You may or may not have heard about the "GDPR", but on May 25th, 2018, the European Union's General Data Protection Regulation (GDPR) comes into full effect, imposing a new set of rules for how the personal data of EU citizens should be collected and handled. This regulation will help protect individual privacy in the digital age and will impact your business (if you have EU customers or operate out of the EU) and the domain industry as a whole.
What we are doing about the GDPR
We're currently working on our detailed plans, and will soon be able to share more information about our implementation. We will be keeping two things in mind:
1. Our need to operate within the bounds of legal requirements.
2. Our commitment to keeping domain purchase and management as straightforward, simple, and instantaneous as possible for the end-user.
Visit our resource page to learn more about what we're doing to prepare.
What you can expect from us:
A post-purchase consent request, similar to the Whois Verification request we send when a new domain is registered
A full internal review to further strengthen our security to keep information safe
A method for customers to request erasure of personal data from our platform
What you can do now
Seek legal counsel from someone who is familiar with your specific situation so you can plan effectively to ensure you're compliant by May 25, 2018. We strongly encourage you to visit our resource page, where you can learn more about the regulation and subscribe to receive updates as things develop. You can also read our latest blog post to learn more.