Also called General Data Protection Regulation
GDPR is the European regulation governing personal data, applying to anyone processing data about people in the EU regardless of where the business is.
It applies by the location of the person, not of the business, which is why it reaches creators worldwide the moment they have European subscribers or buyers.
Four obligations cover most creator situations: have a lawful basis for processing, tell people what you collect and why, keep it only as long as needed, and be able to honour requests for access and deletion. Consent is one lawful basis among several, not the only one.
Enforcement in practice concentrates on consent obtained badly and on requests ignored, rather than on documentation.
In practice
An unticked checkbox saying "email me about new products", separate from the purchase, is valid consent; a pre-ticked one bundled into terms is not.
Common mistake
Assuming it only applies to large companies. Scale affects some obligations, but the core duties apply from the first European subscriber.
Read more on this
- 10 Online Booking Software Options Compared Compare 10 online booking software options by features, pricing considerations, use cases, limitations, and how taap.bio fits creators.
- Link in Bio Pricing: A Creator's Guide to Real Profit Confused by link in bio pricing? Our guide explains free vs paid plans, hidden fees, and how to choose a tool that actually boosts your creator income.
- 10 Link in Bio Download Tools for Creators Compare 10 link in bio download tools for creators, with installer links, platform types, pros, cons, and guidance for choosing the right fit.
