147: GDPR for Influencers with Danielle Liss

In this episode we talk to Danielle Liss about the important but sometimes confusing GDPR regulations. Hey there everybody. This is Bjork Ostrom and you are listening to the Food Blogger Pro podcast. And this podcast is brought to you by WP Tasty. What is WP Tasty? Well, WP Tasty stands for WordPress and Wordpressed Tasty. So it is a tasty place for you to get your WordPress plugins. We started with a recipe plugin called Tasty Recipes and we have recently launched another plugin called Tastypins which allows you to optimize for Pinterest as well as SEO. And as you know from listening to this podcast, we are at the point now where Pinterest says it's really important to create super qualified and optimized descriptions for Pinterest. And what does that mean? Well, it means a natural language description of what the post is about that is enticing and includes hashtags within the content as well. Because Pinterest is saying it's important to start including hashtags and optimize for a keyword as well. So if the recipe is a chocolate chip cookies recipe, you want to make sure that you're keywording that in the way that it will show up on Pinterest. But the hard thing is with an image there's also the alt text, which shouldn't be optimized for Pinterest. It should be optimized for describing what the actual image is about, not the post that you are posting about or in the case of a food blog, the recipe. And so it's hard because previously you had to, you just had the alt text or maybe the alt text and the title text for an image that you could use. But with Tasty Pins, it allows you to separate those out and have something you can use just for Pinterest text as well as the alt text just to describe the image. We talk more about that@wptasty.com tasty pins a recent update also allows you to include multiple long images. So if you have a long image that you want people to see when they click pin on your post, but you don't want those to show up in the post, you can use Tasty Pins to hide those images on your post. And Tasty Recipes is for food bloggers that want to optimize their recipes for search engines and for Pinterest as well. So you can check that out@wptasty.com tasty recipes and each week we do a Tasty Tip. What is the Tasty Tip. Well, the Tasty tip is a piece of advice for you as a content creator, as a blogger, as a business owner for you to just do a little level up. It's never anything that's too complicated or overwhelming, but it's just an opportunity for you to implement one small thing to help you do what you do a little bit better. And today we're going to be talking a lot about data and we're going to be talking about rules and regulations and it might sound kind of boring, but it's actually really important and pretty interesting when you get into it. And one of the tools that I talk about on this podcast is the tool or the site on Google where the area on Google where you can see all of the different information that they have on you and that is the Google Dashboard. So this is the dashboard of personal information and privacy related content on Google. And one of the areas that is kind of cool is the security checkup on Google. And you can get there by going to myaccount.google.com security checkup and we'll link to that in the show notes and what that will do is it will show you the important security related things for your account and you'll either have a green check mark or you'll have notifications or warnings about things that you need to implement and update. There'd be security related warnings like for instance, maybe you don't have two step verification turned on where when you try and log in from an unrecognized device it sends you a message that a text message with a six digit code that you enter in. Really important thing to have implemented on sites that allow you to do that. And this security checkup will walk you through the process of making sure that all of the different important security stuff for your Google account, if you have one, is up and running. So again we'll link to that in the show notes if you want to check that out. It'd be a really important thing to do especially for us people that are listening to this podcast. Everything that we do is based online. It is all online content that we're doing. And our data is really important not only to understand how it's used, which we're going to talk about in this podcast, but also to make sure that it's secure. So if you have a Google account, make sure to use that security checkup to make sure that you are taken care of. All right, today we are talking with Danielle Lish. She's a food blogger pro expert, which means that she is involved with multiple events that we do, but she's also involved in the community forums. And one of the great things about the Food Blogger Pro experts is that we also get to have them on the podcast occasionally to talk about important, relevant information and current events like gdpr. And if you're not familiar with what that is, you'll get very familiar with it. As we jump into this interview with Danielle, she's going to talk about what it is, why it's important, what you need to understand with it. So it's going to be a great interview. Excited to talk to Danielle. Let's go ahead and jump in. Danielle, welcome to the podcast.

Thank you so much. I'm excited to be here.

