I am awaiting for more details on this from our internal and outside counsel as we too are reviewing impact as well. However I thought that if a EU citizen buys something even in person while in the US their data was still in scope if you knew it was a EU citizen. But I also believe that if it is one person or many that the full system needs to comply with GDPR if all on the same system.
James ------------------ *James J. Heck*Director of Technology Information Technology The Museum of Modern Art 11 West 53rd Street New York, NY 10019 Single number reach: +1 212 708 9554 Trying to schedule a meeting with me? Check my availability here <https://www.google.com/calendar/embed?src=james_h...@moma.org&mode=week&ctz=America/New_York&&title=James%20Heck%20%28MoMA%20Calendar%20-%20Eastern%20Time%20Zone%29> ! On Wed, Feb 7, 2018 at 2:23 PM, Nik Honeysett <nhoneys...@bpoc.org> wrote: > Also, GDPR wouldn’t apply if they purchased from your website while they > were in a hotel next door to you. > -nik > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > Nik Honeysett | Chief Executive Officer | BPOC | www.bpoc.org > > > M (805) 402-3326 P (619) 331-1974 E nhoneys...@bpoc.org <mailto: > nhoneys...@bpoc.org> > 1549 El Prado, Suite 8, San Diego, CA 92101 > > A non-profit technology collaboration connecting audiences to art, culture > & science. > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > > > > > > > > On Feb 7, 2018, at 11:20 AM, Nik Honeysett <nhoneys...@bpoc.org> wrote: > > > > My understanding is that GDPR is enforced based on the location of the > transactee at the time of the transaction, irrespective of where the server > is. So, if someone buys something from your website from Blighty, then GDPR > is in effect for you and their PII, but if that person physically buys from > your store, then GDPR does not apply. > > -nik > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > > > Nik Honeysett | Chief Executive Officer | BPOC | www.bpoc.org < > http://www.bpoc.org/> > > M (805) 402-3326 P (619) 331-1974 E nhoneys...@bpoc.org <mailto: > nhoneys...@bpoc.org> > > 1549 El Prado, Suite 8, San Diego, CA 92101 > > > > A non-profit technology collaboration connecting audiences to art, > culture & science. > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > > > > > > > > > > > > > > >> On Feb 7, 2018, at 11:15 AM, Sayre, Scott A <sayr...@cmog.org <mailto: > sayr...@cmog.org>> wrote: > >> > >> Nik- > >> Thanks for chiming in. We have a significant customer-base (ecommerce, > online/physical visitors and students) from the EU. Our read is that any > transaction between a US organization and a citizen of the EU falls under > the GDPR, even the transactions take place on a server here in the US. > >> -Scott > >> > >> On 2/7/18, 12:35 PM, "mcn-l on behalf of Nik Honeysett" < > mcn-l-boun...@mcn.edu <mailto:mcn-l-boun...@mcn.edu> on behalf of > nhoneys...@bpoc.org <mailto:nhoneys...@bpoc.org>> wrote: > >> > >> Scott, > >> > >> Do you have a significant percentage of online sales or data capture > in the EU? > >> -nik > >> > >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > >> > >> Nik Honeysett | Chief Executive Officer | BPOC | www.bpoc.org < > http://www.bpoc.org/> > >> > >> > >> M (805) 402-3326 P (619) 331-1974 E nhoneys...@bpoc.org <mailto: > nhoneys...@bpoc.org> <mailto:nhoneys...@bpoc.org <mailto: > nhoneys...@bpoc.org>> > >> 1549 El Prado, Suite 8, San Diego, CA 92101 > >> > >> A non-profit technology collaboration connecting audiences to art, > culture & science. > >> > >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > >> > >> > >> > >> > >>> On Feb 7, 2018, at 8:54 AM, Sayre , Scott A <sc...@sandboxstudios.org > <mailto:sc...@sandboxstudios.org>> wrote: > >>> > >>> Hi Folks- > >>> We are in the early stages of preparing a strategy to comply with the > May 28th deadline for complying the EU’s General Data Protection > Regulations (https://www.eugdpr.org/ <https://www.eugdpr.org/> < > https://www.eugdpr.org/ <https://www.eugdpr.org/>>). Hoping most of you > are familiar with these requirements and may have some thoughts on how you > will be responding to them. We are still working on defining requirements > vs. recommended practices and how and when we will be able to address > them. It appears this could affect our user data practices in e-commerce, > blog, e-commerce (ticketing and retail), as well as CRM. > >>> I’d love to hear how others have begun to work on meeting these > regulations and if you have found any external expertise to guide you > through the process. > >>> Many thanks in advance. > >>> -Scott > >>> > >>> > >>> > >>> _______________________________________________ > >>> You are currently subscribed to mcn-l, the listserv of the Museum > Computer Network (http://www.mcn.edu <http://www.mcn.edu/>) > >>> > >>> To post to this list, send messages to: mcn-l@mcn.edu <mailto: > mcn-l@mcn.edu> > >>> > >>> To unsubscribe or change mcn-l delivery options visit: > >>> http://mcn.edu/mailman/listinfo/mcn-l <http://mcn.edu/mailman/ > listinfo/mcn-l> > >>> > >>> The MCN-L archives can be found at: > >>> http://www.mail-archive.com/mcn-l@mcn.edu/ > >> > >> _______________________________________________ > >> You are currently subscribed to mcn-l, the listserv of the Museum > Computer Network (http://www.mcn.edu <http://www.mcn.edu/>) > >> > >> To post to this list, send messages to: mcn-l@mcn.edu <mailto: > mcn-l@mcn.edu> > >> > >> To unsubscribe or change mcn-l delivery options visit: > >> http://mcn.edu/mailman/listinfo/mcn-l <http://mcn.edu/mailman/ > listinfo/mcn-l> > >> > >> The MCN-L archives can be found at: > >> http://www.mail-archive.com/mcn-l@mcn.edu/ < > http://www.mail-archive.com/mcn-l@mcn.edu/> > >> > >> > >> _______________________________________________ > >> You are currently subscribed to mcn-l, the listserv of the Museum > Computer Network (http://www.mcn.edu <http://www.mcn.edu/>) > >> > >> To post to this list, send messages to: mcn-l@mcn.edu <mailto: > mcn-l@mcn.edu> > >> > >> To unsubscribe or change mcn-l delivery options visit: > >> http://mcn.edu/mailman/listinfo/mcn-l <http://mcn.edu/mailman/ > listinfo/mcn-l> > >> > >> The MCN-L archives can be found at: > >> http://www.mail-archive.com/mcn-l@mcn.edu/ < > http://www.mail-archive.com/mcn-l@mcn.edu/> > > _______________________________________________ > You are currently subscribed to mcn-l, the listserv of the Museum Computer > Network (http://www.mcn.edu) > > To post to this list, send messages to: mcn-l@mcn.edu > > To unsubscribe or change mcn-l delivery options visit: > http://mcn.edu/mailman/listinfo/mcn-l > > The MCN-L archives can be found at: > http://www.mail-archive.com/mcn-l@mcn.edu/ > _______________________________________________ You are currently subscribed to mcn-l, the listserv of the Museum Computer Network (http://www.mcn.edu) To post to this list, send messages to: mcn-l@mcn.edu To unsubscribe or change mcn-l delivery options visit: http://mcn.edu/mailman/listinfo/mcn-l The MCN-L archives can be found at: http://www.mail-archive.com/mcn-l@mcn.edu/
