Firstly, in terms of a cookie notice; simply displaying a consent popup stating that you use cookies isn't enough. The website visitor should have the option to allow or disallow different categories of cookies based upon their preferences, such as functional cookies, marketing cookies, analytical cookies etc.
Thanks a lot for your suggestion. I've just created a work item
[email protected] wrote:
Secondly, there should be automated ways of removing personal data after a set period of time in accordance with the website owner's privacy policy i.e. if the privacy policy states you will keep customer order history for a period of 3 years after which it will be anonymised, then this is what you must legally do! The same goes for inactive customer accounts, guest users and so on.
And here is the second work item. Thanks again for your suggestion