“Vast.” The dictionary definition is “very great in size, amount, degree, intensity, or especially in extent or range.” (Merriam-Webster) It’s a word you’ll hear often in GDPR discussions, and it is an accurate description. In fact, there are 99 articles in the GDPR, each stipulating new parameters and expectations for data transparency, accountability, storage, and security. In our prior posts, we’ve highlighted many of these areas, discussing changes to your backend operations, marketing strategies, external partners and provided a graphic overview with our GDPR infographic.
As much as GDPR covers, it also raises an equal number of questions. Many of GDPR’s articles use ambiguous language leaving marketers scratching their heads, and lawyers busy providing clarification. For this reason, we’ve compiled a list of some of the more frequently asked questions and a few of the lesser-known answers, as discussed with our legal team.
GDPR – Who?
Q: Does GDPR apply only to EU citizens?
A: No. GDPR applies to EU residents, regardless of citizenship. An American living in the EU for three months qualifies for GDPR protection. If your business (B2B or B2C) markets to, does business with, or simply stores or processes the personal or business information of EU residents, you are subject to GDPR requirements regardless of your business’s location.
Definition of Personal Data
Q: What is considered “personal” data? Is B2B information exempt?
A: Generic emails, such as “info@,” “contact@” are not personal addresses so do not count as personal data. All personal (individual) data, whether B2B or B2C, is covered under GDPR. This includes any business information that makes a someone personally identifiable, such as their business email address.
Limits for Storing Data
Q: How do we define the duration of storing data? What constitutes “as long as necessary?”
Q: Can you bundle consent to receive future communications with other actions, such as a whitepaper download?
Q: Does GDPR have any ramifications for EU Cookie laws or is ‘Do Not Track’ still in effect?
A: Yes, ...