What are some common challenges faced after implementing MA?

[mdmarouf988]

what_is_gdpr_about
The GDPR (EU General Data Protection Regulation) is a law that came into effect on May 25, 2018, that stipulates the protection and handling of personal data.

This law applies to each country in the EU, but Japanese companies may also be subject to it. The penalties for violations are severe and "I didn't know" is not an excuse, so it is a good idea for companies and individuals who are not currently subject to it, as well as companies within the scope of the law, to understand the general content.

Violations will be penalized with heavy fines
Violation of the GDPR will result in heavy fines.

For example, if a company violates the rules on the handling of personal data, it can be fined up to 4% of its annual worldwide turnover or 20 million euros, whichever is higher (Article 83, Paragraph 5).

20 million euros is about 2.5 billion yen in Japanese yen. Since "whichever is higher" will be imposed as a fine, if you violate the rules on handling personal data, you will be fined at least 2.5 billion yen.

Which Japanese companies are subject to the GDPR?
what_is_gdpr_target_company
There are three Japanese companies that are subject to the GDPR.

Companies with subsidiaries, branches, sales offices, etc. in the EU
Companies providing goods and services from Japan to the EU
Companies commissioned by the EU to process personal data
You are subject to the EU legislation if you operate in the EU, offer goods or colombia whatsapp number database services to the EU, or process EU personal data.

Some people may look at these three conditions and think that their company does not qualify, but in fact, e-commerce sites aimed at inbound tourists also qualify.

This also applies to e-commerce sites for inbound tourists.
If your users are in the EU and you collect data about their web behavior, you are also subject to the GDPR.

This definition of "EU users" does not only include users who reside in the EU.

Short-term residents, such as Japanese who are staying in the EU for a short business trip, are also included in the "users in the EU".

In other words, cookies belonging to Japanese people on business trips within the EU will also become personal information under the GDPR.

What is the processing of personal information under the GDPR?