3 ms·
GDPR is not about preventing innovation, it's about basic ethics: you don't do whatever you want with personal data. 1. Clear opt-in for customers regarding Pe
by moviuro 8y ago
GDPR is not about preventing innovation, it's about basic ethics: you don't do whatever you want with personal data.
1. Clear opt-in for customers regarding Personal Data Manipulation that is not necessary for your service (e.g. advertising tailoring, sending the personal data of your customers to third-parties, etc.); don't collect data you don't need.
2. Notify when breached.
3. Don't collect data you can't protect. Negligence is just as badly punished as doing shady deals.
4. Export/Delete my data/account button.
That's it. You may also want to anonymize logs (hide IP addresses 123.45.xx.89 for example), hash the passwords (as should always be), use HTTPS, etc.
I can give you a few more pointers if you describe your project a bit more.