> but they can (and have to) apply to a transaction you did 3 years ago (which will now be held for 7 years rather than 2). Are you sure? Laws that compel you

> but they can (and have to) apply to a transaction you did 3 years ago (which will now be held for 7 years rather than 2). Are you sure? Laws that compel you to do something usually don't go into effect retroactively. They're like price-hikes in that regard: you can't just unilaterally decide that your customer's monthly subscription fee has doubled since three years ago. In any case, it wouldn't have anything to do with their TOS or privacy policies, and I don't think they'd have to inform you about their compliance with the current laws. > they should probably inform you about changes in their privacy policies, even if they don't affect you personally You're not a customer at that point, why would you be getting information that only concerns customers? Updating someone on the TOS changes implies that they either requested to be updated or are a customer. I understand the idea behind preferring to err on the side of informing too many people rather than too few, but we should value the recipient's time and attention as well. And once we do that, I believe it's clear that the sender has to spend the extra time to figure out who should receive this email and who shouldn't.