On May 25, all companies and businesses operating in the EU had to conform to the new internet security laws known as General Data Protection Regulation (GDPR). These laws were written to protect users’ information, giving individuals more control over the collection of their data online. Users are now required to actively consent to certain data saving practices before browsing, practices that companies previously employed to strengthen their familiarity with their customer profiles and needs.

Although the laws create greater transparency, the legal language and informative reminders that businesses now have to use on their websites and apps can be quite bulky and sterile. As a result, UX Designers must find a way to incorporate these new legal requirements into their webpages while still designing for a positive user experience. So how can you achieve both without jeopardizing UX or your company’s adherence to the new laws?

Take a look below.

Insist on user consent with easy-to-read microcopy.

As soon as users arrive at your company homepage, they now must choose to “accept” or “decline” the collection of their data and the use of cookies. Try to present this step in a visually appealing manner that gets to the point without over-using legal jargon. Friendly, comforting microcopy can still deliver the required message without bombarding users with the type of language that is typically overlooked in the “terms and conditions” section on websites and apps.

Maintain both flow and security.

The fact that users must actively consent to data collection is not limited to the homepage, however. In fact, users must have the option of consenting to certain practices while denying businesses the right to other types of data collection throughout their entire journey on your page. This means that all previously “bundled” opt-out options, like receiving emails, newsletters, cart abandonment notices, and more can no longer be grouped together as one option for consent.

Rather, you should now provide users with various options that they can opt into, including specific definitions of what those options are. Again, UX professional must pay close attention to their copy and visual presentation when designing these consent requests, as well as the effect it may have on the user journey. While you want to provide users with greater transparency and a stronger sense of security online, you don’t want to interrupt the flow of navigation so much that the user gets frustrated and bounces.

Take a look at your “legitimate interest.”

In order to maintain a smooth user journey, company engineers and designers should perform multiple UI tests at various iterations to discern whether or not these active consent boxes are truly interrupting the user experience. If they are, it is possible to classify some of these reminders as “outside of Legitimate Interest,” or the legal category the GDPR law now employs to define what information companies must provide versus what may be irrelevant to their purpose.

For example, if your website suddenly requires users to submit their name, phone number, and email address as they’re looking for home improvement tips, they may be confused or irritated by the “intrusive” request. As this information is not relevant to this section of the user journey, you may be able to delay this request to the end of check-out via “legitimate interest” justifications, thus enhancing your platform’s UX and overall navigation flow.

Make changing and deleting data a clear option.

Finally, allow users to change and delete their data without having to search for the necessary button or comment box. Again, smooth, friendly microcopy that requests information from users about why they’re leaving may increase their trust in your brand. Make this step just as convenient as every other task on your application, and your user will appreciate their experience with your business that much more.

Although designers and branding professionals haven’t yet been able to measure the changes in conversion rates and UX feedback due to these new laws, these preemptive steps will help your company to adhere to the new laws while still satisfying your customers. Just include creative, appealing design that ensures user security along every step of the way.