351: Understanding Data Collection, GDPR, and CCPA as a Content Creator with Danielle Liss

This episode is sponsored by our sister site, Clarity. C L A R I T I is how you spell clarity. All different iterations of how people say it, but it's clarity because it helps you to be clear on what it is that you need to be working on and really gives you direction around how you can go around improving and updating and tracking the content on your blog. We built it because we had been managing everything in a spreadsheet. So my guess is there's two people listening to this podcast. One would be you are people who track stuff, then you probably track it in a spreadsheet. Maybe air table, maybe notion. And my guess is it's a lot of manual work. There's another group of people who just aren't tracking anything. And that's okay, you'll get there eventually. But Clarity is going to be the tool that's going to allow you to do that more easily. It's going to allow you to not spend as much manual time doing the tracking, updating, improving, and just generally understanding the lay of the land with your content. And one of the things that I think is most important a lot of times we talk about hiring on this podcast, but one of the things we don't talk about enough, and I probably should talk about it more, is some of the first positions you should hire for are software. It's not an actual person. You're hiring software to come in and do a lot of the work that you are doing. And that's what clarity is for us. As the pinch of Yum Team Food Blocker Pro team. We use clarity to take manual work away from our day to day tasks and we automate that. It's one of the easiest ways to have your first hire. So if you're thinking, oh, you know, I hear people talk about hiring a lot, who should my next hire be? My encouragement for you would let your next hire be a tool like Clarity, where you're going to spend 25amonth and you're going to save an incredible amount of time. That's what it's all about. So if you want to check it out, if you want to learn a little bit more about what it is and how it works, you can go to clarity.com food and you can deep dive into the ins and outs of Clarity just by signing up for that list. And that's not going to sign you up for the app, it's not going to sign you up and, you know, process any payments or anything like that. It's just, it's just going to allow you to understand the tool better through some onboarding emails that give you a little bit of context around what Clarity does and and why we built it. So again, that's clarity.com food if you want to check that out. And as a last note here, we're halfway through this 25 forever deal. So when I say you can, you know, think of hiring clarity at $25 a month as a little like team member who's in the background working for you, that deal's not going to last forever. We're just wanting to get to our first 500 users as we're in the.

Early stages with this. You'll still get a lot of value out of it.

But the great thing is as the value within Clarity increases, as we build out more features, as we build out more functionality, you will be locked in at that $25 price as a thank you for signing up early, for getting, for being somebody who's using the tool early on, giving us feedback, but also finding a lot of value out of it. We've actually had two people this week.

It was last week actually that followed.

Up and one person said I love.

It was all L O V E Capital, this service.

And somebody else said the same thing in the Slack channel, which you can join and be a part of that after you sign up for Clarity to see how other people are using it and the questions that come up and offer any insight or feedback along the way. So thank you to Clarity for sponsoring this episode.

Foreign. This is Bjork.

Welcome to the Food Blogger Pro Podcast. Thanks for listening.

It's one of the great joys that we have recording this podcast each week.

And sharing it into the interwebs. And one of the great joys that I have is having conversations with experts. One of those experts is Danielle Liss. She is the founder of List Legal and helps bloggers, publishers, creators with all things legal related to their blog or their social or sponsored content or privacy policies or these acronyms like CCPA or CPRA and gdpr, and helping us understand what that actually means for us as publishers, as bloggers, as creators, what we need to know about it, what action we need to take, what we need to be aware of, what we don't have to, like, move on, what fears we should actually have and what ones we shouldn't. And we're going to be having some of those conversations with Danielle today on the podcast. She is doing this day in and day out. And I love having conversations who are or that are with people who are doing day in and day out, work in a really specific subject because or within a really specific niche because they have insights and expertise and opinions that nobody else has. And I think Danielle is one of the leading experts in the world on all things social, sponsored content, legal, the big category of legal as it relates to this industry that we're in. So there's going to be a lot of important information to be aware of and to track along with and I think you'll really enjoy the conversation. Speaking of conversations, one of the my favorite places to track along with conversations that are happening is the Food Blogger Pro Facebook group, Food Blogger Pro Podcast Facebook group specifically. We are getting up to almost 400 members there and it's a chance to have conversations after a podcast is published or to get responses before a podcast is published around questions that people might have. So an example might be, you know, we, next time we interview Danielle, we might post in this group and say, hey, does anybody have any, you know, legal questions for Danielle? And we'd source those and bring those into the podcast. And a lot of times we'll have a conversation after a podcast airs. So it's not just a one way conversation with me and a guest, but we can make it kind of three dimensional and open that conversation up to listeners of the podcast within that group. So if you want to join, go to foodblockerpro.com Facebook that will redirect you to the podcast page for this group and would love for you to join the conversation there. All right, let's go ahead and jump into all things legal with Danielle Liss from List Legal. Danielle, welcome to the podcast.