Yeah. Excited to have you back. So a little bit of background for people that have not listened to previous episodes or who are not Food Blogger Pro members. Danielle is a Food Blogger Pro expert, and she's an expert in kind of a couple different categories. So some of the things we're gonna be talking about today, but also this idea of influencer marketing and understanding that world, which kind of falls into the category of negotiation and things like that. So can you tell a little bit of your background, Danielle, and how you have an expertise in this real, specific niche that's so helpful for people that are listening to this podcast.

Thank you so much. Yes, of course. I've been blogging for a really long time, and by bim blogging, I mean, I do it, like, maybe once a year now.

Okay.

But I started in 2004, and it was always just a hobby thing for me. I've been a lawyer. I started in law school, actually. So I. I had been blogging longer than practicing. And so when I was working in litigation, I didn't love it. That's a nice way to put it. And I had this other second world of blogging that I really loved. It ended up that I started speaking at conferences, and I left private practice to go work as chief marketing officer and general counsel for an influencer network. So while I was there, I really got to know the influencer marketing space. And this was 2011. 2012 is when I left to go work there full time. So influencer marketing was in its infancy at that point. At that stage, all brands cared about was, we want to be mentioned on 50 blogs. Well, obviously, the market has changed quite a bit, and people are really talking more about engagement rates and things like that. So I've had a chance to kind of grow up as the industry is growing up on both the legal side and on the marketing side. So I've got. We also have a law firm called Hashtag Legal. We have a lot of clients who are networks, bloggers, influencers, brands, ad managing networks. We've got this really diverse group that we work with. So we're really able to see it from all sides and help people grow and scale their influencer business just with some of the easier back end tips.

Yeah, we're going to be talking about something really specific within that niche, which is gdpr, this kind of potentially seemingly scary European Union. The set of rules and regulations that are going into play. But I wanted to take some time to talk about that because I think it's important to know that it's not just, you know, general law. Obviously people have a general law practice and wouldn't be able to serve multiple different industries and people. But you have this real specific niche. Love the name Legal and idea being, you know, it's kind of this influencer world. It's people that are getting paid by using hashtags. Right. So people that are listening to this podcast have a blog, they have social media. But now there's all of these things that wrap around that that are industry related regulations and we need to be informed of these things in order to operate at a high level, which everybody wants to do. And one of those things is this gdpr. And for those that aren't familiar, can you explain what this is and why we need to be aware of this?

Absolutely. I think that most people who are US based probably haven't heard the letters GDPR until I think it was late February, early March, because that was when a date was attached to when you need to be compliant. So GDPR stands for General Data Protection Regulation. And you will always hear people referring to it as GDPR. It's a European Union law that's taking effect on May 25th of this year. And the goal of the law is to give greater protection to somebody's personal information. So it's going to place stricter requirements onto companies who possess personal data of those who are EU residents. And this is where it gets interesting for US based businesses. Because if you are a US based business who is possessing information about an EU resident, then you need to be compliant because it can be for anyone who has the data from someone who is in the eu.

Got it. And so one of the things that you said was possessing information about somebody that would be in the European Union. So somebody in Europe. We'll just say that to simplify. So what does it mean to possess data? What does it mean to have somebody's data? Because I think a lot of bloggers would think I don't actually have any data, I just have my blog and people come there. So what are some ways that people would be collecting data? Maybe in a way that they don't even know.

I think there are quite a few areas for bloggers that you may not even think about. So when we talk about the information that they are concerned about with GDPR is personal information or sensitive information. So there's two categories. Personal information can be something like a person's name. It's that simple. A name, an IP address, their email address, things along those lines. So really a lot of things that you're doing as a blogger, something as simple as Google Analytics, if it's capturing an IP address can make you subject to gdpr. If you've got people from the EU who are visiting or when they talk about sensitive information, that is things like somebody's race or ethnic background, whether or not what their political opinions are, things along those lines. Most bloggers, unless you're doing like a reader survey of some sort, I don't know that most people are collecting that type of information. Heck, they even include genetic information there. I'm guessing most influencers aren't collecting something like that unless they're talking about like, you know, you're 20 and me results. But for the most part, think about the things where you collect information. Comments. That's both. Name email address. Sometimes it'll register an IP address. You may have a contact form where people can specifically voluntarily submit information to you. Or if you're using affiliate marketing, there's cookies. So cookies also come into play because it can be tracking behavior. And they look at tracking someone's behavior, particularly like adding a cookie to the browser, as something that you need to get consent for. So really this policy is all about making sure that if I was an EU resident, I'm just going to use myself as an example. If it was me and I'm going to your website and you are capturing some of my personal data, you need to get consent from me in order to do that. That's really the key, is making this about informed consent.

