GDPR - anyone working in this area?

[fakenews]

jonamv8 said:

Are you deleting your emails prior to replying? Are you deleting them in a fashion that the ICO deem acceptable? Do you have an email deletion policy LOL

You need to email them to ask whether email is acceptable. Do it now before you email anyone. Oh...

[muffinmenace]

I did wonder how Litigation Hold on email and PII will work itself out

[Dixy]

Hoofy said:

Being an employee does on occasion feel tempting

Trouble is I would not work for anyone stupid enough to have me as an employee.

[Terminator X]

48k said:

Bikerjon said:

Now that my inbox is getting filled with tedious GDPR requests to opt-in, opt-out, view pages of boring policy etc I can't help feel that this is going to damage email marketing beyond repair. Targeted emails must still be one of the most affective ways of generating sales, so anyone who's relying on this is surely going to take a hit - initially at least. Or will it all just carry on as before once the dust settles?

Another problem with these GDPR emails is that the spammers and virus paddlers have jumped in on them already, and I'm seeing fake "GDPR Opt In" emails which have virus payloads or links to sites to harvest your details. Some even offering competition prizes for "filling in your details and continuing to stay on our email communications list". You've got to have your wits about you.

Not hard though, don't click on links in emails.

TX.

[Hoofy]

Terminator X said:

48k said:

Bikerjon said:

Now that my inbox is getting filled with tedious GDPR requests to opt-in, opt-out, view pages of boring policy etc I can't help feel that this is going to damage email marketing beyond repair. Targeted emails must still be one of the most affective ways of generating sales, so anyone who's relying on this is surely going to take a hit - initially at least. Or will it all just carry on as before once the dust settles?

Another problem with these GDPR emails is that the spammers and virus paddlers have jumped in on them already, and I'm seeing fake "GDPR Opt In" emails which have virus payloads or links to sites to harvest your details. Some even offering competition prizes for "filling in your details and continuing to stay on our email communications list". You've got to have your wits about you.

Not hard though, don't click on links in emails.

TX.

Don't tell my email list that!!

[jonamv8]

fakenews said:

You need to email them to ask whether email is acceptable. Do it now before you email anyone. Oh...

LOL!!!

More holes in this GEEEEDPR than a cheese grater I tell thee

Edited by jonamv8 on Thursday 3rd May 14:17

[jonamv8]

Hoofy said:

Terminator X said:

48k said:

Bikerjon said:

Now that my inbox is getting filled with tedious GDPR requests to opt-in, opt-out, view pages of boring policy etc I can't help feel that this is going to damage email marketing beyond repair. Targeted emails must still be one of the most affective ways of generating sales, so anyone who's relying on this is surely going to take a hit - initially at least. Or will it all just carry on as before once the dust settles?

Another problem with these GDPR emails is that the spammers and virus paddlers have jumped in on them already, and I'm seeing fake "GDPR Opt In" emails which have virus payloads or links to sites to harvest your details. Some even offering competition prizes for "filling in your details and continuing to stay on our email communications list". You've got to have your wits about you.

Not hard though, don't click on links in emails.

TX.

Don't tell my email list that!!

I say we just ban email altogether. I'm going to dust off my fax machine. Do we have some guidelines from the ICO in relation to faxes, can I enable SSL on my facsimiles...?



Another problem with these GDPR emails is that the spammers and virus paddlers have jumped in on them already, and I'm seeing fake "GDPR Opt In" emails which have virus payloads or links to sites to harvest your details. Some even offering competition prizes for "filling in your details and continuing to stay on our email communications list". You've got to have your wits about you.

GDPR - THE GIFT THAT KEEP ON GIVING


If MTD comes in I think I'll move. If Corbyn gets in I'm OFFFFFF

TinRobot - do you know the regs for a business trading in UK but residing in say Marbella?

[yajeed]

jonamv8 said:

I say we just ban email altogether. I'm going to dust off my fax machine. Do we have some guidelines from the ICO in relation to faxes, can I enable SSL on my facsimiles...?

You can buy a new fax machine, with AES256 bulk encryption and Diffie Hellman key exchange, so not far off...

https://www.tccsecure.com/Products/voice-fax-data-...

