3 ms·
As a solo founder, don't worry about it. > shell out hundreds of dollars to some law firm hundreds? LOL! $10,000 to get a DIY kit. From one of your replies:
by jiveturkey 7y ago
As a solo founder, don't worry about it.
> shell out hundreds of dollars to some law firm
hundreds? LOL! $10,000 to get a DIY kit.
From one of your replies:
> I want to be able to tell customers that my service is GDPR-compliant.
This isn't possible with a one-man company. Rather, it's possible to tell them you are (there is no certification body) but it's not possible to be compliant if you don't already have expertise.
> DPO
I don't know why others are mentioning a DPO. You won't need a DPO.
The easiest route to compliance is to not collect Personal Data.
- sjroot 7y ago> I don't know why others are mentioning a DPO. You won't need a DPO. After reviewing those parts of GDPR a bit more, I agree. I was thinking of the EU rep for businesses outside the USA. > The easiest route to compliance is to not collect Personal Data. The product I am working on has a social aspect. That said, nothing - particularly the data the GDPR defines as sensitive - would be collected without explicit consent from the users. Actually, nothing is really collected without their opt-in. > As a solo founder, don't worry about it. Thanks for chiming in! It is good to hear from someone in a similar situation.
- jiveturkey 7y ago> nothing is really collected without their opt-in. opt-in is the least thorny aspect of GDPR. but honestly, you don't have to worry about it. There are 6 bases for collecting Personal Data. You should review them and see if something besides explicit consent (opt-in) is more suited. Opt-in is a trigger for other things. Avoid it if you can.
- x0x0 7y agogiven that an email address is personal data, it's most likely virtually impossible to not have any gdpr-implicated data and, say, contact your prospects and customers.