Data notices
Data notices are disclosures that inform users about how their data is collected, used, and shared. In many jurisdictions, data notices are required by law, especially for children and teens.
What are data notices?
Data notices typically include information about:
- What data is collected
- How data is used
- Who data is shared with
- User rights regarding their data
- How to contact the company about data practices
When are data notices required?
Data notices are required when:
- Collecting personal information from users
- Processing data for children or teens
- Required by regulations in the user's jurisdiction (such as GDPR, COPPA)
Data notices in k-ID
k-ID handles data notices as part of the compliance flow. When using the CDK widgets (End-to-End widget), data notices are automatically displayed and consent is collected as part of the flow.
When building custom flows with the API, you might need to:
- Display data notices to users
- Collect consent for data processing
- Store consent records for compliance
Configuring data notices
Data notices are configured in the Compliance Studio for your product. You can:
- Create custom data notices
- Configure which notices are shown based on jurisdiction
- Set up consent requirements for different data processing activities
For more information on configuring data notices, see Data notices configuration.
Data notices and sessions
When a session is created, data notice consents are included in the session. The session tracks which data notices have been accepted and when they were accepted.
For information about what data is stored for kids and trusted adults, see Access, features, and consent in the Core concepts section.
Privacy and compliance
Data notices are a critical component of privacy compliance. Ensure that:
- Data notices are clear and understandable
- Users can easily access data notices
- Consent is properly recorded and stored
- Data notices are updated when data practices change