Thank you so much. I'm excited to be here.

Yeah, it's fun for a couple reasons to talk to you. One, because you've been on the podcast multiple times, it's like kind of checking in with a friend. It's like our virtual quarterly coffee with Danielle. Two, because you know a lot about this world in this industry. And so it's, it's anytime that we can touch base with somebody who spends their days thinking about a really specific area within the world that we live, which is kind of content publishing content online, whether that be social or a blog, there's always really interesting things that come from it. So for those who haven't caught any of those past six episodes and we'll link to those in the show notes, if anybody wants to dive deep on legal, can you share a little bit about your background, who you are and what you're about and how you got into this?

Sure. If the legal part didn't give it away. I am a lawyer. I have a small firm where I work primarily with online business owners and I work with a lot of bloggers and influencers. And that was really born out of the fact that I was a blogger a long, long time ago. I started in 2004 and went to about 2017 fairly regularly, then kind of realized didn't care anymore. I was joking recently with somebody. I was like, I remember when it was a whole thing when people were like, you need to have a picture with every post. And I was like, too much work.

Too much work.

Remember that? That was like 2011.

Did you use type form at that point or.

I was Typeform. I started out on Blogspot. Was it Blogspot Type Form. And then when I eventually moved to WordPress, I was like, oh, this is just a lot.

Yeah. So a lot of people listening can resonate with that.

Yeah. I started out as a blogger and then it moved into speaking and working more with bloggers. I worked for a long time at CMO and general counsel for an influencer network. So I really got to know the ins and outs of sponsored content from kind of all sides at that point. And then I've really focused my legal career both as outside and in house counsel for about a year working with digital online businesses who are in this place where you're creating a lot of content and that's how you are bringing in business, whether it's through affiliate marketing, sponsored content are really just expanding beyond that because I love that we've gotten there like for a long time. And I'm sure you remember these days it was the main drivers for income were either ads or sponsored content. And I think that we have really gotten to this place now where it is such a robust industry that these are just pieces of the type of income that this sort of online business can bring in.

Yep. One of the things that's great about that is diversification. We talk about that. And diversification, I think brings with it some level of security where, you know, hey, the ad network, if that, if something changes, potentially all my money could go away. It's one of the reasons within the tiny bit companies where there's security for us is like, hey, we have subscriptions, we have software, we have membership, we have pinch of yam, which is advertising and sponsored content. So. But what I hear you saying is that's actually also shifting and changing for creators and publishers. Like, not only is it just ads now and sponsored content, but you're starting to see other Areas of opportunity. You see those because you work with the people who are creating those sources of revenue within their business. So you get kind of some insight into that when you look at that kind of broad pie, the different pieces of the pie. You mentioned ad income, you mentioned sponsored content, which we're all familiar with. What are some of those other areas that you see starting to develop and publishers and creators starting to really lean into?

Of course, affiliate marketing. I'm going to throw it in there just in case that's not, you know, one of the main ones people think of. But I do think that people have gotten really creative with affiliate marketing in recent years. Like it's, we're past just having Amazon associate links on things. And I love that because people have done a really great job with it. I think what I see the most of is where people start. I feel like it's almost a cycle that people go through. So it starts with ads and sponsored content and affiliate marketing. Then we start to move into digital products. A lot of the time, and especially in the food blogging world, this is typically your downloadable cookbooks, your ebooks. Then I start to see people move into courses, which I love, and then.

See, why do you love courses? Just sort of curious.

I think that courses are a great way to bring in revenue. It's such a great way to connect with your audience and to build trust with them. And I think that it often starts out with that digital piece of content. They want more connection, they want more of you. So then it's like, okay, yeah, I'll take a course with you. And then it's often moving. I'm seeing a lot of folks who are moving into memberships for whatever their particular niches. So I think that it can be so much. And I especially love when I start to see people doing like higher level consulting, whether it is for brands or for in some other capacity. I'm also seeing a lot of folks who branch out into providing additional services. So I see a lot of food bloggers who are offering food photography for brands or for like local companies who are just, they get that they need to have. I think that food bloggers have changed things around a little bit. Like it used to be, you look at a magazine and that's where you would find that kind of content. And now it's, it's kind of become the expectation and the norm that your content is going to look really, really good. And if it doesn't, you're like, I don't want to eat. Make deal with that.

