Keep in mind that nothing you read here is a good substitute for legal advice. Below we’ll explain what the GDPR actually says and what it means for email. While most of the focus regarding GDPR email requirements has centered around email marketing and spam, there are other aspects, such as email encryption and email safety, that are equally important for GDPR compliance. (Our “ What is the GDPR?” article provides an overview.) Those who don’t follow the rules can get hit with a fine of €20 million or 4 percent of global revenue, whichever is higher, plus compensation for damages. The requirements basically boil down to two things: secure people’s data, and make it easy for people to exercise control over their data. That includes organizations not in the EU but that offer goods or services to people there. From names and email addresses to attachments and conversations about people, all could be covered by the GDPR’s strict new requirements on data protection.Īny organization (companies, charities, even micro-enterprises) that handles the personal information of EU citizens or residents is subject to the GDPR. While we may not think of email as subject to the European Union’s General Data Protection Regulation (GDPR), your mailbox in fact contains a trove of personal data. In this article, we’ll explain how to ensure GDPR email compliance.Įmail users send over 122 work-related emails per day on average, and that number is expected to rise. It also changes the rules of consent and strengthens people’s privacy rights. The GDPR requires organizations to protect personal data in all its forms.

Proton email read receipt