Global Data Protection Regulation (GDPR) Support
General Data Protection Regulation (GDPR) is an important component of EU privacy law (Article 8 of the Charter of Fundamental Rights of the European Union). GDPR is intended to protect personal data for website/webstore users residing in EU member states.
Objective:
The EU’s objective is to provide more visibility and control over personal data shared by EU residents with online platforms. At a basic level, GDPR regulates how web-based properties collect and share personal information, and what tracking technologies are used to monitor their online activities.
Although enforcement issues exist, U.S.-based manufacturers selling into European markets are technically required to comply.
Key Requirements:
- Consumers (data subjects) are empowered under GDPR to request a copy of any and all personal information collected while interacting with online platforms.
- Organizations conducting business in the EU are obligated to respond to such inquiries.
- A Privacy Statement must be provided outlining how and why data is collected, how long it is retained and who will be given access to it.
- Consent must be offered (and granted) before personal data is collected.
- Organizations must comply with requests to correct and/or remove personal data.
- Organizations must notify customers if their personal data is stolen.
- All of the above must be done in a timely manner.
Compliance:
ProjexB2B™ leverages GDPR compliance tools embedded in the WooCommerce codebase to enable full compliance with current regulations.