So I think it's like table stakes. It's like what you need in order to play the game.

Exactly. And I think that it has become such an interesting industry to watch because I really do think we've seen so many dramatic changes. Like I remember when I was doing sponsored content reviews in 2011, 2012, and the pictures is just like, yeah, that's dark and doesn't look very appetizing. And like I just think about if somebody took that exact same recipe and made it now it would be just like this feast for the eyes and then the video that can come with it. It's just we've made so much progress and I think that it has really impacted how we look for that content now. Like now the old stuff is not passing anymore. We expect that level of quality.

And is your point with that? Brands are also recognizing that. And so these skills that food photographers have developed are now there's a market around that and like selling those services and brands are saying, hey, we know that we need to have this level of quality, so we're going to come to somebody who can produce that and hire them not necessarily in a sponsored content capacity, but as a create creator to help us get that level of quality for our content. Is that what you're seeing?

Yes, I'm seeing it a lot and I love it. And I have so many people who are like, I've got only two or three clients, you know, this past year, but I'm really hoping to get it to this amount. And for some it's a side hustle. I've seen a handful of folks who are making it really more of their full time focus, where their blog then is becoming more of the side hustle and the food styling photography brand work, like the direct with brand work, not meeting sponsored content that is becoming more of kind of their full time focus.

It's interesting. It feels like it ties into this idea that we've talked about on the podcast before, which we call for lack of a better name, the egg carton method. But just this idea of thinking about, hey, where do I want to be in terms of the earnings from my site? What would feel good for some people it's like, hey, I want to have, you know, coffee money for other people. I remember having a conversation with Lindsay where I was like, I think we could build this to the point where it would like cover our mortgage, which at the time was for this like $70,000 condo. So it was like 450 bucks a month. But at that time in our life it Was like, this would be really, really impactful for us. Um, and, but.

And there are some people who say.

I want to build this to be my career and the thing that I do and supports my family and saying, like, what does that need to be? You know, a really easy example would be, let's say $52,000, right? You want to make a thousand dollars a week. You could do that by getting enough page views to get you to $1,000 a week and ad earnings. Or you could say, hey, I want to book two gigs a year working with a brand and maybe they'll pay me $10,000 to do a top to bottom shoot of something, or four gigs at 5,000, whatever it might be. And you start to place these little eggs in the egg carton to say, how do I fill this up? Maybe you earn a few thousand dollars from affiliate and thousand dollars here from advertising. And, and I think it allows people to have some freedom and flexibility in how they think about filling that egg carton, as opposed to being like, I just need to find one huge egg. Like, what's my. The egg is traffic. And I monetize through ads. But with that, there's still considerations that come in around. Kind of the strategy piece of it, the simplicity of ads and just ads is like, hey, you create free content, you put ads against it, you have a really simple business. But then adding additional sources of revenue adds some layer of complexity. So to bring it back around to the legal side, how do you see people pulling that off? Well, in regards to adding additional sources of revenue, let's say you go from advertising to sponsor content to selling your own product, while also doing the business and legal side well, covering themselves with that, Is it like, hey, you just reach out to Danielle and say, help, I'm doing this. How do I do it? Well? Or like, how do you. How do you even go about doing it? What is the strategy with that?

