New Adsense GDPR Policy?

Just skimmed a little when they made me submit to this.
Does that mean that every one has to add a new privacy page with adsense?

https://www.google.com/adsense/new/accept-agreement?

10. Privacy
Our privacy policy explains how we treat your personal data and protect your privacy when you use our Services. By using our Services, you agree that Google can use such data in accordance with our privacy policy. You and Google also agree to the Google Ads Controller-Controller Data Protection Terms.

You will ensure that at all times you use the Services, the Properties have a clearly labeled and easily accessible privacy policy that provides end users with clear and comprehensive information about cookies, device-specific information, location information and other information stored on, accessed on, or collected from end users' devices in connection with the Services, including, as applicable, information about end users' options for cookie management. You will use commercially reasonable efforts to ensure that an end user gives consent to the storing and accessing of cookies, device-specific information, location information, or other information on the end user's device in connection with the Services where such consent is required by law.

https://privacy.google.com/businesses/controllerterms/

5. Data Transfers
5.1 Transfers of Data Out of the European Economic Area and Switzerland. Either party may transfer Controller Personal Data outside the European Economic Area and Switzerland if it complies with the provisions on the transfer of personal data to third countries in the Data Protection Legislation.

I came across another forum when looking it up, and from what they are saying Google is going to make publishers request an opt-in in order to display Personalized Ad choices for EU traffic as well.

So what should we do next?

Well, I just ranked on Google for several long tail strings in the last few days so no alarm bells yet from Google. it's mostly US regionalized though.

terrycody said:

So what should we do next?

Click to expand...

Long term solution might be to become an affiliate of a large and diverse number of companies and then display a different affiliate banner based on information you collect on users from Europe. Abiding by GDPR is going to lead to ads being showed to the wrong demographics.

I still a bit confused. Say we have adsense sites with comments disabled and user can not register. We only use cookies I think (for adsense policy), so in this case we do not need change anything right? Or simply add some GDPR shits on policy page? Say we follow the GDPR bla bla...do not use users data, only use cookies...

completely no idea.

I am very confused about this new law. Is there any need for a GDPR policy? And if so what plugin is good ot use.

Here's IBM's bluemix policy response for GDPR for any one interested.


About your IBMid Account Privacy



This notice provides information about accessing your IBMid user account (Account). If you have previously been presented with a version of this notice, please refer to “Changes since the previous version of this notice” below for information about the new updates.



Changes since the previous version of this notice



None. This is the initial version.



What data does IBM collect?



We collect Basic Personal Data from you, and we are the “Controller” of this data. This includes your user ID, name, email address, country, and related information you may provide (for example, your mailing address). We also collect information about your network connection(s) to us, such as your IP Address. If we require more personal data, we will notify you. Where appropriate, you may select your preference(s) for using your data. For full information about how we use your personal data, refer to our Privacy Statement.



Why IBM needs your data



We need your Basic Personal Data to support our Legitimate Interests in enabling you to create and use an IBMid. This allows you to access applications and services, and to manage your Account settings and preferences. It also lets us record your access to comply with security and audit requirements, and to utilize automatically generated, unique identifiers which assure your correct profile data is available to applications or services.



If you do not want us to use your Basic Personal Data as described above, you have the option of not using your IBMid, or even asking us to delete your IBMid.



To provide the above capabilities, we will only collect personal data that is needed.



How your data was obtained



This is how we obtained your Basic Personal Data when your IBMid was created:



When using the IBMid registration process, your Basic Personal Data would have been entered then.

If your IBMid was created through an Enterprise Federation Partner (Identity Provider), your Basic Personal Data would have been collected from the partner.



You may have used the IBM Profile Editor to update or add to your Basic Personal Data.



Your IP Address is obtained when you make a network connection to us.



How IBM uses your data



This is how IBMid uses your Basic Personal Data:



To uniquely identify you, and to supply your authenticated identity to IBM or third party applications and services;

To communicate with you about your IBMid;

To perform security/audit logging, including in conjunction with your IP Address;

To perform problem determination, system administration, usage tracking, and support activities; and

To set secure cookies which maintain your authenticated user session.



Applications and services may use your Basic Personal Data in these ways:



To uniquely identify you;

To communicate with you about your Account status;

To authorize your level of access;

To reflect your Basic Personal Data to you (for example, an on-screen greeting);

To perform security/audit logging, including in conjunction with your IP Address;

To perform problem determination, system administration, subscription management, usage tracking, and support activities; and

To set secure cookies which maintain your authenticated user session(s) with applications or services.



Where appropriate, IBM may use selected partners to process your Basic Personal Data.



Applications or services which use your Basic Personal Data for different purposes than those above will provide you with notification, or when appropriate, an opportunity to consent to such use.



If you do not wish your Basic Personal Data to be used for the above purposes, you have the option of not using your IBMid, or even asking us to delete your IBMid.



How IBM protects your data



For the Legitimate Interests explained above under “Why we need your data”, your Basic Personal Data is protected in these ways:



When appropriate, we use secure communications and storage to protect your personal data from unauthorized access or disclosure.

We require applications or services which use your personal data for purposes other than those described here to justify those uses, provide appropriate notice, and where applicable, allow you to consent to such usage.



How long we keep your data



IBM will keep your Basic Personal Data while you have an active IBMid. If you choose to delete your IBMid, we will delete your data. However, data already present in security or audit logs, support records, or business transaction records, may be retained for those purposes. Our retention policies determine how long we will retain this data. For additional information regarding data retention, refer to our Privacy Statement.



Your rights



Our Privacy Statement provides more information about your personal data rights. It also provides contact information if you have questions or concerns regarding our handling of your personal data.

Acknowledgement



I acknowledge that I understand how IBM is using my Basic Personal Data and I am at least 16 years of age.