Is your website ready for GDPR? | Need-to-know

On 25 May 2018, the General Data Protection Regulation, or GDPR, is going to come into effect in the EU.

GDPR will give EU citizens the right to order any company to stop building profiles about them, request data deletion within 30 days, and move data from one provider to another.

If a company fails to comply, they will be fined either €20 million or 4% of their annual global revenue, whichever is larger.

If your website has users from anywhere in the EU, then your website needs to be GDPR-compliant before the 25 May 2018 deadline, or you risk being hit by these huge fines.

Here are some of the key things you need to consider when making your website GDPR-compliant.

How is data collected throughout the site? You need to understand which data you collect and where, and make sure it’s clear to the customer what will be done with it.

Can consent be requested at all relevant touchpoints? If not, that functionality needs to be added.

How can individuals access their data? You need to have a clear and easy process to allow users to view all the data you hold about them.

The key places you need to focus on are contact forms, log in areas, e-commerce purchase areas and anywhere else where the user needs to input data.

Do you have any other GDPR tips? Let us know in the comments!

[stefancamargo]

Hi, what should I do with data collected from comments on my website? Wordpress doesn't have an option to delete email, name, and IP address from them, what is the solution without having to disable comments? thanks