“What is GDPR, and why is it important?”

GDPR is the European Union’s new General Data Protection Regulation; it’s all about protecting the privacy and data of the citizens of the EU. If your business has a website, you need to be aware of the GDPR and, in many cases, you need to be compliant. And, even if you don’t technically NEED to be, we think you should be! It’s the right thing to do, and it’s the way the Internet as a whole is headed.

“But, I’m not based in the EU … why would I need to know about this new regulation, let alone comply with it?”

The GDPR applies to all business websites that control or process personal data of EU citizens, EVEN IF that business is not based in the EU. The regulation is protecting EU citizens, regardless of where they’re interacting on the web. It’s also where privacy/data protection is trending globally.

“What does ‘personal data’ really mean to me?”

Essentially, it’s most every transaction on the Internet. Do you have customer data you’ve collected via forms on your website? Do you maintain an email list? Does your website use cookies? Does your server log IP addresses of visitors to your website? (spoiler alert – it does!) All of this is considered personal data in the eyes of GDPR.

“So, what does it matter if I don’t comply?”

That all depends … There IS a fine structure in place for violations. But the truth of the matter is, GDPR compliance is the right thing to do. The recent revelation that Facebook inappropriately shared private user data with a third party has the public on edge and they’ve begun to look very critically at personal data privacy. It’s best to get ahead of the curve, protect your valuable clients and their data, and take pride in the fact that you’re doing the right thing before you might have to.

“OK, I’m sold. What do I need to do?”

AVATAR is recommending all websites comply with GDPR. We have already brought several of our clients’ sites into compliance and can help you do the same. Fill out the form below to contact us about your GDPR needs or call us at 419-243-7445.

Here's a sample of what a basic GDPR compliant solution might look like.