Just received this.
Thoughts on how this may affect UK Amazon sales into the EU?
"Next May, a new EU General Data Protection Regulation (GDPR) comes into effect, that will impact any business that stores or processes the data of EU citizens. If you have customers in Europe then you probably have access to their personal data including email addresses and contact details, so you will need to comply with the GDP.
There are three main changes that may apply to ecommerce businesses in the UK:
Extended jurisdiction: The new GDPR will apply to all companies that process the personal data of EU residents, regardless of the company’s location. Processing personal data related to offering goods or services to EU citizens will have to meet these regulations, even if the processing takes place outside of the EU or the business is not established in the EU. Non-EU businesses processing the data of EU citizens will have to appoint a representative to the EU.
Increased penalties: Organisations that breach GDPR can be fined up to a maximum of 4% of their annual global turnover or €20 million (whichever is the biggest amount).
Consent: The request for consent must be given in an intelligible and easily accessible form, with no long and complicated terms and conditions. The purpose of data processing needs to be given in the consent form and it must be as easy to withdraw consent as it is to give it."