So I love the answer of yes, reach out to Danielle. That's perfect. But I think that what the most important thing is, and I think this is something that you've been talking about on the podcast for years. Know your strengths, know what you want to deal with, because I can tell you the first thing that I outsource on literally anything I do is bookkeeping. Don't like it, don't want to touch it, don't want to do it. So I send it out. So think about kind of where you fall in this. Do you want somebody to handle it for you? Do you want to DIY it? Because and just remember diy, while you can buy templates, you can do a lot of different things. There's still your time investment. And do you want to be an expert on all of these things or do you just want to be an expert on creating beautiful content? What I think is really important is as you add different things, and I really look at it as you add each different stream for monetization, what's changing and what might you need to change? And it's a matter of just asking yourself each time you're adding something. So let's say you start out with doing affiliate marketing. You want to make sure that you've got your website terms and conditions. You want to make sure that you understand how to disclose affiliate links. You want to make sure you've got the appropriate privacy policy in place, and then you're kind of ready to go. There isn't a lot that needs to go into it. Of course, you should also understand how to read affiliate terms so that you know what you're getting into with the company. But it's a relatively simple process. So then let's say you add an ad management service. Once you add that, what do you need to change? You've already got terms of service. Is anything changing there? Maybe you want to add some additional language about having ads on the site. What does that look like? You're definitely going to want to make some changes to your privacy policy. And if you're using something like Ad Thrive or Mediavine, they are going to have language ready for you because they do this for all of their publishers. They know that it is coming. So you're going to add that sponsored content. That is going to be a slightly different skill set that you're learning, because that's all about reading the agreement and knowing those points where you are going to be able to negotiate in your favor, or that you need to just clarify so that you have it appropriately set up with the brand. Or if you start adding products, same thing you're going to want to add privacy policy. Yes, you're going to make changes to your privacy policy, but you're also going to add purchase policies, because what does that look like? What do you want people to be able to do with your stuff when they buy it? Do you want them to be able to have the right to resell it? Probably not. So you want to make sure you've got the appropriate language on it and that you're protecting your rights there. So each time you add something, just kind of think about, okay, what area might this Impact and then you can look at it from whatever those small steps are to make sure that you either know it or that you can outsource it to someone who does know it.

Yeah, there's always this kind of risk reward analysis that exists in that world where there's risk on either side. There's risk of spending money, that's a risk, but there's also risk of exposure. You don't have things set up correctly and there's risk there. And so it's hard to pinpoint an exact point where it's like, hey, it makes sense at this point to do this thing in regards to legal. But what I will say is, I think if you think of the spectrum of business officialness, I think sometimes because the Internet can be such a scrappy place, like, hey, you can spin up a blog and you're off and running and you can publish content, put ads on it and all of that can happen without a lot of checks and balances. But I like to think of kind of the spectrum of businesses and let's say you're creating a restaurant, you'd have to go through a lot of different approvals, you'd have to have inspections.

And I like the idea of encouraging.

Creators to err on the side of more official. And as much as possible, you don't want to spend all of your money just on all of the back end stuff like you'll, you need to buy gear for photography and whatnot. But like, the investment into the officialness of your business is a wise investment just to introduce that layer of protection.

And for you to know, like, hey.

This is an official thing that you're doing and you're doing it well. And I feel like a great example is setting up an official llc, like doing that right the first time when you're spinning up your business is going to be it's going to pay dividends down the line versus kind of DIYing that process. And I think it also encourages you.

In that, like, hey, you've invested into.

This, like you put money into it and maybe makes it a little bit easier to say, you know what, I'm actually going to work this weekend instead of taking it off because I've invested into it, like is often the case with courses.

And you can also go really deep on it.

And that's one of the things that we're going to do right now is go deep on an area called ccpa. So this is something that's come up, people are familiar with it. It's always hard to know like how official do I take this on the spectrum of business official? Do I spend thousands of dollars trying to figure this out? Do I copy and paste something in my priv? Do I need to do other stuff? So what is CCPA and kind of what's going on in that world right now?

Okay, so I'm going to give you a little bit of history before I get into defining it. So what we have seen in terms of data collection and data privacy I think is something a lot of people are familiar with. And we're used to looking at it from kind of the big guys. Right? Facebook, Amazon, Google, they're the ones who I think get the attention for what are they doing with our stuff?

So our stuff being our data, like the information they have on us?

Yes. You just think about, didn't Facebook just recently turn off facial recognition unless you say it's okay?

Yeah, something like that. I don't. Yeah, I don't remember specifically.

I think that's kind of some of the things that are coming from it. People are a little bit concerned about the power of artificial intelligence. They're concerned about how their data is being used. And I think that there have been perhaps some suspicious activities in the past based upon people's data. So what we are seeing a lot of right now in terms of legislation is places are trying to give people instead of companies a little more control over what happens with their data and to let them know that there are standards in place. And we really started with GDPR in 2018. That was probably the first time a lot of people really thought about it. We knew we needed a privacy policy, most likely, but it was just sort of this thing that people had. And I don't think anyone really thought about why or what was behind it. So 2018, GDPR became effective in May. That was a fun time.

Can you remind people, for those who either forgot or weren't involved at that time, what GDPR is?

