2021-11-18

How to secure a form on the website in accordance with GDPR requirements?

Securing the data received by the user is not only a legal requirement, but also builds a relationship with the website user. The tool that allows to ensure data security is SSL certificates.

Forms, in addition to the content and graphics, are an integral part of the website. A form allows the user, among others, to contact the owner of the visited site, register or create an account. Securing the data received by the user is not only a legal requirement, but also builds a relationship with the website user. The tool that allows to ensure data security is SSL certificates.

Since 25 May 2018, the so-called GDPR Regulation has been in force in Poland as well as in other countries belonging to the European Union. The Act aims to ensure protection of private data of EU citizens by adapting, among others, IT systems for that purpose. The concept of the Regulation also applies to the forms contained in websites. In addition to adding the required processing consents, personal data must be encrypted.

What is encryption of personal data on a website?

Encryption is possible thanks to SSL certificates provided, among others, by Certum. Secure Socket Layer (SSL for short) is a network protocol used to secure a website’s network connection. The website then uses the encryption connection to send data to the server. The information transmitted, related to e.g. the data entered in the form, is only decoded when it reaches the server.

Having the form secured with an SSL certificate, a visitor to your website can be sure that the data entered in the form will not be intercepted by unauthorized third parties, as well as has a confirmation that the owner of the website respects the provisions of the GDPR.

Why is it important to secure a form on a site?

Here, it is essential to be aware of how important data is entered in the forms. By not securing the contact form on the site, we expose ourselves to the possibility of theft of data such as:

• name and surname
• address of residence
• company details
• phone number
• email address

Considering the forms, when registering accounts, the following information may be additionally stolen:

• login
• password
• sensitive data such as PESEL number
• credit card details

The user can very easily verify whether the connection is encrypted or not. You can see this information in the address bar of the website, where there should be a padlock icon with an HTTPS prefix. Seeing these elements, the user will be sure that filling in the form will be safe.

When you click on the padlock icon of the secured site, you will see the details of the certificate, where you can verify, among other things, the name of the organization to which the site you are visiting belongs. This is a feature of the highest security class certificates – Certum Premium EV SSL.

When a visitor to the site sees messages about a lack of security, they are certainly reluctant to leave their data in the form. The most popular browsers warn users when they enter a site without a certificate:

• in Mozilla FireFox browser it is a crossed padlock and in HTTPS Mode, the page will be initially blocked.

• In Google Chrome, a page without an SSL certificate will be initially blocked and marked as unsafe

Dominik Łowczynowski, Product Specialist