Monica Paul

Monica Paul

CEO Magic Masterminds/Marcomtec

As of May 25, 2018, the GDPR compliance will come into effect. Websites that capture Data via contact forms, purchases, email sign-ups, and even personal emails on the blogs’ comments are advice to comply.

Does this mean we all have to deal with European based laws?

As a matter of fact, nothing has changed a lot from the cookie law released in 2012 which sets rules and regulations about the way a website collects and uses Data. The EU GDPR attempts merely to turn them into a simple methodology and advice guidance; which is easy to understand and follow by all website owners.

As far as you have one single visitor from an EU country; you would be subject to stick to the cookie compliance. We understand this is a big stick for small business, but this is simple to follow.

All you have to do is give your visitors the option to OPT-IN providing a clear indication of how you intend to used their Data. And of course, give clear instructions on how to be removed from your database.

Equally important is to remember and mention to your customers that you must keep their Data on file for up to seven years for tax purposes; of course, making the commitment of not using it for any other thing.

Do I Need to Comply?

GDPR is not pretty clear about all companies needing a DPO. So far what is appointed is that DPOs are required only if you’d had a large number of transactions worldwide, like for example PayPal or Amazon. Anyway, you may visit the GDPR FAQs if you want to learn more about DPOs and when you need to appoint one in your business.

So, basically, if you are a small business taking orders or collecting Data through opt-ins, or contact forms, it would be wise to explain in your language about this in your Privacy Policy and comply with the GRPD–which hopefully most of you have done already.

I would strongly suggest a review of your Privacy Policy; remember to include the post commenting on it.

This methodology was created for the big players on the Internet, so don’t panic, I am not saying the GDPR is coming after you. I am just saying that having an updated Privacy Policy is a good idea.

This article is intended to inform our customers and interested readers on the legal side of the Internet and how to maintain websites compliantly. It is pure peace of mind.

Disclaimer: This blog post is for general information purposes only and does not constitute legal advice. The opinions presented in this blog do not necessarily reflect the opinions of Marcomtec and Magic Masterminds.