GDPR - anyone working in this area?

GDPR - anyone working in this area?

Author
Discussion

Sheepshanks

32,925 posts

120 months

Friday 25th May 2018
quotequote all
Got an email after 11PM last night from the physio I go to saying that due to GDPR I needed to email her back to agree to future contact by various media.

I don't have the heart to mention to her that as she's holding sensitive personal information she needs to do quite a bit more than that.

jammy-git

29,778 posts

213 months

Friday 25th May 2018
quotequote all
I'd say she doesn't need to do that anyway. She has a legitimate interest to contact you, so she doesn't need consent!

Sheepshanks

32,925 posts

120 months

Friday 25th May 2018
quotequote all
jammy-git said:
I'd say she doesn't need to do that anyway. She has a legitimate interest to contact you, so she doesn't need consent!
Possibly, I'd have thought 'contract' might be better. Or even both. Strictly speaking she's stuffed now if people don't reply.

We're using legitimate interests in a business-to-business context, but I think it's a bit more iffy for business-to-consumer.

It was more that her entire interpretation of GDPR seems to be that she needs to ask for consent to contact that I was bemused by.


Edited by Sheepshanks on Friday 25th May 12:13

stevesuk

1,349 posts

183 months

Friday 25th May 2018
quotequote all
DELETED: Comment made by a member who's account has been deleted.
Will update when we've given it a few days - we're already over 5% though.

Bikerjon

Original Poster:

2,202 posts

162 months

Friday 25th May 2018
quotequote all
I reckon some of the e-commerce businesses that sent out an email opt-in when they technically didn't need to must now be setting themselves up for a really rough few months. They've effectively pressed the self-destruct button and sales are surely going to drop off a cliff in June.

Mojooo

12,783 posts

181 months

Friday 25th May 2018
quotequote all
I think it is fair to say the ICO will be taking a light touch to regulation in the early days - particularly as the increased awareness of data rights will now likely mean millions more are a) aware of the rights )b will know who to complain to.

Also given that the Data Protection Act only came into force this week clearly businesses need a bit more time to be fully compliant.


PurpleMoonlight

22,362 posts

158 months

Friday 25th May 2018
quotequote all
Hasn't stopped Ebay or Paypal I note.

plasticpig

12,932 posts

226 months

Friday 25th May 2018
quotequote all
http://www.bbc.co.uk/news/technology-44252327

Complaints about Google, Facebook, Google, Instagram and WhatsApp have already been filed. Seems some privacy campaigners don't like the fact that the only option is to not use these service if you do not want to see targeted advertising.
They don't seem to recognize that targeted advertising is what pays to keep these services running.

Some websites have taken the easy option and just blocked access to their websites from the whole of the EU. The History Channel for example. Some smaller US companies are also blocking access from the EU .


jammy-git

29,778 posts

213 months

Friday 25th May 2018
quotequote all
What the frick was the History Channel doing with PII to make them think it was just easier to block access to an entire continent (nearly) rather than just update their privacy policy?

Mojooo

12,783 posts

181 months

Friday 25th May 2018
quotequote all
jammy-git said:
What the frick was the History Channel doing with PII to make them think it was just easier to block access to an entire continent (nearly) rather than just update their privacy policy?
I wondered that too but I presume its because you can go onto the website and sign up for stuff so its easier to just decline customers from the EU?

jammy-git

29,778 posts

213 months

Friday 25th May 2018
quotequote all
I reckon they are selling data on all over the place. Easier to block the site in the EU than to admit to what they're doing with data and ask for consent.

ashleyman

6,997 posts

100 months

Friday 25th May 2018
quotequote all
Just had a TEXT MESSAGE from Inchcape to tell me they've update their privacy policy.

Annoying because I remember unsubscribing to their email newsletter.

TTmonkey

20,911 posts

248 months

Friday 25th May 2018
quotequote all
BOTB sent me a five quid credit this week as I “haven’t played” for a while. To play the free credit you have to accept their updated privacy stuff etc.

Great way of retaining customers. I would bet my house that no one using their free credit is going to actually win a car though.... hehe

I put it on one of these.... something totally different for a change.


DSLiverpool

14,791 posts

203 months

Friday 25th May 2018
quotequote all
We spoke to two consultants, we asked as a business that performs marketing and creates web shops for others (not ourselves) what policy do we follow.
We got 2 very different answers so can anyone suggest a policy advisor for an agency. I’m more concerned with client confidentiality we always use an NDA

DoubleSix

11,731 posts

177 months

Friday 25th May 2018
quotequote all
DELETED: Comment made by a member who's account has been deleted.
Hey TinRobot,

Perhaps you are not answering queries here which is understandable but would be grateful for any steer you can offer on my earlier question...

Thx in advance

DSLiverpool

14,791 posts

203 months

Friday 25th May 2018
quotequote all
DELETED: Comment made by a member who's account has been deleted.
Will do, appreciated.

Sheepshanks

32,925 posts

120 months

Friday 25th May 2018
quotequote all
DoubleSix said:
I occasionally give seminars.

At the end I hand out feedback forms where individuals write their contact details if they would like to discuss their personal situation in more detail. This information is only uploaded to a database if the individual becomes a client otherwise the form will end up in the shredder.

I’ve done some digging but am still not 100% what sort of action I need to take.

Anyone perhaps have some insight?

Many thanks
What the context?

Hoofy

76,518 posts

283 months

Friday 25th May 2018
quotequote all
Got a couple of detailed replies from people explaining the need to send PP updates. Satisfying to waste their time. Straight in the bin without reading it. biggrin

Efbe

9,251 posts

167 months

Saturday 26th May 2018
quotequote all
RM said:
jammy-git said:
I've heard 20-30% opt-in is about average. Obviously depends on your business, industry, etc, etc.
I think 20-30% is doing well. With a 40% open rate (pretty good in itself) that means 50-75% of the opens are re-consenting.

I've seen many at 5-10%, only a couple in the 20%+ range.
I'm very surprised at the rates you guys are giving.
Was with 20 people tonight, not one has even looked at a gdpr e-mail, let alone opt in, all have had 50+

TTmonkey

20,911 posts

248 months

Saturday 26th May 2018
quotequote all
Efbe said:
I'm very surprised at the rates you guys are giving.
Was with 20 people tonight, not one has even looked at a gdpr e-mail, let alone opt in, all have had 50+
Most of the “opt in” emails for me have been from low rent organisations and companies. The big guys are just sending out “policy update” mails with no requirement to opt in.


I’ve not opted in to any that think it’s a requirement. Accepted a few cookie updates form websites but seriously what is the real alternative.....?