No supervisory authority complaint pathway in privacy policy
Data Protection Authorities (DPAs) are official government bodies that oversee privacy law. GDPR (the European privacy regulation) requires businesses to tell individuals in their privacy policy that they have the right to complain to a DPA if they believe their data is being mishandled.
Why this matters
Under GDPR, organisations must tell people about their right to lodge a complaint with a supervisory authority (see Articles 13 and 77). If GDPR applies to you, a privacy policy that omits this may fall short of the transparency requirements, and regulators can take that into account. Whether GDPR applies depends on where your visitors are, so check with a privacy adviser.
How to fix it
Add a paragraph to your privacy policy stating that individuals have the right to lodge a complaint with the relevant data protection authority in their country. Include a link to the appropriate authority - for example, the ICO in the UK or the OAIC in Australia.
Turn website findings into an action plan
Create an account to start a Full Audit of your website, with supporting evidence and a prioritised action plan.
Start Full Audit