So one of the things that you'd said and just for clarity is this IP address. So I think that's a really important thing because a lot of Internet tool, whether that be Google Analytics or oftentimes email provider, will collect the IP address. And for those that aren't familiar with what an IP address is, it's this essentially it's like an identifier for your. It's like your computer's address, home address, and that changes based on where you're connected to the Internet. So if I'm connected here at home, my IP address is going to be different than if I'm connected at a coffee shop. But an IP address can be used to track people and it can be used to track people really specifically to a certain address or a certain location. And so essentially what you're saying is any time that any of this information is collected, whether that be your name, your email address and IP address, these regulations around GDPR are saying we want to give more control to the consumer versus essentially what's happening right now, which is all of these companies, blogs included, our sites included, that we run, are collecting this information without ever really getting consent from the user. So it's a really big win for the consumer in that it gives them power to have more control over their personal data, which as we've seen with Facebook recently, this is a really important thing. But then there's this bummer for business owners because now they have to deal with this. And a follow up question that I have is, let's say you're a blogger or a business owner and you don't operate within the eu, Will this still apply to you? Do you still need to take this into consideration? Or you can. Would you kind of shrug and say, well, they're not going to do anything, so I don't need to worry about it.

The way that I look at this, I'm going to compare this to the FTC and say, remember when the FTC revised their requirements and everyone freaked out about disclosure and then everybody said, you know what, I still don't have to comply because they're not prosecuting bloggers. And then they started sending notices to bloggers. No one wants to be first because you can be fined. And I think that that is something it's important to remember. Do you really want to take the chance? You can weigh the risk and make determinations, but the penalties for non compliance, they vary depending on the severity of what you've done. The maximum fine can be 4% of your annual global turnover or 20 million euros. So that's, it's a pretty steep fine. Do I think that most bloggers are going to fall into that sort of really high fine, data abuse category? Probably not, but complying isn't, it's not gonna be that difficult. So I don't want people to just kind of shut down and say, I'm not gonna do it, you know, when you're covering your ears when you're a little kid and say, no, I don't think that it has to be that bad. And quite honestly, I will be extremely surprised if we don't see states here adopting similar measures because California requires privacy policies. So I would not be surprised to see California add onto that and put on some type of data protection layer.

Yeah, it's interesting to hear in some of the Facebook hearings when Mark Zuckerberg, the CEO of Facebook, was testifying before multiple different before Congress and some other. He testified in some other places as well. But he would often, or I think he had said, and don't quote me on this, but that Facebook, with gdpr, they will be applying that not just in Europe, but across the board. And so that kind of lines up with what you're saying, where I would assume for some people that are implementing this, they might just blanket implement that, especially some of these bigger companies related to that. Would it be possible or would it be recommended for, let's say, a blog that is maybe a solopreneur or somebody that has maybe a couple team members helping? So a small business, they maybe they don't have a lot of resources and they're concerned about implementing a bunch of these things and the impact it would have on maybe traffic or they'd be worried about people not coming to their site if they implemented some of these additional checkboxes and things like that. Would it make sense just to apply this, the updates and to adhere to some of the regulations just in Europe by, you know, setting certain settings within a plugin to say, hey, only apply this to anybody that's coming from Europe or right now, would you say you should just blanket apply this to every certain or every person that comes to your site?

