GDPR + social media

[the_quick]

Hi Guys

 

In recent event with Facebook moving data outside the EU, would you say they are GDPR ready/compliant? Not sure about twitter either.

 

Anyone has any idea?

[localzuk]

In what context? As a school, I can't see that its hugely relevant - they aren't going to be storing personal data for your staff/pupils, beyond what you might post for "marketing" purposes, in which case you would be getting specific permissions to post any of that (ie. Congrats to Little Johnny, accompanied by his smiling photo holding his trophy - if it goes in the newsletter or on Facebook, should have been checked for consent).

[enjay]

In recent event with Facebook moving data outside the EU, would you say they are GDPR ready/compliant?

 

As I understand it, Facebook have only moved non-EU citizens' accounts, our accounts are still in their Dublin datacentre.

 

In what context? As a school, I can't see that its hugely relevant - they aren't going to be storing personal data for your staff/pupils, beyond what you might post for "marketing" purposes, in which case you would be getting specific permissions to post any of that (ie. Congrats to Little Johnny, accompanied by his smiling photo holding his trophy - if it goes in the newsletter or on Facebook, should have been checked for consent).

 

True, but we still need to check the suitability of a company with whom we share data, even if we have the person's consent to share it.

 

I think we can be confident Facebook will be GDPR-compliant though, otherwise they'd face losing all the revenue from EU citizens and/or massive fines for non-compliance.