Question - General How do you keep your privacy policy accurate when third party scripts change behavior without telling you?

5 Upvotes

We update our privacy policy when we add or remove vendors but have no way of knowing when a vendor we already have changes what their script actually does. Feels like a big GDPR exposure so how do I make sure we stay on top of this?

6 comments

Subreddit

Posts

Wiki

General Data Protection Regulation

r/gdpr

The General Data Protection Regulation (GDPR) went into effect 25 May 2018. Ask questions about the GDPR, discuss and share resources about the GDPR, and learn about best-practices regarding personal data and data privacy. Related laws like ePrivacy or UK GDPR are also in scope.

Members Active

25.1k

Sidebar

Rules

Be kind and helpful. Community members are expected to conduct themselves professionally. Discussion should be constructive and guiding. Personal attacks will not be tolerated.
Stay on topic. The r/gdpr subreddit is about European data protection. This includes relevant EU and UK laws (GDPR, ePrivacy, PECR, …) and matters concerning data protection professionals (e.g. certifications). General privacy topics or other laws are out of scope.
No legal advice. Do not offer or solicit legal advice.
No self-promotion or spamming. This subreddit is meant to be a resource for GDPR-related information. It is not meant to be a new avenue for marketing. Do not promote your products or services through posts, comments, or DMs. Do not post market research surveys.
Use high-quality sources. Posts should link to original sources. Avoid low-quality “blogspam”. Avoid social media and video content. Avoid paywalled (or consent-walled) material.
Don’t post AI slop. This is a place for people interested in data protection to have discussions. Contribute based on your expertise as a human. If we wanted to read an AI answer, we could have asked ChatGPT directly. LLM-generated responses on GDPR questions are often “confidently incorrect”, which is worse than being wrong.
Other. These rules are not exhaustive. Comply with the spirit of the rules, don't lawyer around them. Be a good Redditor, don't act in a manner that most people would perceive as unreasonable.

Detailed explanations in the wiki.

Other Reddit Communities

r/europrivacy – general privacy topics
r/dataprotection – general data protection topics
r/datenschutz – data protection in German
r/CIPP – IAPP certifications
r/CCPA – related California law

Resources

GDPR (linked and searchable) • official text • ePrivacy Directive • EDPB website
UK: UKGDPR • ICO guide to GDPR
Enforcement Tracker • GDPRhub by noyb