The tweet-length version is that the GDPR (General Data Protection Regulation) is the new EU law that covers data protection and privacy for EU citizens, and it applies to all companies offering goods or services to people in the EU.
Even if you are not based in the EU, it applies to your company if you have customers who are, and it has teeth (fines of up to 4% of global revenue or EUR20m). It comes into effect on May 25th. You have probably heard about it through the numerous organisations who have added you to their email list without asking and are now emailing you to “opt back in”.
In most companies, the marketing team won't have to research everything that needs to change and achieve compliance, although it's worth at least getting up to speed with the high-level outline and belgium number data requirements specifically around informed consent, which is:
"...any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her."
As always, when laws are made about new technology, many questions have to be addressed, and indeed, jokes are made:
But my post today is not about what you should do to comply - that's specific to your situation - and a ton has already been written about that:
What is GDPR?
-
kexej28769@nongnue
- Posts: 288
- Joined: Tue Jan 07, 2025 4:33 am