The Article 29 Working Party, an independent European advisory body on data protection and privacy, has adopted an opinion on apps. It sets out a summary of the obligations to which the various players in the app market are subject, as well as the working party's recommendations for each type of player to improve user privacy.
App developers must:
- Ask for (freely given, specific and informed) consent before installation of the app.
- Ask for granular consent for each specified category of data the app will access.
- Provide well-defined purposes of the data processing before installation of the app (for example, product innovation or market research will not suffice) and not change these purposes without renewed consent.
- Refrain from processing children's data for behavioural advertising purposes.
For advice, contact Alex Pyatt.