GDPR/ICO compliance

[MrJuice]

May I ask some help on GDPR please

We are launching a landing page soon for a new business and will be collecting email addresses only for now.

There will be double opt in. Customer puts in email on our landing page and then they confirm they want to be on the mailing list through a link sent to their email

What do we need to do to be GDPR/ICO compliant

Any useful links would be great

Thank you

[Ed Moses]

I would start by working through this page at the ICO - https://ico.org.uk/for-organisations/sme-web-hub/

You can then demonstrate that you have considered it as part of "privacy by design" - it is also free from the regulator so no external cost and you know it is correct at the time of use.

[grumbas]

Pay the ICO £35/year to be added to the register. Otherwise it sounds like you've got it covered.

[Eric Mc]

£40 now

[Mr Whippy]

Do you need the ICO thing to hold client email addresses within your email client and their phone number etc in your phone?

All clients are businesses with their details just on their websites.

No mailing lists or ‘database’ type things.

Only invoices info is stored locally and on servers/backup drives, all encrypted with bitlocker.

[2HFL]

Slightly Off Topic but rather than starting a new thread…

I was interested to hear whether anyone has successfully had action taken against a business who are sending unsolicited email and whose ‘unsubscribe’ option is clearly not working.

I have reported said company multiple times to the ICO and, as yet, nothing has happened and based on online reviews of this company, I am not alone and this has been happening for many months.

Do the ICO actually investigate breaches of GDPR and take appropriate action against spamming s or am I just wasting my time?!