{"id":56577,"date":"2021-05-03T13:53:35","date_gmt":"2021-05-03T13:53:35","guid":{"rendered":"https:\/\/www.optizmo.com\/?page_id=56577"},"modified":"2022-07-05T16:55:38","modified_gmt":"2022-07-05T16:55:38","slug":"global-email-compliance","status":"publish","type":"page","link":"https:\/\/www.optizmo.com\/resources\/global-email-compliance\/","title":{"rendered":"Global Email Compliance"},"content":{"rendered":"

[et_pb_section fb_built=”1″ module_id=”home-hero-bg” module_class=”greyOverlay page-header” _builder_version=”4.16″ global_colors_info=”{}”][et_pb_row _builder_version=”4.16″ custom_margin=”||0px|” custom_padding=”||0px|” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text admin_label=”H1 + H2″ _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

Global Email Compliance Landscape<\/h1>\n

Email marketing is global and you should know the guidelines<\/h2>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ specialty=”on” module_id_2=”optizmo-sidebar” _builder_version=”4.16″ global_colors_info=”{}”][et_pb_column type=”2_3″ specialty_columns=”2″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_row_inner admin_label=”Row” _builder_version=”4.16″ global_colors_info=”{}”][et_pb_column_inner saved_specialty_column_type=”2_3″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text admin_label=”CAN-SPAM” _builder_version=”4.16″ z_index_tablet=”500″ global_colors_info=”{}”]<\/p>\n

Email Marketing is Global\u00a0<\/h3>\n

With the continued growth and evolution of digital marketing, the discipline of marketing has needed to take a more global perspective. With a wide variety of channels consumers can engage with from anywhere at any time, marketers have the ability to reach a worldwide audience more easily and cost-effectively than ever before. But, with this extended reach come challenges, including language and cultural differences, along with different laws and regulations that set guidelines for marketing to people from different parts of the world.\u00a0<\/span><\/p>\n

In the United States, email marketers know that they must understand and comply with The CAN-SPAM Act of 2003, which created a clear set of guidelines for using email as a marketing channel. Outside the U.S., various countries and regions have passed their own laws and regulations that impact how marketers can send marketing email to recipients in those parts of the world.\u00a0<\/span><\/p>\n

\n

If you need clarification on what the CAN-SPAM Act<\/a> means to you and your email marketing campaigns, Contact Us<\/a> Today \u2013 we would be happy to review this important legislation with you.<\/p>\n<\/blockquote>\n

[\/et_pb_text][et_pb_divider color=”#dedede” divider_position=”center” _builder_version=”4.16″ global_colors_info=”{}”][\/et_pb_divider][et_pb_text admin_label=”GDPR Compliance” _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

International Email Regulations<\/h3>\n

Email can be a highly effective marketing channel for campaigns running in multiple countries, however, it’s important to understand that regulations impacting email marketing can vary significantly from one country to another.\u00a0 Outside of the U.S. and CAN-SPAM, perhaps the most significant law to understand is the General Data Protection Act (GDPR) in the European Union.\u00a0 GDPR is a much broader law, impacting marketing channels well beyond email.\u00a0 But, it’s impact on email is significant, as it sets requirements for both receiving prior permission to email recipients as well as rules for responding to opt-out requests.\u00a0\u00a0<\/span><\/p>\n

GDPR Compliance<\/h3>\n

With GDPR on many marketers\u2019 minds, we have developed a brief overview of our current positioning under the new regulation, as your trusted vendor and partner.<\/p>\n

For some time, OPTIZMO has been deeply involved in understanding our role and responsibilities under the new set of rules. After several consultations and evaluations, the consensus of our lawyers, the IAB, and other noted data privacy and protection groups is that OPTIZMO will in fact be categorized as a U.S. based data processor.<\/p>\n

This is an important distinction for us, as the service provided to each of our clients may be used in whatever way they choose to deploy it. As always, opt-out links and mailer access keys are distributed only to partners of a clients\u2019 choosing. Processed opt-out data will only be retained for the period during which we are engaged with a client, and it will be used solely for the purposes directed by the client and as required under CAN-SPAM, EU, or any other regionally applicable email compliance laws.<\/p>\n