Sure. It's the General Data Protection Regulation and it is the European Union's answer to data control. And the goal of that legislation was exactly what I said, that idea of people need to understand and have control over what happens. So that was kind of our first foray into dealing with it. Now, even though it's an EU law, depending upon who your audience is and what you're collecting, data wise, a lot of US companies still needed to be GDPR compliant. So there was this period in May of 2018 where everybody's like, why am I getting all these privacy policy notices? And I'm like that's my life right now. And so we were all trying to update privacy policies, understand if it was going to impact us. And it seemed like this massive ordeal. Now if you're a company like Amazon or Facebook, it has been a massive ordeal. I think that they find, believe it was Amazon, like hundreds of millions of dollars for violations. I can't remember what the Facebook fine was, but it's like they're the ones that they're going after presently.

Right.

Then we now have in the US sort of reactions to that and CCPA is one of those. So because we don't have a federal law related to data and privacy. And I'm going to put out this with a very hopeful yet because I really, really want one.

It makes your job a little bit easier. And everybody who's creating content online or running any business online, it really would.

Because quite honestly, for companies that are local, it might not be as much of an impactful area. But for bloggers, you've got people from everywhere potentially looking at your site. So you got to have all the things in there. So it's really hard to keep track when you've got to deal with state after state with different legislation. And that's kind of what we're dealing with now. California was really, and California honestly is often at the forefront of legislation. They are often the first state to do things. They were the first state who had required privacy policies in the first place. And so CCPA is the California Consumer Protection Act. And the goal there, it's very similar to GDPR except that it's opposite where they wanted people to have more knowledge, understanding and transparency of how their data was being used. And the reason I say it's opposite. So GDPR was opt in. So you had to give permission for somebody to be able to use your data. Whereas California is opposite in that it's opt out. So there you notify people what you are doing with the data and they can then say, oh no, don't do that. So you've got to have some different mechanisms which that was my favorite part of this whole thing was like, why can't you just be. Couldn't you just copied that now?

Okay, yeah, like idea being. It's a totally separate. It's the same. The spirit of the law is the same, but the way that they're pulling it off is completely different.

Yep.

So people are having to create a new process potentially in order to adhere to the regulation.

Exactly. And they also have certain definitions in there that I think people found confusing. So they said, if you sell data, then you have to be compliant. If you fall under the category of business that we define business to mean. And everybody's like, I don't sell data. Except when you read their definition, it's literally anything that happens with the data, it's basically sharing, giving it to another partner. Like, think of whomever does your email newsletter. Like, they would view that as a sale under the definition. So it became extremely confusing for people saying, I didn't think I needed this, but I guess I kind of do. And the way that they have it defined is you are considered a business under the law if you meet three different criteria. First is if you make $25 billion a year. And quite honestly, I want that for every single person who is listening to this podcast. I don't know if many people are there yet.

Right.

But I want that for them. The next one is if basically what I call data brokers, you are literally the people who are gathering the data and selling it off to someone else. That is the type of transactions that you're involved in. Then there's this third area that gets a little more confusing, and it's collecting data from individuals in California, and they set that number at 50,000. So this is where it can become important to start to know who your audience is. Because if you've got 50,000 visitors from California each year, then you do need to be CCPA compliant.

For most people, that's per year, you said.

Yeah. So for most people, it's not. It's a matter of knowing your data, knowing who your audience is, and then knowing what it is you're collecting and who you're sending it to and what the exceptions are. One thing that a lot of folks will say, and I am on that bandwagon about ccpa, is it was a hastily cobbled together piece of legislation. They made a lot of changes to it, and there are changes that are going to go in next year. So if you're familiar with California's elections at all, California does ballot initiatives. So a ballot initiative passed that is now going to be called cpra, which is the California Privacy Rights Act. I know there's.

It's the evolution of ccpa.

Yes, it's essentially amendments, and people say that it expanded it. However, it's also changing that definition of what is considered a business. So even though there are more things that people need to be concerned with, the whole thing that I think most bloggers are looking at is, do I count as a business under this? So then it's Going to go up to 100,000 California residents. So that's where it really does get a little bit different. So you may be under it now, but you might not have to be next year. My view on it is, if you're already doing it at 50,000, I mean, the hope is your traffic is going to continue, continue to increase and grow. I would keep it. But if you're looking at it now saying, what do I do with this? Just know that it is traffic based, but it does impact what you need to do in terms of you need to give people the ability to opt out, and you also need to make sure that you've got the appropriate information within your privacy policy.

Got it. So privacy policy update makes sense. That would be something that you would either go to an attorney to help with. Or like, if somebody purchased like a template, would that have it? I know that you have businesses. Would that have a CCPA or CCP rc? What is it?

