Forum Discussion
Office 365 email how is this effected by GDPR
Follow Cian's comment and use logic sense in my opinion you should only delete a contact if he or she requests this.
Thank you both for your input, the law says we should not add a contact without evidence that a contact would be happy to be added to your contacts. Now as most want to buy or sell something from you this shouldn't be difficult. But we do need to show compliance and I am not sure how we can monitor hundreds of email users.
It's an interesting topic, I'm not expert in GDPR, you may need to seek expert guidance and the scope is probably far wider, what about a CRM system for example if you have one or is that's what Outlook is being used for.
This has to be policy driven I imagine, much of this you may have already
What personal data is being captured
Clearly defining the use of any personal data being held and how it is to be used
What consent is being given or asked for
How long is this data being kept for, if the customer doesn't order anything for a year, is it reasonable to continue to hold personal data
How is the data being controlled or protected
How regularly is this data checked for compliance and accuracy
If customers didn't opt-in for their data to be held specifically for how it's being used, then retrospectively this may need to be obtained and for new customers may have to be new way of doing this. There was one https://www.campaignlive.co.uk/article/gdpr-will-render-75-uk-marketing-data-obsolete/1441738 75% of marketing data UK companies hold would fail GDPR compliance!
Anyway, I hope you make some headway in this. Expect a lot more guidance from Microsoft as well such as with this https://products.office.com/en-us/business/modern-workplace/gpdr-impact.
