{"id":2547,"date":"2018-03-20T09:23:38","date_gmt":"2018-03-20T09:23:38","guid":{"rendered":"https:\/\/brightpearl20.wpengine.com\/gdpr-what-it-is-what-brightpearl-is-doing-in-response-to-it\/"},"modified":"2025-03-19T13:42:40","modified_gmt":"2025-03-19T13:42:40","slug":"gdpr-and-brightpearl","status":"publish","type":"post","link":"https:\/\/www.brightpearl.com\/blog\/gdpr-and-brightpearl","title":{"rendered":"GDPR: What it is & what Brightpearl is doing in response to it"},"content":{"rendered":"

 <\/p>\n

In recent months, there\u2019s been a lot of discussion around GDPR. The various articles and videos you will have seen have been very much centered on what businesses are required to change in order to be GDPR compliant; you may even have seen <\/span>our own take on what retailers need to know about GDPR<\/span><\/a>.<\/span><\/p>\n

<\/p>\n

As a service provider, it\u2019s important that we help our customers in their preparations for GDPR, so in this article, we\u2019re tackling an important question that our own customers have had for us – <\/span>what is Brightpearl doing in response to GDPR?<\/strong><\/span>\u00a0<\/span><\/p>\n

What is GDPR?<\/strong><\/h3>\n

But first, let\u2019s ensure we\u2019re all on the same page as to what GDPR actually is.<\/span><\/p>\n

The General Data Protection Regulation (GDPR) is a new European privacy regulation which replaces the current<\/span> EU Data Protection Directive<\/span><\/a>. The GDPR aims to strengthen the security and protection of personal data in the EU and standardizes EU data protection law. It applies to any organization operating in the EU or processing the personal data of EU residents.<\/span><\/p>\n

One of the key aspects of the GDPR is that it creates consistency across the EU for how personal data can be processed, used, and exchanged securely. Organizations need to demonstrate the security of the data they are processing and their compliance with GDPR on a continual basis, by implementing and regularly reviewing robust technical and organizational measures, as well as compliance policies.<\/span><\/p>\n

What is Brightpearl doing in response to GDPR?<\/strong><\/h3>\n

We\u2019re committed to being GDPR compliant before the effective date of May 25, 2018. This means we\u2019ll be making changes to both the SaaS product we provide and to our internal business tools and processes.<\/span>\u00a0<\/span><\/p>\n

1. Product changes<\/strong><\/h4>\n

We\u2019ve carried out a thorough analysis of our software, as we process data on behalf of our customers. We know that you\u2019re all carrying out similar analyses of your tools and systems so we\u2019re making changes to Brightpearl to support you through your own compliance activities in our role as data processor.<\/span><\/p>\n

A key change under GDPR\u2019s <\/span>\u2018Right to access\u2019<\/span><\/a> is that data controllers are required to provide a copy of a data subject\u2019s personal data on request. Brightpearl will be updated to allow merchants to very easily download a customer\u2019s data in just a few clicks.<\/span><\/p>\n

Another significant change is the <\/span>\u2018Right to be forgotten\u2019<\/span><\/a>, also known as data erasure. This <\/span>entitles the data subject (i.e. consumer) to have the data controller erase his or her personal data, cease further dissemination of the data, and potentially have third parties halt processing of the data as well. Brightpearl allows you to forget a contact<\/a>, again with just a few clicks.<\/span><\/p>\n

We\u2019ve also updated\u00a0<\/span>our MailChimp integration<\/span><\/a> to make use of their double opt-in process<\/a>. You can learn more about the Brightpearl product within our help documentation<\/a>.<\/span><\/p>\n

2. Business changes<\/strong><\/h4>\n

We\u2019ve also conducted an analysis of the tools and systems we use to do business, and are making further changes to ensure we\u2019re compliant in our role as data controller, according to <\/span>the principles contained in Article 5:<\/a><\/span><\/p>\n