in which we only ask for a name and an email does not have the same risk as a more complex one in which Let’s ask address, name, surnames, telephone or in the case of the most compromised files that are in which we collect personal data such as number of children, interests, work. From this you have to think that each file is completely different.
The Spanish Agency for Data Protection establishes the obligation to declare any file, whether it is publicly owned or privately owned.
Private ownership is the case of our blogs or websites when we collect data to prepare newsletters, records.
We have the obligation to register with the AEPD, assume some obligations that entails collecting data such as its custody, storage, treatment, quality, right of assignment, secrecy, security. This leads us to the obligation to register the files.
The cost of registering the files is free and is done electronically , you do not have to be Einstein to do it and this is where you have the documentation and help to register them:
Nature of data files
The AEPD advises of the obligation to notify the agency of the existence of files through which you collect information from users on your website.
Broadly speaking, you must comply with a series of duties such as informing, keeping secret, quality, treatment, transfer and security, among others, and guaranteeing rights to your users such as cancellation, cancellation, modification and revocation.
Obligations on data protection
As with many other things on the internet, they are regulated more year after year, they are currently more closely watched than in a long time, in the case of personal data there is a true crusade to prevent their traffic. I’m sorry for this post brick but anyway these things are like that.