If you have the ability through a plugin to say, show this to EU members or residents, then yes, I think that you can do that. I think it gets a little bit tricky because anyone who is in the EU is meant to be protected by gdpr. So I could be living there for six months for a work project and then I'm considered subject to that. So you just want to be careful to make sure that you are capturing everybody that needs to be captured. But yes, I think that if you have that ability, you can do it, because I know there were, if you're familiar with it, the EU also passed maybe a year or two ago the EU Cookie law, which I think was the precursor to gdpr. And it was essentially saying if you use cookies on your site, people need to give consent before you do that. I've been to many sites that are owned by EU companies that will ask me to opt in for cookies. I click a box and I go on my merry way. And you can access the content, so it doesn't typically have to be a big deal. But check, because I think that what you said is really important. When you're a small business, this kind of thing can be really hard and overwhelming. So take a look at the resources that are available to you. And the first thing that I recommend is do an audit of what it is that you're doing that makes a difference. If the only thing that you're. If you don't have an email list that you have people opting into, if the main things that you're looking at are comments and a contact form, probably you can easily take care of those by doing just a checkbox. You may not need overlays. The overlays are really going to be if you are capturing information about people like their IP address that is not anonymous. So I believe that Google has different settings where you can anonymize the data there. And if you're doing that, then you don't have to disclose for Google Analytics. So it really comes down to what else are you using cookies for that might capture the data. Are you doing affiliate marketing? Do you have the Facebook Pixel installed? So take a look at what you're doing and who you're sharing information with, and then you can kind of back into it and say, okay, this is what I need based on the features that my website has got it.

So let's do this. Let's take it from a high level and then kind of drill down piece by piece to look at it. So at the highest level possible. You talked about this a little bit before, but just in a little snippet. What is the European Union trying to do with implementing gdpr?

So with implementing gdpr, they want to give greater protection to a person's information by placing stricter requirements and making sure that the people whose information is being collected have greater control over how it's collected, stored and used. So one of the things that they have, for example, is the right to be forgotten. So someone should be able to email you and say, I don't want you to keep my secret. And you may have to retain some records for legal reasons, but they want people to have the ability to say, I don't want you to have my file. Or people can have the right to access it so they can Say, what do you have about me? Because I think that what you're saying, particularly about Facebook is so important because I think that we're in this industry, right. So we know how much data is being collected on a regular basis about us. But I think that people who aren't necessarily in the space, they have no clue. Like, I still get questions from my mom. Like, I went to this website and I looked at a thing and now Facebook is talking about it.

Yeah. Following me.

Are they following me?

And I'm like, are they listening to me through my phone?

Because they're a person.

Yeah.

And they can do that kind of thing. But, you know, I think that people still have those questions and they may not be as savvy. So this is really to make sure that people are aware. I honestly, I know that the Facebook pixel is on half of the websites that I go to have at. You know, just be cautious with what you're giving permissions for.

Yeah, it's interesting. Google does this in a way where you can go to your dashboard, your Google dashboard, which is myaccount.google.com dashboard, if you have a Google, any type of Google product. And then there's all of these ways you can see all of the different data that they have. So you can go to an area that's called my activity and it shows you all of the information. What's interesting is like for me, it's, you know, I scroll through this and it shows me my search history. And so I have a bunch of information on, you know, GDPR here. So they know that I've been looking at gdpr. But then it would also have any where I traveled because it's hooked into Google Maps. And you start to realize, you know, okay, it knows all the videos I've watched. And so there is a lot of this data that people have. But it makes sense for these big companies because the Googles, the Twitters, the Facebooks, we understand those as data companies. But for a blogger, what would be the categories that we need to be aware of that could potentially be collecting data? You had mentioned a few of those. Affiliate marketing, there's a pixel. And for those that aren't familiar, a pixel is a. It's literally a tiny little photo. It's a one by one pixel that technically shows up on your site, but nobody sees it, but they have that there to collect data. So Facebook has one of those. And, you know, Google tracks information for Google Analytics. What are some other pillars that people need to be aware of that could be collecting Personal data. So we've looked at the reason why now we're going to the next level and saying where does that exist for bloggers?

Sure. Google Analytics, I think is like you said, I think that's probably going to be the most common one. I think that Facebook pixel, any type of tracking pixel that you may have and the one area that may not come to mind for people that I definitely want to make sure you're thinking of as a blogger is sponsored content. Because a lot of companies, if you were doing sponsored content, if they say you need to embed this link so that we can track your results, you need to find out what's being tracked. Because if an IP address is potentially being captured, then you would want to make sure that you were disclosing there. I think the other big ones to think about are the places that you really think of as voluntary, like your email opt ins. People are obviously signing up because they want to, they're giving you their email address and people are probably thinking, well, if they just click on submit, doesn't that mean they know what's happening? Not necessarily. You know, I'm always going to pick on my poor mom in this, but she has no clue what's happening when she puts her email address in. So make sure you're getting consent. I think comments and contact forms are probably two easy ones to cover. Make sure you're being clear. I'm collecting this data for purposes of communication. If you don't want to submit it, make sure you're clicking here to say you accept the fact that your information may be stored and for comments it'll be displayed publicly. Right. So people need to know that what they're entering, not their email, but their name or if they put a URL in that could potentially be listed on somebody's website.

