It’s here! The European Union’s General Data Protection Regulation is officially the law of the land. Stateside websites and apps that allow EU and U.K. residents to interact with their platforms must comply with the new law. In other words, a non-EU web address doesn’t mean you’re off the compliance hook. All North America websites that use cookies or collect data in any way are likely subject to the new rules.
General Data Protection Rule: A Quick Overview
If you want to read every last word of the General Protection Data Rule, mosey on over to the EU’s topical webpage. Just in search of a concise overview? Here goes. The GDPR:
- Went into effect on May 25, 2018.
- Requires all websites and apps, which are accessible by Europeans, to give citizens and residents control over identifying data. Additionally, because of the new statute, nearly all websites need to update their terms of service and privacy policies. If you have yet to do so, give us a call today. We’ll get it done for you, correctly and quickly.
- Features harsh financial penalties for violations: blatant acts of non-compliance may land you a 20 million euro fine or 4% of your company’s annual global turnover — whichever is more.
What Data Must Be Made Available To Users?
The General Data Protection Regulation is primarily concerned with the following information:
- Identity Data: Address, Name, Various Identification Numbers.
- Demographic Data: Ethnicity, Race, and Sexual Orientation.
- Health Data: Biometrics and Genetics.
- Internet Data Points: Cookies, IP addresses, and Location Indicators.
- Political Data: Political and Societal Affiliations and Opinions.
Why Are Most U.S.-Based Sites Beholden To The European Online Privacy Law?
Again, to drive the point home: Yes! Many stateside websites are beholden to the General Protection Data Regulation.
Why?
Because the law protects all EU residents. Therefore, if people in Europe can access your website, then there’s a better than average chance that you must comply with the GDPR or risk a massive fine.
Will the U.S. government protect and pardon American citizens from GDPR penalties? In all likelihood, probably not.
Connect With An Internet Law Attorney About The GDPR
Is your website GDPR compliant? If you’re unsure, give our Internet law team a call. We’ll review the situation and then walk you through some options.
The last thing you need is an EU legal claim. And be forewarned: they take online privacy seriously; officials WILL be on the lookout for U.S.-based sites to fine.
The consultation is on us. Get in touch today.
