Re: Gdpr - upcoming law for European merchants
 

They have zero jurisdiction over people not in Europe...

Re: Gdpr - upcoming law for European merchants
 

I would advise you have a read of this
http://safedatamatters.com/gdpr-datacontrollers-part1/

If you hold information on EU citizens then GDPR applies to you, it seems.

Re: Gdpr - upcoming law for European merchants
 

We're in the US and about 4% of our business comes from the EU & UK. There is no way we're going to try to comply with GDPR. We'll just remove the EU countries and the UK.

Has anyone seen any opt out language? I'm sure we'll need some language in our Terms of Service.

Re: Gdpr - upcoming law for European merchants
 

As a UK company we will have to comply with the new regulations and the main impact for us is getting the customer's specific permission through a tick box to allow us to subsequently send them marketing emails.

In the past, this consent was included in our general terms and conditions of placing an order, but now it has to be a separate specific and positive consent in a tick box, and we will have to retain a permanent record of this consent.

For our part we will prefer to have this built in to x-cart rather than establishing separate databases.

Re: Gdpr - upcoming law for European merchants
 

Glad you added the prefix "...for our part" to that conclusion :wink:

Conjecture and Opinions on; Planned compliance measures, countries theoretically affected, countries actually affected, ergo businesses potentially at risk, the ability for this to actually be enforced etc etc etc vary massively and this collection of varied opinions, is the only true live reference point to GDPR... so far....

If and we say If, XC do decide to add a method of GDPR compliance to XC5, then this must only be by way of a module (free or chargeable / XC / Third Party Developer / Custom Home Built) because... this then allows selective choice by all storeowners, which is very important.

Many storeowners may / will be unaffected and therefore, will be (and rightly so) disenfranchised :mrgreen: with having any GPDR compliance processes forced upon them as part of XC5 #Core as it will be 100% superfluous in their case. @qualiteam please pass this on to the right XC people. Thx!

Re: Gdpr - upcoming law for European merchants
 

Adding a simple checkbox that will enable or disable a feature is hardly forcing anything. I'm beginning to wonder why you resist these simple things...

Re: Gdpr - upcoming law for European merchants
 

It's enforcing a #Core process / service that's completely unnecessary for some XC5 storeowners. That's the point.

It's just as easy to add a module if you need it or not add a module if you don't. That's currently still one of the attractions of XC5 i.e. controllable customisation.
Some previous #Core changes / improvements have been either superfluous to many or caused big issues elsewhere within XC5. As you know! :wink:
:mrgreen: Feel free to wonder, but in this case, it's not a simple change. That's why. If you dig deeper into GDPR even at it's current status, then this will become pretty clear...

Re: Gdpr - upcoming law for European merchants
 

In 2-3 weeks we are going to release GDPR-friendly add-ons for xc5.3.5.x and xc4.7.x branches.

And yes, it is not about a simple checkbox on the site. You need to change all your business process to make it compliant GDPR. However, our addon will help merchants to be GDPR friendly.

Re: Gdpr - upcoming law for European merchants
 

Max is this module going to be flexible or will it aim at EU stores only? Meaning - if any website/store does not need or want to accept and implement these rules can they still use the module but tweak info/wording/labels so to have sort of their own gdpr policy?

Basically use it more of a informative and self-aware tool for customers. I can see how some sites may want to skip the gdpr but voluntarily enforce their own rules and inform customers.

Re: Gdpr - upcoming law for European merchants
 

Can I also add in here GDPR is much more than a tick box. A customer can ask lots of questions of you, it also deals with security, hacking, notifying the relative authorities if you have been hacked had a data breach etc.
You also need to be able to demonstrate you have taken reasonable steps to secure your data.
The impact of GDPR is going to be huge in my opinion