I know. Too many cpra, huh?

Yeah. Block in it. That would cover people for that in the privacy policy.

Yes. I can only speak really for businesses because obviously they're templates that I have created. But we do have it in there and we try to make it accessible so that you understand, like, do I actually need this or don't I? Because for privacy policy purposes, it's not that over the top. It's really like the goal of your privacy policy is always going to be more or less, what information do you collect, what information do you share, who do you share it with, and how are you using it? It's how people need to understand from your privacy policy what's happening. So the way that the law is structured is they have different categories that things fall into. And it might be information like your name and address, or it might be things that they consider sensitive information, which are things like gender, employment status, things like that. Then it gets into things that I'm. I don't think most bloggers are into, but I reserve the right to change that opinion. Where it's like the biogenetic type information.

Sure.

And I think that would be like.

Probably not a lot of bloggers collecting.

That scam type of things, I assume. So there's that type of piece of it where you're just like, I definitely don't collect those things. So it's really just a matter of knowing. And I think that that's really what so much of the privacy laws are about. You need to have a basic understanding of what is installed on your site and what you're collecting and what you're doing with it. And that might be through plugins, things that you know you're directly collecting. Like, let's say you've got a digital product, you're getting somebody's payment information at some point in that process. So where do you get it? Most of the time I'm going to say the general big two are Stripe and PayPal. So it's going to be Stripe and PayPal who are processing. So you're technically never getting that information. You're getting the money and you might get like last four digits or some other transaction information, but you're not actually holding financial information for them. So in that case, you just let people know. I use the following people to process as payments come in and here's what happens to it.

Got it. And the numbers. Would you just look at Google Analytics for that? Like, hey, in the last 12 months or I suppose it's on an annual basis. But generally speaking, a site like WP Tasty probably wouldn't have 100,000 or maybe even 50,000. It's a smaller traffic site, whereas Pinch of Yum would. So that would be. If we look at Google Analytics and see, hey, we had 50,000 users visitors from California, then we would be considered a business that would be doing business in California. Is that how it works?

Then you would be considered a business who has to follow the law there because it's the California residents that you're looking at. So if you've got 50,000 California folks who have visited, and I do say just dive into Google Analytics and see what you have. Because I think that for some folks, like, if you have a very, very localized audience and you're not in California, so if you have like a little bit of traffic from there, and even though you have a large, larger amount of traffic that's coming in depending upon where that falls, then you might not need to be as concerned with it. Like, if, you know, you've got like mostly east coast or wherever the case might be, then it might be less of a concern. I always say have it on your radar because unfortunately, without federal privacy legislation in place, again, please let me have that. We are also going to be looking at other states because as I said, California is usually first. So we have other states that are probably going to be enacting similar laws and they might not have the exact same definitions. So it's going to be interesting to try to keep track of. And I think that's. And I want to put out there, I don't want People to feel overwhelmed by this. It is. I don't think that the purpose and the spirit of these laws is to come after bloggers. I don't think that that is the case now. There is always going to be mechanisms for reporting problem sites and things like that. However, I think it's important to make sure that to the best of your ability, you have followed and tried to keep track. And then just most of the time, the legislation is going to go into effect, you know, beginning of the year. So just kind of take a look at it, say maybe November, December. Where can you find resources on what is going to be taking effect? Or if you've already got policies and templates that you've purchased, do they offer updates that make it easy for you to find out what's happening?

Yep. And then what is actually. What do you actually do? Like, what is the. You have this update in your privacy policy, but, like, then you're actually having to do something to adhere to the regulations. What is it that you're actually doing?

Usually you're giving people rights to do certain things. With California, for example, they have a specific format that they have to follow where they can send in a request to find out what information you have, what you've done with it. That's somewhat similar to gdpr. With gdpr, the right to delete is a good example of what one of the things that they offer. So with the right to delete, you could send in a request and say, I basically want my data wiped from your servers. I want this to go away. I one time had somebody from the EU send me that request for gdpr, and I was like, okay, I'm happy to do that, but you're going to lose access to the thing that you purchased. Do you still want to move forward? So sometimes it can be a conversation. It's like, I'm happy to remove it from, from an email list, like any type of marketing materials, but do you want to lose access to this thing? Like, and if they've already downloaded what they've got, fine, then it's not a big deal. But it's just sometimes you need to make sure you know exactly how that might impact them. Because. And you want to be transparent about that. It's like, I am happy to do this for you. I want to honor your request. However, here's the thing. And so in your privacy policy will also have in there, like, kind of how they exercise those specific rights. It's usually going to be an email, or sometimes you can include a mailing Address. The other piece for California is you need to have something that's essentially if you need to be CCPA compliant, there should be a button on the site that says do not sell my information. And most websites have it. California residents colon, do not sell my information. And then they can click on the site. And it all depends on what's truly being sold and if it falls into the definition of a sale. The most common thing right now I think is for ad networks and most of the ad networks, they're actually providing code for whatever button they have that allows people to opt out of it.

