3 ms·
Tell your users what PII you collect about them and why, ask for consent and give an option to opt-out. There is not "legal threat" if you are open about your
by mstolpm 8y ago
Tell your users what PII you collect about them and why, ask for consent and give an option to opt-out.
There is not "legal threat" if you are open about your business model, keep the collected PII reasonable and safe and don't sell the data without consent. Honoring requests for information or deletion is still a problem for you if you served EU users in the past if you don't delete/anonymize that data - even if you block access. If you're not open about your data processing and handling and don't ask for consent, don't blame the GDPR for a business model that can't be honest to your users.
- RobertRoberts 8y agoYou are confirming that all it takes is a little slip up, and your entire life is ruined by legal fees. Or even just the "whiff" of potential slip up, not even a real one, but only a perceived slip up, and your life is over. I have been in court before, if you have not, perhaps that is why you are ignorant of the horrendous dangers this law puts on everyone.
- DanBC 8y agoNo. After one small slip up nothing would happen, unless someone notices it and reports it to the regulator. At that point they'd write you a letter and explain where they think you're going wrong, and point to best practice, and ask you to confirm what you're actually doing.
- RobertRoberts 8y agoYou mean like they did with Google and Facebook, on the FIRST day the law went into effect? http://money.cnn.com/2018/05/25/technology/gdpr-compliance-facebook-google/index.html http://money.cnn.com/2018/05/25/technology/gdpr-compliance-f...