Effective May 25, 2018 the EU's General Data Protection Regulation (GDPR) came in to effect. Optix complies with this regulation as a 'data processor'. As a 'data collector' you should already have taken steps to ensure you are compliant with this regulation.

A major component of this regulation surrounds the means through which users can provide and revoke consent for hosting their personal information. It must be just as simple to revoke consent as it is to provide it in the first place. The language used to gather consent must be clear and plain (no more rambling legalese).

The second component is enhanced rights for data subjects. These include the right to be notified of data breaches, the right to data portability and data acccess and the right to be forgotten. Organizations hosting or processing data are also required to take additional measures to ensure privacy by design and adequate protection measures.

Personal data is defined very broadly as any piece of information that can be used to directly or indirectly identify a person. Name, photograph, email address, social media posts, and banking information are all examples of personal data.

Yes. GDPR applies to any organization that collects data on any EU resident or citizen, regardless of where the company is geographically located.

To ensure we are compliant with the new regulations, we took the following steps, which include: