E-retailers and other online businesses operating in the European Union must prove that processing users’ data is the only way to carry out the terms of a user’s contract, under new guidance from EU privacy authorities.
The European Data Protection Board’s April 12 guidance targets companies that provide online services under the General Data Protection Regulation (GDPR). This includes e-commerce platforms and streaming content providers that process personal data under contracts with users. Companies can enter into contracts when users purchase items or services from their websites.
Many U.S. companies are subject to the GDPR because they process or collect ...
Learn more about Bloomberg Law or Log In to keep reading:
See Breaking News in Context
Bloomberg Law provides trusted coverage of current events enhanced with legal analysis.
Already a subscriber?
Log in to keep reading or access research tools and resources.