GDPR: Are you affected?
What is GDPR?
According to the official site of the GDPR, the regulation was designed “…to protect and empower all European citizen data privacy and to reshape the way organizations across the region approach data privacy,” but with the world’s increasing connectivity data has zero border lines. The regulations were put in place with the goal to protect European citizens as they visit websites and use various online services and this is regardless of where the website or online service is located.
How do GDPR Laws effect U.S. businesses?
GDPR states that European citizens must be protected and given options to manage their personal data. The GDPR regulations affect websites that intend to offer goods or services to European residents or websites that use data for tracking resident behaviors. If the EU is one of your geographic markets then you will need to adhere to GDPR guidelines. However, ALL businesses should update their Privacy Policies (regardless of their connectivity with European markets).
3 Quick actions you can take to make sure you are GDPR compliant:
- Thoroughly organize the personal user data that you have stored—this is information that could be used to identify a person, such as: name, phone number, birthdate, address. Create a page that states how the user information will be used that is clearly written and straight forward. Make sure that if asked you can promptly locate data allowing for those records to be released or deleted by the user if necessary.
- Receive PRESENT confirmation that your users agree to their data being used. Send an email to all of your current data users and allow them to “actively opt-in” to your business using their data (AGAIN—if this is something you already have in place, resend and have all users reconfirm—YES—to their data being used).
- Make sure data is secure. What safety measures do you have in place to protect user information? Write down what safety measures you have in place so you can share if needed.
