nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How to ensure compliance to CCPA (California) and cookie consent (EU)

s.ali

I have a data portal which i can setup CCPA and GDPR cookie consent requirements on but have a feature which allows our customers and employees to be redirected to jira portal for service management where i cannot add cookie banner or opt out option for "third party data sharing" for California CCPA compliance, and trying to understand if & how others may be handling this situation.

Haven't had much luck with Atlassian support yet.

Accepted answers

Brant Schroeder

Since Atlassian is the one hosting the data it is already covered under their privacy policy. You could always add a link in a portal announcement to https://www.atlassian.com/legal/privacy-policy#other-important-privacy-information which contains their CCPA and EU information.

All comments

Brant Schroeder

s.ali

Thanks Brant.

The only part I am not clear on is the user cookie consent form and opt out for non-essential cookies which is the requirement of the EU/ GDPR.

While Atlassian link provided announces compliance to GDPR, the GDPR requirement states that the customers on the portal be presented with a cookie consent and ability to opt out of any non-essential cookie (and the jira service managment portal from atlassian has 2 essential and 2 non-essential cookie) however there is no cookie consent form presented to customers to which our portal directs to for Jira service management (https://datagumbo.atlassian.net/servicedesk/customer/portals)

Therefore I am unsure if this atlassian portal is GDPR compliant and even if I were to try and notify those cookies as 3rd party via our companies portal I would still not be able to restrict non-essential cookies for another parties domain (atlassian domain in this case) should customer choose to opt out and the cookies would still be injected by Atlassian domain unless Atlassian presented their own cookies consent options for anyone landing on their page or allow another customer/ third party like us to update cookie banner and consent form for a portal hosted on their domain which is very unlikely and their support did confirm its not something they can allow.

Brant Schroeder

@s.ali Those are great questions and since I am only a community member I can only refer to Atlassian's documentation and what I know about the product. I am going to escalate this and see if someone who works for Atlassian can provide you with better information.

s.ali

Thank you once again Brant, much appreciate your guidance and help with escalating with Atlassian.

- Shakir

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

atl-rvw

jira-service-management