What is GDPR, and why care about GDPR compliance? 

GDPR stands for “General Data Protection Regulation”, a European Union legislation that applies to every organization that handles and stores the personal data of European Union Citizens. 

That data could be email addresses, names, addresses or transaction histories. But perhaps one misconception is that only EU-based companies need to be worried. On the contrary, GDPR affects any company that deals with EU citizens, even if the company itself is outside of the EU.

So, if you’re part of a US-based eCommerce company that delivers to Europe, GDPR concerns you. And by that, we mean that if you fall short of GDPR compliance, you’ll pay the literal price of up to €20m or 4% of an organization’s global annual turnover (whichever is higher), along with untold damage to your brand’s reputation.

How to get started with GDPR compliance

Once you educate yourself and your team about the importance of GDPR compliance you’ll want to reach out to your technology provider to ask them what they’re doing to help you become GDPR compliant. 

Your CMS or DXP provider should themselves be working hard to become GDPR compliant, and they should also be working with their clients and partners to ensure that they’re doing everything to help.