Yes, this has put the much maligned Tapatalk in a bit of a quandary.

There has been some turmoil on GDPR also in the translation world. It affects EU-based companies, mostly.

On a translators' mailing list (yes, we still use those!!! On Yahoo! ! And I can't get my head around them...) someone suggested this page to understand what it entails in plain words:

Quote from https://blogs.constantcontact.com/gdpr-how-to-comply/

What is GDPR?

GDPR is short for the General Data Protection Regulation that goes into effect on May 25, 2018. It was passed by the European lawmakers to create a harmonized data privacy law across all the EU member states. Its purpose is to:

• support privacy as a fundamental human right;
• require companies that handle personal data to be accountable for managing that data appropriately; and
• give individuals rights over how their personal data is processed or otherwise used.

Quote from davidmichaels

A report from Chartered Institute of Marketing found that 57% people has serious mistrust in brands data [URL:https://www.cim.co.uk/newsroom…t-the-value-of-marketing/] collection and usage processes. All this led to this concrete legislation in the form of GDPR, which will add new rights and strengthen existing data protection laws.
GDPR will serve as the beacon in safeguarding information of individuals by introducing tighter controls within European Union (EU). The new law will come in to effect from May 25, 2018, binding all businesses operating within European Union (EU) to have visible privacy settings and permissions to use individual’s data.

Source: Online Privacy Tips [URL:https://www.onlineprivacytips.…viduals-privacy-security/]

It is my understanding that you are subject to the GDPR even if you are an abroad entity dealing with a resident of the European Union (EU citizens residing abroad are not covered). In the U.K., you have to register with the ICO and pay a registration fee (I think £35).
However, it is not clear where foreign entities should register.
For example, if I get work for a customers based in the EU, I.e. A document stating their personal data, I should be GDPR compliant but I still haven't figured out HOW.

In Italy there is no ICO and no registration fee, you should just get consent before exchanging personal data.

Sent from my iPhone using Tapatalk

Quite how they are going to police GDPR is another matter, although it does put the ball in the consumers' court much more than before.

What are all these GDPR emails filling up your inbox?

I have been reading posts about this GDPR thing all over the internet. I can draw up a document saying how long I will keep your data (likely, forever as I never throw away past jobs - I build on them!) and my digital storage security measures (my computer also serves for private purposes, I don't think I am using normal email exchange such as gmail, I do back up on Dropbox when working on a project).

Now, if just stating these things black on white is enough, I'll get my pen... But if these things are not enough, I do not have the technical knowledge 'to comply'. Should I simply get a secured connection? How? Should I switch email provider? How do I backup in the cloud when working on a project? I am not installing videocameras in my home in case somebody steal my backup hard disk, FYI!

It is not clear whether the burden is on the freelancer even when the work is through an agency (as it happens a lot with translations). In which case it will be the agency to inform the end client that the work will be subcontracted and hence their sensitive data disclosed to the subcontractor.

I did a translation about GDPR and it was like taking a peak in a crazy world.

Namely, you have to inform users/clients when they use your online website (cookies are major factor), you have to inform job applicants, you have to inform even your own employees.

The burden is on any entity that runs an online portal that is capable of holding the personal data of others. This forum and others for example holds members' email addresses, which is personal data.

The privacy policy which is usually shown at the foot of most pages therefore needs to show the name, address and telephone number of who runs the website and I'll be amending the Argentina Expats' privacy policy accordingly.

Quote from CruiseJunki

"The privacy policy ..... needs to show the name, address and telephone number of who runs the website ....... "

And you continued to say: " .... I'll be amending Argentina Expats' privacy policy accordingly."

I'll be amending the Privacy Policy statement yes, but only with details that I'll be comfortable with. As you point out, I certainly don't want every weirdo out there coming to my door either.