4 ms·
OPs point is that if you act responsibly in good faith you'll probably avoid any issues, and likely be warned before they target you for maximum fines :)
by jopsen 9y ago
OPs point is that if you act responsibly in good faith you'll probably avoid any issues, and likely be warned before they target you for maximum fines :)
- BjoernKW 9y agoI hope so. Unfortunately, that won't necessarily be the case. Small businesses have been specifically and routinely targeted by dubious law firms for not complying with certain regulations like legal notice requirements or disclaimers on websites. The EU and local as well as member state authorities also often are oblivious to problems smaller companies might have.
- x0x0 9y agoThat's heavily dependent on the regulator in question, and there's 30-ish of them. Since American companies are very unlikely to have a lead regulator, you will need to comply with conflicting rulings from each. In half a dozen languages.
- com 9y agoYou will need to have a lead regulator (or I suppose a Privacy Shield listing while that is still legal) if you are doing significant business with EU data subjects’ personal data. See recital 80 and article 31 of the GDPR.