And would that be. Is that only displaying to California residents? Do you know?

I'm honestly that I don't know because I haven't played with that piece of the technology. I think that for. It may. But I. That I. I'm going to have to get. Say I'm not certain there.

Okay. Yeah. Cause I'm curious. I. It might be one of those things where it's like you buy a red car and then you suddenly see red cars everywhere. Where like I'm. I feel like I'm. So I just essentially see cookie. You know, except cookies. Yeah, except cookies. Or.

And remember in 2018, that was the thing.

Like they.

The cookie bars weren't there in 2018. Like in my mind, cookie bar meant a very tasty dessert. Not like this thing that has become ubiquitous at this stage. And GDPR really is the reason why we have come to see those cookie bars and just not even think about it. And people were really, really concerned when they had to first install those. I don't know if you remember that people were just like, that's going to drive traffic away. That's not going to work. That's going to be awful. And now it is as commonplace as can be. Just okay, people go on their way.

Yep. So takeaways from that, when you. When we're thinking about CCPA and cpra. Did I get that?

Got it. Good job.

Is you need to make sure that number one, if you there's those three checks where 25 million or over. It's probably not going to be a lot of people listening to it. Um, and then the second one was. Remind me what that one was.

Basically the data brokers.

Okay. Like somebody who's brokering data. Probably not anybody who's listening to this podcast. The third one, high potential for people listening to the podcast, which would be in a year. Are you getting over a hundred thousand users, visitors, California residents who are using your site? If that's true, technically you need to be CCPA compliant or in 2023. Is that when the CPRA will pass?

Yeah, 2023, it's January 1st is when it's effective. I think I've seen some things that say it's going to be retroactive, but my view on being retroactive, like there are expansions to the ACT that are in there. So I think that's really the bigger concern. But right now, if you're already CCPA compliant because you've got 50,000, you should be good to go for the 100,000. Except for like, I know that it. For example, one of the things that they've created a new category for is like certain sensitive information like your Social Security number. And I am going to, I'm going to wager that most food bloggers are probably not getting anywhere close to collecting things like in that category.

Right.

So it may be that there will be some updates that you would make to your privacy policy. But it's going to be, it's really the thresholds that I think are going to be the most concerning for most folks because it's really complying. Isn't that big of a deal. What's the bigger deal is, do I need to. That's usually the thing I think more people are getting hung up on.

Yep. So I can see with pinch of yam when I pull up our privacy policy, additional rights of California residents. I'm sure you updated this for us, but right to access, right to delete, deletion, right to non discrimination, how to submit a verifiable consumer request. And then there's actually a Nevada one. So is that an example of like another state that has created their own sub requirements?

I'm in Nevada, so I can kind of, you know. Yeah, I can pick on us. So the Nevada piece, it's nice to have in there and it is something that I've got in the template over at Business Ease. But I think that for most people it isn't necessarily applicable for blogging because the way they've defined sale and selling data to be different than what's in California again, I love when the definitions of the same word can be completely different.

Legislation totally makes your job.

Yeah, it's fun. But there are certainly other laws that are pending that I think are going to be a little more similar to California and that's really going to be the biggest thing for the next year. That's kind of what's on my radar, is, okay, who am I watching now? What are we going to be updating in Q4 so that we are ready for any 2023 effective dates.

Yep, that makes sense. And so if people are working with an ad network, the nice thing is that those ad networks, as far as you're aware, are building that option in being that they are involved with data and the use of data on a marketplace and selling that, but they have that built in and whether it's triggering for based on geolocation or not. Tbd, but good to know.

Yes. As far as I have seen, they have been providing great stuff. So when I work with people on the law firm side, as opposed to the template side, usually one of my first questions to them is which ad manager are you using? And when they tell me, it's like, okay, here's the information, we're going to pop in for that.

