GDPR

GDPR (General Data Protection Regulation) is the EU regulation that strictly governs the collection, processing, and storage of personal data, and fully applies to any giveaway collecting entrants' emails or other information. Example: a giveaway organizer must inform entrants of the purpose of the data collection, obtain explicit consent for any marketing use, and let each entrant exercise their right of access or erasure. Not to be confused with simply adding a GDPR checkbox to a form: real compliance also requires a defined retention period, an identified data controller, and an accessible privacy policy.