[jonamv8]

yajeed said:

jonamv8 said:

I say we just ban email altogether. I'm going to dust off my fax machine. Do we have some guidelines from the ICO in relation to faxes, can I enable SSL on my facsimiles...?

You can buy a new fax machine, with AES256 bulk encryption and Diffie Hellman key exchange, so not far off...

https://www.tccsecure.com/Products/voice-fax-data-...

Nice bit of kit, I've also enquired about some local carrier pigeons but not sure if the ICO would class them as Data Processors or not

[Hoofy]

jonamv8 said:

I say we just ban email altogether. I'm going to dust off my fax machine. Do we have some guidelines from the ICO in relation to faxes, can I enable SSL on my facsimiles...?



Another problem with these GDPR emails is that the spammers and virus paddlers have jumped in on them already, and I'm seeing fake "GDPR Opt In" emails which have virus payloads or links to sites to harvest your details. Some even offering competition prizes for "filling in your details and continuing to stay on our email communications list". You've got to have your wits about you.

GDPR - THE GIFT THAT KEEP ON GIVING


If MTD comes in I think I'll move. If Corbyn gets in I'm OFFFFFF

TinRobot - do you know the regs for a business trading in UK but residing in say Marbella?

GDPR is Europe-wide. Try Malaysia.

[jammy-git]

Regardless of where you are, if you touch the data belonging to an EU resident you fall under GDPR.

[Hoofy]

jammy-git said:

Regardless of where you are, if you touch the data belonging to an EU resident you fall under GDPR.

I expect Putin will come down hard on anyone breaking GDPR in Novgorod.

[jonamv8]

jonamv8 said:

TinRobot - do you know the regs for a business trading in UK but residing in say Marbella?

DELETED: Comment made by a member who's account has been deleted.

Thanks TR - we should probably have a whip round for u as your by far the most informed on this subject. If we can return the favour Im sure im not alone in offering some advice on our respective specialist subjects.

Thailand is now looking preferable to Marbella lol

[P4ulB]

Good fun this GDPR stuff

I've got a couple of questions which I can't seem to find any definitive answers for.

1. Website contact/enquiry forms

If you have one of these forms on your site and are asking for some information (name, email address, telephone number etc), but are using the information purely to deal with that particular enquiry (no adding to mailing lists or retaining it for future use), what sort of provision to do you have make to cover yourself on GDPR?

It's obviously personal information, would a brief message explaining the above use and a tick box to say they agree be sufficient?

2. Sending files via email

I've had a question from a customer who will need to send the occasional document containing personal information from June onwards. Sending unencrypted docs via email is a big no no, but trying to find a suitable solution is proving tricky. Is it a case of:

- Encrypt the emails with document (password protected) and then provide the unencrypt key/password separately?
- Use some sort of file transfer service so you are just emailing a link

They have access to the business version of OneDrive so hoping can do something there as opposed to signing up for another service.

Any advice welcome!

Edited by P4ulB on Saturday 5th May 13:23

[P4ulB]

DELETED: Comment made by a member who's account has been deleted.

No worries about the delay in replying, really appreciate the reponses so thank you.

They use Office 365 and firewall/anti-virus etc are all in place and OneDrive is definitely an option for the file transfer solution.

Web forms sounds nice and straight forward - I thought people actually had to agree to the use, but much prefer the solution of the message.

Once again, thanks for taking the time to reply!

[Rollin]

GDPR looks like it may be a regulation too far for NHS dental practices.

DPO..... £7000 per year please

The sharks are circling as usual.

[Rollin]

DELETED: Comment made by a member who's account has been deleted.

Dentists providing NHS care will be regarded as public authorities, no matter how small the practice.

Also, most don't want to fight a court case to establish what 'large scale' is.

[Rollin]

DELETED: Comment made by a member who's account has been deleted.

https://bda.org/news-centre/blog/gdpr-what-does-it-mean-for-dentists

[Rollin]

An exemption was debated in parliament yesterday...and rejected.

[Hoofy]

Today I got an interesting email about my GDPR confirmation.

The email had a link. I clicked it, the web page confirmed that I had approved the business. Slicker than getting someone to re-input their details. Is there something like this available for mailchimp? (My data is on mailchimp.)