Are you ready for the GDPR May 25?
The GDPR is a regulation that requires businesses to protect the personal data and privacy of EU citizens for transactions that occur within EU member states. If you want to read more about it try this information post. But know that the basic information protected goes beyond credit cards to:
- Basic identity information such as name, address and ID numbers
- Web data such as location, IP address, cookie data and RFID tags
- Health and genetic data
- Biometric data
- Racial or ethnic data
- Political opinions
- Sexual orientation.
A lot of small business in the USA are ignoring the requirements of the GDPR in the belief that being small means it does not impact them. But does it? While the number of employees is a factor (you have to have more than 250), if your “partners” don’t comply then what?
If you run an WooCommerce store, then you should review:
- How (and why) your site stores personal data.
- Whether your Privacy Policy needs an update.
- How you’ll handle Right to Erasure and Right of Access requests.
- What third party applications you use that handle personal data e.g. your Payment Gateway, Shipping Services, ESP or OnlineChat.
WooCommerce have prepared a handy guide to all things GDPR. Have a read.
At the very least, update your privacy policy and consider a cookie notice …
