Valens Point believes most small tech consulting firms have a minimal risk of running afoul of the letter of the law if you have always acted responsibly with user and customer information. That doesn’t mean you should not review your marketing assets and business practices but does suggest there is a certain amount of Y2K baked into the constant chatter regarding GDPR.

Let’s be real about this.  No one is showing up next week to shut your business down or seize your assets because you didn’t meet the implementation deadline for posting your updated privacy policy.   (We did – please review)

Here are our recommendations:

• Update your privacy policy to reflect all the requirements of the GDPR.
• Review business practices related to any use of data to ensure you comply.
• Use your updated privacy policy in all impacted channels.
• Be conscious of how you collect, store, and manage contact and customer information.

If you need to update your policies, there are online services which will generate the required language – you can take this to your lawyers for specific modifications if required. (Remember one person’s discomfort is another’s opportunity).