So yeah, go ahead.

I would say also depending upon where you are in your business as a blogger, if you have any products that are for sale, that's also going to be a big one that you want to make sure people understand what you're collecting and that you're probably in most cases also using a payment processor like stripe or PayPal or something along those lines. So not only are you keeping the information, you're also going to have third party service providers that are involved in the process as well.

Got it. So one of the questions that I have, and I would assume some other people have, is a lot of these things involve a third party. So it's Google Analytics, it's Facebook, it's maybe an email Provider that's doing the opt in. Do I need to be the one or do we need to be the one that is making these updates and changes or will we be able to lean on some of these services to make sure that they are adhering to these rules?

From what we are seeing, we are going to be able to lean on a lot of the bigger services which I think is fantastic. Our businesses use ConvertKit so we have, we're getting the emails from them and they are sending out things saying we're going to have GDPR tools available which I think is fantastic that they're offering this level of support and people would be able. I, I have not gone that deep into it yet but I believe that you'll be able to select, you know, I need to get a consent box here. I need to do that. So definitely look at your third party service providers. You still have the obligation that would be on you because you are the point where the data is being collected. So make sure that you are still getting that consent. But I think that the tools that we use, they're going to make it easy for people to give that consent.

Got it. And that's something that you've mentioned a couple different times and I feel like that's the, that's something we can drill down into next. So we talked about high level why it's happening then what the different buckets are that it impacts. Google Analytics, Facebook pixels, email, opt ins, comments, comment forms, products where you'd be collecting information. We had mentioned cookies and the idea of tracking along the way. And then we have said a lot of these services will hopefully provide some way for you. Either they'll aid you in doing it or maybe they'll implement something that will take care of it. But for the areas where that wouldn't happen. How do we know as influencers, content creators, bloggers, how do we know that we're covering ourselves to make sure that we're checking off all of the things that we need to and this would maybe be a good place to mention the checklist that you have and where people could download that.

We have put together a checklist that you can find at businesses. That's businesswithese at the end of it.com GDPR and our goal with the checklist was to make sure that people can kind of look through all of their main areas and say okay, this I need to do here, this I need to do here. What I recommend, very first step to make sure you're compliant, do that audit, look at what you have on your site and see what information is being collected. And honestly, this might be a good time for you to do some plugin cleanup. If you realize I haven't used this thing in a million years, but it's still sitting there, potentially collecting something, it's a good time to delete it. Maybe it improves your site speed at the same time. Fantastic, right? Bonuses. Go through your site, see what is there and then look at it sort of step by step. At what point is your audience member seeing what you are doing? Because I think that there's. For me there's two different classes here. I think one of these, one of the biggest pieces is voluntarily submitted information. If it is not happening, the second somebody comes to your site, you can ask them for consent at the time you're collecting that information. So you can do it on your comment form, you can do it on your, on your contact form, whatever it is that you're doing. Or if, for example, like Food Blogger Pro is a really great example a membership site, you definitely want to make sure that you are getting that permission so they know you're storing this information. Do you use a third party host for that? Like are you using Wishlist? And Wishlist might have access to personal information. Just be clear about what they are giving authorization for. The second piece is look at who is collecting information via cookies. So this is going to be things that are tracking your affiliate programs, anything and look at your affiliate programs, find out from the ones that you are using what it is that they capture and then just put on your consent. I recommend find a plugin that you like. One that we have looked at that seems to have a lot of really great features is the GDPR plugin. And you can set it in a bunch of different ways so that it can add a simple overlay that says we use cookies for the following and you get the approval. Then they can go into the site so it doesn't have to be super complicated.

