GDPR stands for General Data Protection Regulation. It is a legal guideline about collecting and processing of personal information of EU citizens. The Regulation was implemented by the EU in 2018.
EU citizens have 8 key rights: to know what and how their information is stored and processed, to access their data, to correct their data, to permanently erase their data, to allow data storage only, to reuse the data, to decline the storage and processing, not to be a subject of automated processing.
For marketers, it is important to know that:
- company outside of the EU have to comply with GDPR if it is about the data of an EU citizen
- company has to ask permission for data storage and processing (including cookies, email marketing, software)
- company has to store, process, and transfer data in a safe way, preventing data leakage
If a company did not comply, they have to pay a fine of up to €10 million or a penalty of 2% of the company’s overall revenue.
