GDPR: Privacy’s Day of ReckoningMay 25, 2018 is a milestone day in the privacy world. Yes, it is the day companies need to be in compliance with the the EU’s General Data Protection Regulation (GDPR) requirements. GDPR includes provisions requiring companies to protect the personal data and privacy of EU citizens for transactions that occur within EU member states. It also regulates the exportation of personal data outside the EU.
Like a lot of companies, Narrative Company (Narrative) carefully reviewed the requirements to determine if we, a US based company, were subject to the GDPR requirements. According to guidance, any company that stores or processes personal information about EU citizens within EU states must comply with the GDPR. As you might guess, there are a lot of interpretations to the guidance and how far it extends.
Some argue (the minority) that unless your company resides in an EU country, GDPR does not apply. Others have stated that you don’t have to be an EU company, but if you purposely market to the EU, you are subject. Still others have interpreted that if there is no company presence in the EU, but you process personal data of European residents, then GDPR applies.
Regardless of these various interpretations, at Narrative, privacy is a key tenet of our operating principles. The goal of Narrative is to give users control over their content by not allowing anyone (not even moderators) to edit their content in any way and by allowing users to remove their content from the network at any time. This extends to the information/content we collect from and about our community members — no matter where they reside around the globe. Narrative is adopting GDPR and will be fully compliant. We are committed to improving individual rights and understand our data responsibilities.
What does this mean for our Alpha Release — Chaucer? Effective tomorrow, May 24, 2018, the following changes will be implemented:
-No longer collecting IP addresses for users
-Completely deleting user data when accounts are deleted
-Allow users to revoke agreement to the terms of service
-Allow members to download profile data
-Point-of-collection descriptions for profile fields
GDPR privacy compliance will be embedded as we work on the beta release of the Narrative platform scheduled for Q4 2018. We’ll only collect necessary data, won’t sell the limited information we collect and let users control their own data. Privacy matters.
https://blog.narrative.network/gdpr-privacys-day-of-reckoning-5d40e98554ea
