I know I have.
My email inbox has been visited on a daily basis with emails talking about updated privacy policies and consent to continue receiving emails.
I’ve also contributed to that flood of emails as I work on GDPR compliance for a non-profit organization.
On the whole, I think it’s a good thing. It’s also something that product people need to be aware of.
So in this issue of Inside Product Management I run the risk of getting caught in GDPR weariness to share some resources on GDPR and its relevance to product people.
Long story short: we use your personal data to provide you just in time resources about product ownership and we don’t share your data with anyone unless we need to in order to share just in time resources about product ownership.
I certainly couldn’t be left out of the fun!
The Ultimate GDPR Infographic for Product Managers
Just in case you aren’t familiar with GDPR, it stands for the General Data Protection Regulation. It’s a European Union data privacy legislation that provides data privacy and protection for EU citizens. Any organization that processes (ie collects or stores) data about an EU citizen is impacted. Countly designed an extensive infographics covering GDPR rules, fines, and articles in the hopes that it will be a guide if you are just starting to find out about GDPR. (You may be a little late to the game, the regulation goes into effect on May 25, 2018).
What every product manager needs to know about GDPR
Sebastian Muehl put together this summarization of GDPR which is a good introduction to the data privacy legislation.
How to Prepare for GDPR by creating a culture of stewardship
Owen Wallis is a product manager who has the opportunity (?) to be the Data Protection Officer (DPO) for his organization. He’s written a few helpful posts about GDPR, including this one which positions GDPR as an incentive to make sure that your organization takes data privacy seriously and starts following good practices to protect your customers personal data.
Building Product in a Post-GDPR World
Chris Massey takes a look at the implications of GDPR on how you build products, and the kind of products that get built. He stays away from the technical aspects of encryption, data sovereignty, or cookie tracking and instead looks at how product management will evolve and adapt, starting from May 25th 2018, what he refers to as “OMGDPR day”.
10 Good ways to gain consent
One key aspect of GDPR is your legal basis for data processing. In plain english – why is it ok for you to collect and store someone’s personal data. One of the more commonly used legal bases is consent.
There are certainly good – and not so good – ways to gain consent so Ben Davis put together this handy post showing examples of ways to gain consent that honor the spirit of GDPR regulations, and are generally good practice.