[theronin]

Oh what a pain lol. Honestly, I'd have hoped these sorts of laws were in place already. But implementing the privacy policy is such a headache. I'm using Wordpress and the latest plugin with the data request and deletion is nice but clunky - so much back and forth.


How are the rest of you holding up? lol

 

[NoXid]

Ignoring it.

 

[theronin]

LOL I just spent like 5 hours taking a stab at one. I think so long as you got the big things down and clearly provide a way to contact you, you cover your bases ...


1. What personally identifiable information is collected from you through the website, how it is used, and with whom it may be shared.
2. What choices are available to you regarding the use of your data.
3. The security procedures in place to protect the misuse of your information.
4. How you can correct any inaccuracies in the information.

 

[Waiting]

Why does this EU law affect someone in Long Beach?

 

[theronin]

Cos it matters if the buyer is from an EU country not where the shop is. So next question, how do you validate when that dude is from the EU? You can't. That's why Microsoft is doing a blanket privacy that meets GDPR but covers anybody. Of course, they wont be going after some tiny little shop in long beach. But a little shop in long beach cant afford even a consultation with a lawyer if some *** hat does decide to start trouble.

 

[webtrekker]

Yes, it may be an EU ruling and a bit of a pain to implement, but the ideas behind it are sound. People need to know that their personal data is not being misused or retained for unnecessary reasons.

That's not to say I'm a fan of the EU though. Living in the UK and in the middle of Brexit I have my own opinions about the EU, but I think this is one instance where they are doing something positive.

 

[Waiting]

How does Microsoft enter into it? Or is that just an example? I suppose all of those amazon, ebay, and etsy sellers are going to have to set up an identity governance program.

It doesn't matter if the person is from the EU if s/he is not in the EU.

Put a drop down menu on your order page for "country", exclude all EU countries. Require that field and provide no other means to order. Don't collect any data from a rejected order. Don't even set a cookie.