What eCommerce Companies Absolutely NEED to Know : GDRP & Facebooks Updates

Before you begin, give yourself a pat on the back for taking steps to educate yourself on these coming changes. By doing so you're positioning your business for a successful future.

*Please note I'm not a lawyer and this isn't meant to be legal advice. Just a man trying to help.

The Details ✔️

What is the GDRP?

GDRP stands for General Data Protection Regulation. It provides a new set of regulations for citizens of the EU to know what data is being collected, how that data is being used and ensure the ability to opt-out. Simply put, it establishes the users right to access, track and opt-out of personal data tracking while putting the responsibility on the website and advertiser.

& Who does it affect? 

The GDRP applies to any company based in the EU and any company that advertises or has website visitors from an EU country this includes Google, Amazon and more. However, Facebook has put forth new rules and regulations “in spirit of the GDRP” and those affect everyone in all countries.

Got it. When does it start & what happens if I don’t comply? 

The GDPR goes into effect May 25th, 2018 If you don’t follow the GDPR, your subject to the fines (4% of annual revenue) and other penalties from the EU regulating bodies. 

If you don’t follow Facebook’s new regulations you're subject to penalties in the advertising auction costing you more money and the potential for your ad account to be shut down. 

.. But I don’t target the EU. Does this still matter to me? (MOST IMPORTANT PART)

Yes. As stated, Facebook has updated their terms and service for advertisers in response to GDRP which means you not only need to be in compliance with the GDRP but you also need to be compliant with Facebook's new terms and conditions.

Ok so how do I prepare? 

First, start by understanding that users now have more control over their privacy. As time goes on this will become more normalized. It's no reason to panic and it's not going away so best to start preparing and understanding early.

We've done our research and determined it comes down to one key factor and three important things for most standard advertisers. 

#1 Key Factor:

When someone visits your website you need to clearly tell them you have cookies and/or the Facebook pixel on your site, explain what you do with this information, and give them the option to opt or direct them to a site that blocks cookies. 

Important Things:

*These may or may not apply to your business*

1) If you're advertising, data partner categories are on the way out to start planning for life after. If they come back you can expect significantly smaller audience sizes.

2) You now need permission from Facebook to pixel a site not owned by you.

3) If you have a custom audience of email opts and you're targeting that audience, then if someone opts-out of your email list, you need to opt them out of your custom audience too.

4) You'll need to update (or Immediately add) your website terms and conditions and privacy policy.

5) Your privacy policy and terms of service must be easily understood.


Link to Facebook Pixel Opt Out (for your privacy policy): https://www.facebook.com/ads/preferences/

Link to Deleting Cookies (for users to opt-out)


Mores resources:




Interested in a Free GDPR Checklist for Your Business? 

Get My Personalized Checklist!