GDPR: Do you think they will come after small sites? Thoughts?

[Deleted member 1024843]

Hey everyone,

Opening this thread to know what you guys are doing about GDPR. Any change in the way you collect leads on site?

 

[Hitkey07]

I think that every site will be hit sooner or later. So I would try to fix everything as soon as possible

 

[ryuken]

I think that every site will be hit sooner or later. So I would try to fix everything as soon as possible

What do you mean by "hit"?

 

[Hitkey07]

What do you mean by "hit"?

Hit by paying fines. Mostly it depends on your country where you are from.

Basic GDPR was modified by some parliaments. Also the Regulation with mistakes differs from country to country. For example Germany is pretty heavy, when Austria modified the GDPR rules in favour of the "local" business.

So it depends

 

[ryuken]

Hit by paying fines. Mostly it depends on your country where you are from.

Basic GDPR was modified by some parliaments. Also the Regulation with mistakes differs from country to country. For example Germany is pretty heavy, when Austria modified the GDPR rules in favour of the "local" business.

So it depends

Well, avoiding such issues is ridiculously easy. So shouldn't be any excuse for anyone to not get in line.

 

[ryuken]

Got an email from SEDO, saying:

On May 25, 2018, the General Data Protection Regulation will take effect. This means the WHOIS will “disappear”.

WHOIS disappear? What the heck?

 

[WorkingNow]

anyone have a link to more info about this ? We talking only sites tgat collect data being affected?

 

[rimvy]

Got an email from SEDO, saying:

On May 25, 2018, the General Data Protection Regulation will take effect. This means the WHOIS will “disappear”.

WHOIS disappear? What the heck?

Whois provided info about domain owner, if owner haven't bought domain privacy. So now every domain will have domain privacy, without paying.

anyone have a link to more info about this ? We talking only sites tgat collect data being affected?

If you have for example google analytics in your site, you have to make your site GDPR compliant, because analytics leaves cookies in persons PC.

 

[Thulf]

Not that I would, but let's say I find a website that's racking up money while not being compliant with GDPR in some aspects, how should I go about suing that website owner or something?

I see nobody asking nor answering this.

Hey, EU, check out these cute sites - not in compliance, yet profiting. Shouldn't we do something about that?

I do feel a little dumb, but it's just a thought I had as a possible scenario in the grand scale of things (like, it's not just ME on this planet, there's more than 7 billion others, a number I don't actually comprehend in all its glory, and any one of them could do 1000x worse than I could have ever imagined was possible).


On a more serious note, considering how big battles they'll be fighting with the big guys who are "living on the edge", I don't think they'll ever have time for smaller sites...

 

[CorpMaster]

I doubt this EU GDPR thing will have an easy time collecting anything from outside the EU countries themselves unless those non-EU businesses are directly doing actual business in the EU countries.

CM

 

[ScrapingProxies]

If you are running a business, then perhaps this would affect you. But I do not think small business owners would be noticed, unless someone report you - things should be normal as always.
Big web businesses should definitely remedy solutions to adhere to the ruling.
But small ones, I think most often these would always have leeways - something like DMCA notices - you don't get hit very often by these right? But I do notice copyright infringement spam mails are regularly being distributed very often to hosting providers.
Worst come to worst, block all EU traffic! lols.

 

[Sansha Kuvakei]

I'm not doing anything. I'm an American citizen, and my LLC's are formed in America. The EU has absolutely no bearing on me. Until I have to comply by US law, they can shove their regulations right where the sun doesn't shine.

However, what I am interested in seeing is how this will affect eCommerce sites that primarily target the EU. With the requirement to gain consent to fire the pixel, I can foresee FB ads becoming incredibly difficult to work with, driving up conversion costs.

 

[Mr Positive]

Hi what exactly are these regulations that one needs to comply can you share the list that one needs to put in his site to be safe.

 

[rimvy]

Copy/paste from cookiebot website, but it's basically what's needed. Biggest nonsense for me, that site should be usable, even when user declines cookies, it's big BS. What I think if you don't accept cookies, just leave the website, my yard my rules.

Inform your users:
Provide a clear and specific information on the cookies in use on the site, what types of data are processed, for what purpose and where in the world they are sent.

Get prior consent:
Ask for consent before setting cookies. Only strictly necessary cookies may be set prior to the reception of the consent.

Document:
Keep record of all received consents as evidence that the consent has been given.

Protect the data:
Ensure that all personal data is securely stored. Only transmit data to the EU and other adequate countries.

Give your users a true choice:
Make sure that your users have the possibility to see the cookies, select, accept and reject them. The site must function even though the user has rejected cookies.

Provide the option for your users to change their mind:
Give access for the users to see and change their choice of accepted and rejected cookies on your site. If the user so requests, you must be able to erase their data.

Alert:
In the case of a breach, alert securities and affected users within 72 hours.

 

[Mr Positive]

This is BS man.

 

[blogzandstuff]

I'm not doing anything. I'm an American citizen, and my LLC's are formed in America. The EU has absolutely no bearing on me. Until I have to comply by US law, they can shove their regulations right where the sun doesn't shine.

However, what I am interested in seeing is how this will affect eCommerce sites that primarily target the EU. With the requirement to gain consent to fire the pixel, I can foresee FB ads becoming incredibly difficult to work with, driving up conversion costs.

Unfortunately it doesn't work like that, if you get visitors from any EU country then affects you. That is EU citizen, so a EU citizen living in the USA using your site means you need to comply

 

[Mr Positive]

How is a site owner supposed to comply is it just we need to put this on our terms and privacy or more steps?

 

[Marcel Freiberg]

There are a hole bunch of new „rules“ not only more information. For example the user of a site can ask that you delete all information according to this person (in all systems, even mails,...). Even if you are using google fonts (which determine resolution of a user for optimization) you need to explain this to the user.
The user can also ask you to move his user data (e.g.) orders in a conman format to an other competitor,...

And why everyone is extremely interested in solving the issues:
The base for calculation of the punishment is the netsales value of the whole group of companies.
Issue in a little startup with 1,000,000 € netsales owned by a large group with 1,000,000,000€ means a very large amount of money to pay.

 

[blogzandstuff]

How is a site owner supposed to comply is it just we need to put this on our terms and privacy or more steps?

More steps, you need to have the ability to hand over all data if requested.
This sheds some light
https://wp-gdpr.eu

 

[cham rox]

can someone please simple say does this affects to our small sites? ex: affiliate sites/ adsense niche sites? If so what we have to do? I have already posted the privacy policy page. Do we have to do anything more?