GDPR Compliant Websites

[ITGURU]

It was brought to my attention today that staff have a concern over the use of Survey Monkey as it is american, and been asked about looking into alternatives. Is it correct that we would no longer be able to use it when GDPR comes into effect?

If it correct that any cloud based data must be stored on EU servers even if it doesnt hold personal data - being a questionnaire its anonymous? Some services have servers hosted in multiple location, so how does this comply - if it is at least on 1 EU Server?

Whats are the current rules.

[smarties11]

GDPR doesn't state that you can't store data outside the EU. But you do have to ensure the security of your personal and sensitive data wherever it is stored. I.e. you have to be confident that the measures in place to secure the data meet our data protection standards.

 

Survey responses shouldn't be classed as sensitive data as long as they are anonymous, but you may be storing email addresses when inviting participants?

 

There are plenty of alternatives to Survey Monkey if you are concerned - Microsoft Forms is free and part of O365, or we use LimeSurvey which is open source and hosted on our own servers.

[blu4]

If you're worried, try Microsoft Forms if you have O365 for Education. Data stored in Ireland.

[Meldrew]

Taken from SurveyMonkey's website:

To facilitate our customers' compliance with European personal data export requirements we have certified under the EU-US Privacy Shield Program.