Got it. So the plugin to mention that we will link to that in the show notes, you can also get there by going to WordPress.org plugins GDPR and to continue our drill down to get into more specifics. One of the things that you said that I think is a really good thing for people to understand is the two types of information that people would be submitting. One would be with their knowledge and the other would be without their knowledge. And if they are submitting information without their knowledge, like you said cookies or tracking or anything like that, there has to be an opt in before that happens. So if somebody comes to your site and you're collecting IP information, you'd have to say accept. And then the other would be, somebody knows that it's gonna happen. And in that case they would have to check a box to say, okay, this is all right. And solution, one of the solutions is using something like this plugin that allows you to build in this information and add this. So with this plugin specifically, do you know, is this able to track location of where people are and only show it to certain people, or is this kind of generically showing it across the board?

That I have not had an opportunity to dive that far into it yet.

Got it. And one of the other things you had mentioned was that it's possible to anonymize data. So let's say in Google Analytics, instead of collecting data, EU related data that has personalized information, the thing you had said personal or sensitive, instead of collecting that, you could just anonymize it. So the other option would be instead of getting consent to collect, it's just not collecting the data in the first place. Is that right? Yes, got it. And I know some people will be thinking this because let's say they're early on and they're just getting started with their site and maybe 90% of their traffic is, let's say, from US and Canada. Would, would it ever make sense to say, I'm just too scared of doing this, I'm just going to block all EU traffic? Have you ever heard people talk about that or think about that, or do you think that's too drastic?

I have heard people talking about it this week, especially this week, and I think that that is a decision that you can make for your business. Because if it's not something that makes sense for you and you don't want that traffic and you have the ability to block that from viewing your site because you don't want to do this, then absolutely, if you have the technological ability to do that. I think that for some people it can depend on what you see in an audit. If you found that you had like half your traffic coming from the eu, do you really want to turn that off? Maybe not. But if you find that it's like 0.5% of your traffic, maybe it does make sense for you. So I think that I really do recommend that you make an audit as that first step so that you have a good idea of what this means for you and your business.

Yeah, got it. And the audit again is going through. Looking at that checklist that you talked about and saying, okay, where are these different areas that I'm using? Any of these different things, Contact forms, comments, some of the other things you had mentioned, affiliate marketing and then saying, what then do I do with that, knowing that I'm using it?

Exactly. Just have a good idea of what it is that you collect and then you can make an informed decision from there. Because for some people, if you're making $2 a year off of an Amazon link in, you know, post somewhere, do you care that much? Like is that $2 worth making it compliant or would you rather just take that off so that you don't have to deal with any of the cookies that they would be using? So I think for some people it's going to be figure out what you have and then make a business decision from there about what makes the most sense for you moving forward.

Got it. And our take with it in terms of the different sites that we have and businesses, if people are interested, is to say, okay, what are, what's the low hanging fruit? And how can we immediately start moving on that knowing that it might not be possible for us to get to 100% right off the bat, but we want to be chipping away at this and starting with the things that make the most sense for us. Those would be the first place we'd look at and we haven't done this yet, but Google Analytics and saying okay, how can we address the issue of collecting data and information with Google Analytics? They just recently sent out an email which we can create a PDF of that if people want to see it, if they missed it and link to that in the show notes as well about how you can address GDPR within Google Analytics. And some of the other things for us would be email. That would be another low hanging fruit that we'd be able to implement some of those checkboxes like you said, to let people know the information that will be collected when they are opting in to a list that they are subscribing to. The other thing that we have realized that that we'll need to change is with one of the tools we use, it's called Intercom. It's a chat exchange that we have with people. A chat, it's not a chat bot, but it's a chat widget or app is people will oftentimes enter their email address after chatting back and forth. And that's technically not an opt in to then get email. So we need to treat those email addresses differently than we would if somebody were to be manually opting in and saying, yeah, I want to, you know, subscribe to this or be a part of this email list. So that was a conversation we were just having today. One of the questions that I have, this is kind of going back a little bit, but is it possible for a country or for. Would it be possible for the EU to sue a blogger? I mean, is that something that exists or vice versa? Would it be possible for the FTC in the US to sue somebody in Europe?

