News for hackers. Stuff that matters.

A comment on I can no longer recommend MailChimp. Parent comment

Re:I can no longer recommend MailChimp by chomp on Tuesday October 31, 2017 @05:59PM (#15596961)
It doesn't matter if they believe that it's higher revenue, GDPR requires consent from the data subject [1] to process personal data. An email address is personal data under GDPR. You can't guarantee consent with single opt-in.

[1] https://gdpr-info.eu/art-7-gdpr/

[ Parent | on HN ]
Re:I can no longer recommend MailChimp by revelation on Tuesday October 31, 2017 @09:50PM (#15598321)
Even without GPDR single opt-in is already insufficient in e.g. Germany. If you send a newsletter to some lawyer and can't prove consent you might just get a C&D with statutory damages back.
[ Parent | on HN ]
Re:I can no longer recommend MailChimp by sgarman on Tuesday October 31, 2017 @06:04PM (#15596992)
Does this fall under mailchimps responsibility or the company using their services?
[ Parent | on HN ]
Re:I can no longer recommend MailChimp by munchbunny on Tuesday October 31, 2017 @06:10PM (#15597029)
The short answer is both.

There's a somewhat longer answer about how MailChimp would need to make the company agree to a separate contract around liability issues, as per GDPR requirements.

[ Parent | on HN ]