Skip to content

Political Affiliations Collection Not Disclosed in Privacy Policy

Political Affiliations Collection Not Disclosed in Privacy Policy

Description

The application collects information about users' political affiliations, but the privacy policy does not disclose this. Political affiliations are considered a special category of personal data under regulations like GDPR. Failure to inform users about this collection is a significant issue and likely violates legal requirements for explicit consent and stringent data protection measures.

Recommendation

Update your application's privacy policy immediately to explicitly state that information on political affiliations is collected. Clearly detail the specific purposes for this collection, how the data is used, processed, stored with enhanced security, and the data retention period. Ensure that explicit user consent is obtained before collecting this sensitive information and that all practices comply with applicable data protection laws for special categories of data.

Standards

  • GDPR:
    • ART_5
    • ART_6
    • ART_7
    • ART_9
    • ART_12
    • ART_13
    • ART_25
    • ART_32
    • ART_35
  • CCPA:
    • CCPA_1798_100
    • CCPA_1798_110
    • CCPA_1798_150
  • OWASP_MASVS_v2_1:
    • MASVS_PRIVACY_1
    • MASVS_PRIVACY_2
  • SOC2_CONTROLS:
    • CC_2_3
    • CC_5_3
    • CC_6_1
  • CNIL_FOR_EDITORS:
    • EDITORS_1_2_5
    • EDITORS_3_1_1
    • EDITORS_3_1_2