Appreciate this Nick, @nknoop . That gives me a lot more comfort and something I can communicate to my team. Looking forward to regular updates to help with some forward planning especially if there is work to be done as a result of consent/subscription mechanism changes.
“We’ll be communicating out project updates to our customers and partners starting in late January 2018.”
I must have missed that first update.
Hi Nick,
Is there any update on this?? The end of January has passed and unless I am mistaken, we have had no further details on what functionality is coming from a GDPR perspective. It makes it very difficult for us to proceed with our own compliance plans without knowing what Hubspot are doing/planning to do.
I would appreciate an update as soon as possible please!!!
Thanks
Nick,
Is there any action plan on this?
A bit more of transparency will be appreciated. May is just around the corner.
If there is any dramatic change management program that we have to undertake, as a result of using HS in order to comply with GDPR, it will be very beneficial to know today better than tomorrow what the plan looks like. Time is of the essence.
Perhaps this is not the best forum to address this queries? Is there any other official channel that we should be using?
Thanks,
They promised their first GDPR action update late Jan 2018.
Guess what?
Nothing.
Attract > Convert> Close> Disappoint>
Hi there, please could you let me know where in the forms section is the Notice & Consent form copy?. Thanks
Sacha
Dear Nick
Please could you provide an update when we can expect functionality releases for:
Consent:
Alongside that change, the HubSpot subscription preferences page will be updated to support the needs of the GDPR. Currently the subscription preferences page allows Ana to opt out of different types of communications. This page will be updated to support opt-in preferences.
In Progress - Available early May
Delete :
You will be able to perform a GDPR-compliant permanent delete in your HubSpot portal.
(revised) In Progress - Available early May
Yes please. We would really appreciate an update and the functionality to be available asap. Until we see what Hubspot functionality brings, we are sitting in limbo. It’s very late now and time is ticking…
Same (massive) concerns here. Lot’s of questions on the product - and general need for guidance from HS, as leader in the space. The time to act is long, long overdue. Communication and roadmap should be apparant asap.
I am being asked regularly by the directors of our company to outline our GDPR compliance plans for sales/marketing ahead of the 25th May deadline. It is very frustrating not to be able to respond with any sort of clarity. So many aspects of GDPR compliance relate back to how Hubspot is going to handle it. Time is ticking. We would appreciate an update asap please.
Hi everyone - we posted a project update to the GDPR page (see here). I’ve also copied the list of product functionality / other items we are working on below.
- New tools in form builder to help ensure proper notice and consent
- Ensuring that end users are able to manage their communication preferences in a way that puts control in the data subject’s hands
- Improvements to double opt-in functionality
- Ability to easily understand what consent customers have given, when, and the history of changes to that in the relevant parts of the product
- Ensuring an easy means of exporting the personal data of a data subject
- Bolstered deletion functionality to comply with right to erasure
- Enhanced cookie management and preferences with localized privacy notices
- In-portal guidance and suggestions on how to address key data privacy rules
- Work with our certified integration partners on solving for the GDPR
Thanks Nick
OK, fine - but what does this actually mean for us? What can I do with this information? What compliance processes and measures can I now put into action on the back of this? I don’t understand what HubSpot thinks I’m gaining from this update or what relevance it is to a customer trying to make progress on GDPR implementation or report into directors and business owners on what GDPR compliance is going to look like for their businesses.
On the back of this update, my GDPR Implementation report looks like: Yeah - no worries, HubSpot have been doing some stuff.
Hopefully, we won’t get a ‘lessons will be learned’ update in June/July.
Hi there, Hubspot is a marketing tool which gives you the functionality with which you can implement the processes of data collection, managing, processing and deletion of your data. if you need assistance with GDPR process and the legalities surrounding it then my suggestion is to engage a firm of lawyers to help you draft your privacy policy, privacy centre, cookie policy, legitimate interest policy and any other legal documents needed.
This is a nice list and addresses certain aspects of GDPR processing comipliance. But GDPR ‘raises the bar’ for the consent, mandated by the 2009 ePrivacy Directive, one must obtain from the user to access their device (i.e. read & set cookies). Post-GDPR unambiguous consent is required as opposed to today’s implied consent.
As far as I can tell, HubSpot always sets a tracking cookie before the user has consented or been presented with any cookie/privacy banner, and that is not in line with the ePD (as we understand the post-GDPRlandscape). I’ve included an excerpt below from a EU-based law firm’s GDPR blog on the topic.
…the ability to maintain that an implied consent is unambiguous depends upon at least a couple of critical factors: first, the prominence of the cookie banner itself …; second, the timing of the cookie drop - if cookies are dropped at the same time as the banner, as is very often the case today, then it’s more-or-less impossible to maintain any argument that the visitor “unambiguously” consented to those cookies, given that they only learned about them after the cookies had already been served. To have a decent argument for unambiguous implied consent, the user at least needs to be informed about, and have the opportunity to decline, cookies before they get served.
Excerpted from http://privacylawblog.fieldfisher.com/2018/gdpr-plus-e-privacy/
Any feedback on this from HubSpot would be appreciated.
David
When are we going to get a new update on progress?
Hi, I’ve read through all the GDPR compliance info and Hubspot’s roadmap for updates in this area, but I am unclear about one point. Will there be a distinction on the preferences page between “remove me from mailing lists” and “delete all my information”?
People have always been able to update their subscription preferences. As I understand it, Hubspot is updating this page to ask people to “opt-in” to the lists they want to be on (instead of “opting out” of the ones they don’t want to be on).
However, I don’t see anything related to how people request to have their contact information completely deleted. Is this going to be addressed on the preferences page, or elsewhere? Do we need to set up specific pages with forms to handle these “deletion” requests?
Because even if people select “remove me from all mailing lists” this is not the same thing as “delete me completely from your database”. How will Hubspot be handling this?
Hi - I’d imagine most organisations will want to handle full or partial data deletions under a request procedure due to the potential complexities of what data can or should legitimately be deleted.
Example being that if there is a legal requirement to retain specific data for a period of time, partial deletion of data would be the most appropriate way to handle a request. You’d need to document the criteria and process for handling such things in your GDPR policies - but regardless, it would be a highly tricky thing for HubSpot to handle automatically, so my expectation is that they wouldn’t go near any functionality that would enable the consumer to control data deletion.
What I wanted to know is on the “Manage email preferences” page, will the USER see BOTH options? So they can choose either : 1) Delete all my contact information from your database OR
2) unsubscribe me from all lists.
Will the USER be given the option to either?
Yes, there will be a distinction between “GDPR delete” and unsubscribe. The GDPR delete button will be unique and will delete all record of the contact throughout the platform. This is distinct from unsubscribe, where you can still opt a contact out of receiving emails, but the contact record will remain in your database.