I think that they can ask for compliance. So yes, US companies do need to be compliant if they are collecting data from an EU resident. And I think that that's really the key is, are they collecting the data from somebody who's there? Because there can be an argument that you're availing yourself of that jurisdiction by going to get data from the people who are there. I don't know that we're going to see a lot of it. The piece of it that concerns me the most for bloggers is when you look at something like the ftc, they use everybody in the chain of an advertisement. And what that means is you could be hired by really big company, really big company tells you very specifically in your contract you can't disclose, and they then hire you even though really big company told you that you're still liable for it. My biggest concern in terms of bloggers is what if under gdpr they decide to use Facebook as a target? They say anybody who wasn't disclosing the Facebook pixel is going to be investigated. That would be my biggest concern for bloggers starting out. I don't think that bloggers are the focus of this to start. I don't think that this is. I think that most bloggers, think about it, 4% of your revenue. I think that we see a lot of pro bloggers who are making, you know, 100,000. So, you know, I don't know how much they're really going to jump through hoops to try to get a $4,000 fine. I think that they are going to be looking at the much bigger data handlers, like a Facebook or something along those lines. I think it's always smart to be compliant, particularly if there is the potential that this would be adopted by other countries. Better to get on it now than to not. Than to ignore it. But my view on it is, do you really want to be. Do you want that risk? And for some people, they don't care at all. But for me, I will always say, do the compliance get on there, because quite honestly, I don't. I think that right now, particularly given everything that has happened with Facebook, people are scared of data collection. I don't think that is transparent to people who are not in the industry who don't, you know, just know what's going on. So I think that it's. It's something that, to me, I trust it more when people are honest about what they're doing and what they're collecting. So I think that it can be a good thing between you and your audience. Tell them what they're signing up for. You don't want tricks because then you're not getting the right people anyway. So as long as you're honest and straightforward about it, I think that that adds a layer of trust between you and the people that you are that are your viewers.

Yeah, it's interesting. It's. It's has to be done in a way that really clearly communicates, which is. That's blogging, right? It's communicating clearly. Um, I just had a situation recently where it was one of my dad's friends. I connected with him. I had built a pottery site for my dad and he went and looked at the privacy policy and he's like. He followed up with me and he's like, isn't this overkill for the. And it was in response to kind of some of the Facebook stuff that had been happening. He's like, aren't you going to scare people off by all of this data collection that you're doing? It was like, well, we have to have that in there. If we're using Google Analytics, like, it's just a simple tool that we're using. But the reality is it's collecting a lot of information. And I think that will be one of the hard things with this, is the fact that you. You will be potentially telling people that you're collecting data about something that they might not fully understand. And therefore I wonder if that will impact their response to whatever it is that they would do without having that information, which is a little bit the opposite of what you're saying. And I don't. I'm not completely convinced on it yet, but I just wonder how many people fully understand what it is. Whereas you and I feel very confident about, like, oh, yeah, like cookies. We know that's happening all the time, but I wonder for people that don't know that, once they do know that, if. Then they'll be hesitant about interacting with whatever it is that product or email, opt in, or whatever it might be. You have any thoughts on that?

