'Charities ask for too much private data'

So says Stichting Donateursbelangen (1), which investigated the provision of donors' personal data to idealistic organizations.

Charities possibly in violation of European privacy laws

The foundation surveyed 285 charities' online donation modules. At nearly three-quarters of the institutions surveyed (73 percent), it was impossible to donate anonymously. 208 organizations required donors to provide their e-mail address. In 70 percent of the digital donation modules, first and last names were required.

In a quarter of cases (25 percent), donors were required to provide residential address and zip code. Twelve charitable organizations (4 percent) required donors to provide a phone number. Only one idealistic foundation asked for the date of birth of donors. Interestingly, in one in five cases (20 percent), the default check box was that people wanted to receive a newsletter. 19 organizations (6.7 percent) put a check mark that they may contact donors by phone.

Finally, 69 percent of charities do not ask donors if they agree to privacy terms. Stichting Donateursbelangen wonders aloud whether charities are violating European privacy laws with this practice. "The big question is whether there is a legitimate basis or legitimate interest where and why donors should share this personal data."

'Mandatory sharing of personal data is invasion of privacy'

Stichting Donateursbelangen is unhappy with the results. "The mandatory sharing of personal data when donating can be seen as an infringement on the privacy (2) of givers because it is a form of personal information being shared with another party," the foundation says (3). Donors also run the risk of charitable organizations building a profile of them with the mandatorily shared personal information.

The foundation points out the dangers of the mandatory transfer of personal data. "This profile data with extensive characteristics per donor can be leaked in the event of a data breach. It is not necessary to store personal data of donors who donate once based on all the possible risks involved. Donors are also often unaware that data enrichment is taking place on their personal data and what all is being done with the data."

Charities should ask for permission

Stichting Donateursbelangen believes charities should ethically explain why they ask for so much private data, and respect the privacy of donors. The foundation wants charitable organizations to ask donors' permission to collect and process their personal information. If they don't, they risk lowering donor confidence and limiting donor choice.

"Instead of requiring personal data during donation, charities would be better off asking their donors if they want to share their data and making it clear how the data will be used. This gives donors the choice to share their data or not, and helps ensure that donors' privacy is respected," the foundation said.

1. https://www.donateursbelangen.nl/blogitem/goede-doelen-top250-eenmalig-online-doneren-2023/r/recTLaly3RI8ZUXqU

2. https://www.vpngids.nl/privacy/

3. https://www.donateursbelangen.nl/dossier-persoonsgegevens