It requires that the following to be disclosed by a business:
- What personal information is collected through the website/app
- What’s the purpose of collecting this information
- How the collected information is used by business and/or by any third parties
- How can user review and make changes to their information
In the EU, the Data Protection Directive calls for an increased protection of privacy rights. If you’re a business from the EU or you have users from UE that you’re collecting data from, it’s recommended to have this kind of legal agreement as well.