So when it comes to whether or not. People may shy away. I think that that is definitely a possibility. But I think that we are at a point where people are starting to understand data more. And if they realize every single site I go to is asking me for this, this is not a grand conspiracy because I can tell you, you know, I pick on my mom constantly. I' pick on my dad here for a moment. My dad is like the ultimate conspiracy theorist. So he's gonna think that, you know, there is a plot because he wants to look up something very. What he thinks is something very simple. And I'm just like, dad, it's not, it's okay, it's not a big deal. But I think that one of the things that's really important about GDPR is they want clear explanations. They don't want legalese, which I think is really important. You don't want to just, you know, refer somebody and say, we collect data, go here to find more. And then it's like this 10 page document that's super chock full of legalese. They want clear statements as to what you're doing and how you use the data. You can always refer people to your privacy and say, if you want more, go here. But what they want is simply for you to say, we collect. We may place a cookie on your browser so that we can help your experience with the site. That might be for something as simple as display ads. We track your behavior. We track. If you click on something we track to help the user experience. If people are really reading it, I think they'll be like, oh, okay. I don't see any issue with that. I think that for, for some people, if they're my dad, yeah, they may click off of it. But I think for the most part we are in a period of. I don't think it's just up to us to educate. I think people are seeking out more information on data to find out what's happening, what's being used. I mean, how long have grocery store cards been a thing? Like decades, right? They are just the most massive data collection out there. What is it, Catalina Nielsen? I think so. So it's another level. And I remember at one point, of course, my conspiracy theorist dad was just like, do you know what they're collecting with your grocery store card? And I'm like, I'm okay with it. I want my discounts. And I think that we're going to enter a similar phase right now with what people are doing online and an understanding about exactly what it is that we collect. Because everything's Been really like smoke and mirrors for a while. Right. So the more people start to understand it, the better. And I think that by using very clear, non legalese type language to be honest with people about what we're collecting, that's good. There shouldn't be tricks. Like I don't, I don't. I am all for people being transparent and saying, I've got a Facebook pixel on here so that I can send you ads, be honest about what you're doing. Like we've gotten to this sort of mentality where everybody's like, I have this special free offer for you. Do this thing or take this webinar where I think that we all know what's going to happen and it's going to be a sales pitch. But I don't think a lot of other people are clear that when they sign up for the one free thing, they're going to be put into a funnel for a whole lot of other things. So the more that we can be clear about what our intent is, I think that we are going to. I honestly think we're going to see probably fewer unsubscribes because people are very clear about what they're signing up for. And I also think that we may see better results, like better conversions because again, when people know you're going to have a better opportunity to target your actual customer instead of just throwing a net and hoping for the best.

Right? Yeah. It's similar to, and you had mentioned this before, but with any affiliate marketing disclosing that so people know and that being a positive thing, it builds trust and clear communication. And so in general moving towards an Internet where people understand better and better what's happening with their data, which is a good thing. And we see that as being such an important thing, especially with all the stuff with Facebook happening and as that unfold, so very interesting, very important and also complicated. It's not an easy topic. And for people that want to stay in the loop on this stuff, but not necessarily as in the loop as you are because you need to be super in the loop. What is the best way for them to stay up to date on it? And do you have an email list where you update about this or do you post blog posts about it? We mentioned that checklist that you have as well.

We do where we are keeping everything up to date. We are trying to keep businesses.com GDPR as our hub for a place where people can get information. We have a link to a podcast episode. We did. We have a link to the checklist if people want to download that. But we're also going to do some very specific tutorial type of posts that we will, once those are published, link there as well. Because we want to make sure that if people have questions on how to anonymize their data. Honestly, I didn't know the word anonymize was a thing until like a week ago. So, you know, when we're talking about doing things like that, we want to make sure that people have easy explanations that don't get just covered and covered in layers of pieces that they can't understand. We're trying to make sure that we're cutting out some of the confusion. So that's what we're really going to be using as our hub to try to put as much information as we can together on GDPR to take some of the overwhelm out of it for people.

Awesome. That's great. And we'll be sure to link to that so people can see that. Danielle, if people want to work with you, if they want to know what you're up to, what's the best way to get a hold of you and to check out what you're doing online?

Absolutely. Either businesseaseas.com or legal.com awesome. Great.

Danielle, thanks so much for coming on the podcast. Super fun to talk to you. Thanks for being a food blogger pro expert. We really appreciate you and it's fun to connect. As always.

Thank you so much.

Wow, what an episode, right? Danielle shared a lot of really important and helpful information in this episode. So if you have any questions, I highly suggest you check out businesses.com GDPR and that's where you can download the checklist for your GDPR efforts and stay up to date on all things gdpr. And now it's time for the review of the week. And this one comes from Caroline and it says this podcast is full of pithy, valuable information for both newbie and expert. Bloggers and entrepreneurs. Entrepreneurs. Bjork does a great job of asking the right questions and getting pearls from his many guests. As a person with a week old blog, I'm getting so much value out of the 10 to 20 episodes I've heard so far. The variety of focus is amazing too. Marketing, writing, food, styling, photos, etc. Keep it coming. Thank you so much Caroline, and we're so glad that you have started your blog and have found the podcast helpful in your blogging journey. And if any of you out there have any recommendations for any upcoming episodes, we'd love to hear it. And you can submit your requests@foodbloggerpro.com podcast request and from all of us here at FBPHQ, make it a great week.

Sam.