We have undertaken a full gap analysis, remediation phase, and will update our service agreements and other documentation for those clients who require GDPR-specific language.<\/p>\n

The good news for OPTIZMO and all of our partners is that we have historically been doing almost all of what is required for GDPR readiness, both procedurally, and in the technologies we utilize around processing activities such as encryption and data movement. The majority of our GDPR initiatives include updating service agreements and documentation, and creating a few key records required under GDPR. We are also certifying under Privacy Shield, which is a fantastic all-around set of standardized criteria for responsible handling of data (not just from the EU), to further cement our position.<\/p>\n

Protecting personal data is a shared responsibility between data controllers and their processors. However, the responsibilities of a processor like OPTIZMO vary greatly from those of controllers, which is how most of our clients will be categorized under GDPR. An important first step toward helping our clients is ensuring they are familiar with the requirements of data controllers under GDPR. While our best recommendation will be to consult legal experts of your own, please let us know if we can be of assistance in this area. We will also be posting more GDPR related content to our website and social media feeds for your reference.<\/p>\n

As your trusted data processor, OPTIZMO is committed to providing you and all of our partners and clients with as many tools and documents as possible to help support your compliance with GDPR. We will also continue to strengthen our ability to facilitate and support your overall GDPR readiness in the future.<\/p>\n

*Nothing in this statement should be taken as legal advice. We encourage you to become familiar with the actual text of the regulation and also obtain legal advice as to how GDPR may impact your business.<\/p>\n

GDPR is NOT just for companies in the EU.<\/strong><\/p>\n

The General Data Protection Regulation (GDPR) went into effect on May 25, 2018. Despite a lot of coverage in various industry publications there remains quite a bit of confusion or a lack of understanding as to how the regulation will impact the digital marketing industry in the EU and also in other countries, like the U.S.<\/p>\n

First, let\u2019s dispel a myth \u2013 that GDPR only impacts companies in the EU. This is FALSE. GDPR expressly impacts any company that collects data on users who are in the EU. This means, if a company simply has a website with visitors from EU countries, then it needs to understand how it can gather, store, and utilize that data in a manner compliant with GDPR. The GDPR includes provisions for imposing extensive fines on companies that do not comply with the rules.<\/p>\n

So, what exactly is GDPR?<\/strong><\/p>\n

GDPR introduces a variety of obligations on data Controllers and Processors in a number of areas. It strengthens the rules for gaining user consent when obtain \u2018personal data\u2019 and \u2018sensitive personal data\u2019 which must be specific, granular, and auditable. In addition, it further defines how companies may use this data and how that use must be in line with the consent received from the user.<\/p>\n

What are the personal data requirements?<\/strong><\/p>\n

The regulation requires that persona data be:<\/p>\n

    \n
  1. Processed lawfully, fairly, and transparently in relation to individuals<\/li>\n
  2. Collected for specified, explicit and legitimate purposes and not be processed in a manner incompatible with those purposes<\/li>\n
  3. Adequate, relevant, and limited to what is necessary for the intended purposes<\/li>\n
  4. Accurate and any inaccuracies corrected without delay<\/li>\n
  5. Kept in a format that permits identification of the data subjects for no longer than necessary<\/li>\n
  6. Processed in a manner that ensures appropriate security<\/li>\n<\/ol>\n

    Learn more about Personal Data here<\/a>.<\/p>\n

    What happens if a company is non-compliant with GDPR?<\/strong><\/p>\n

    While exact fine amounts are related to the now severely a company fails to comply, but the regulation allows fines of up to 20 million Euros or 4% of a company\u2019s annual global revenue, whichever is highest. This does not mean that fines of this magnitude will be imposed, but it creates the possibility that they could.<\/p>\n

    This is just a quick primer on some of the aspects of GDPR. We encourage you to become familiar with the actual text of the regulation and also obtain legal advice as to how GDPR may impact your business.<\/p>\n

    External links to more information on GDPR<\/strong><\/p>\n

    If you want to learn more about GDPR, here are a few links to more in-depth details about the regulation.<\/p>\n