Got it. One of the things that you'd said at the beginning of the episode, which I wasn't clear on, is you said internal versus external, your internal with some companies. Outside. Internal and outside, I think was the language you used. What is the difference between those two.

Things for the type of service? So I right now serve primarily. You mean how I work with people?

Yeah, and I think you had referred to working internally.

In house.

Yeah, in house and outside. That's what it was.

So working outside, that's typically what I do now is because I have a law firm and I represent clients that way. And a lot of times even then I'm acting as essentially what would be their general counsel without being an employee there. I also went in house for about a year, which means I was an employee of the company that I was working with. And that was a lot of fun. Cause it was kind of as the shift from like low eight figure business to much, much higher eight figure business. And it was.

Point being, it was a business that was scaling pretty significantly.

Yeah, pretty intense ride. But it was, it was a really cool period of learning. Just a lot behind the scenes. Like I can tell you CPP, because that was right before it was primarily 2019 that I was there. So it was as CCPA was going to be effective. So I spent a lot of time with that one.

It's one of the things that, that I've been thinking a lot about and that is maybe this is maybe a good transition to talk about some of the services you offer. But you know, we talk a lot about, and you mentioned this like working in your area of maximum output, but also maximum enjoyment. And there's lots of different tools that you can use to figure out what that Looks like Michael Hyatt has one that he talks about in a book that I just read. But it's about your desire zone. Like, what are the things you are, you are best at and that you enjoy the most and then building a team around you for those other things. And one of the things that we've been thinking about even as a team is like, how do all of us continually do that better? How do we think about, Here are the things I'm really good at, here are the things that I want to do more, and here's how I can bring somebody in to support me in the areas that I'm not good at and I don't want to be good at, or potentially that I want to be good at, but I'm not good at. The legal side of it is a huge piece of that. And I love the idea of thinking about. You have a blog, you have a business, and you kind of have these fractional roles. You have your fractional in house attorney. It's not actually somebody who's in house, but we have that with the CFO that we work with, Pat, who's awesome.

He probably works 10 hours a week.

I think on average for us, but.

He knows the business.

We go to him with all our finance stuff. And my encouragement to anybody listening would be to think about ways that you can continually build out those areas that.

You don't want to be using your.

Brain space on and find like becoming super routers over time. So something comes in, it's a contract. Who do you route it to? I think a lot of times people are in the mindset of something comes in, it's a contract, put the brakes on, stop, get out of the car, review the contract, like. But you would just want to keep the momentum going. So people need to become super routers for that stuff. That stops their momentum. Legal being one of those. And I know that's been a huge support for us as we work together over the years to say, hey, we're not going to spend a bunch of time reviewing contracts. Like, send this to Danielle, send this to list legal and have her take a look at it. So what does that look like if somebody was interested in working with you to be their kind of back office attorney? Or maybe a better way to say that is like a resource for them as they run into these legal issues. And then if they don't have the ability to do that, you have kind of the DIY option as another play for people. Sure.

So when it comes to working with an attorney, this is something that I've become incredibly passionate about because I think that a lot of times it's hard to put on that business owner cap, right? Like you just, you don't want to send it out or you think I'm just going to ask somebody. And then you end up with a lawyer you don't particularly like and you don't feel like they get your business and then you don't want to deal with them because you don't, you just don't want to. And so I think it's really important as your business grows to do either a periodic checkup or just to find somebody that you can have. And it doesn't necessarily mean having somebody on retainer, meaning you're paying them without using them. I think that you can enter into relationships where it's like, I'm going to need you periodically. Like, let's say, you know that Q4 is going to be intense. So you think Q3 is when the contracts are going to be coming in and just say, you know, here are my needs. This is what my business looks like. One thing that I would encourage you even if you're relatively early in your journey. And this is one of my absolute favorite things that I get to do with clients as a strategy session. I had one a couple of weeks ago for somebody who was about to start her food blog and said, I just want to make sure that I know what I'm looking at because I don't know what I don't know. And so the goal there, you get 30 minutes to kind of, as the adage goes. And I think it's so weird and gross sounding, but to pick somebody's brain about the questions that you have. And I think that's a really good way to go into it. But it also gives you peace of mind knowing you've got the answers. But it also kind of is like a test scenario where you can go in and say, okay, yeah, I did click with this person. I can see when those contracts start coming in, I can go to them. So those are some options that I offer. And I absolutely, I adore it. I love working with bloggers and I love seeing how the industry has continued to change and how these businesses have grown and they are becoming such powerhouses in their industries. And I just think it's just, it's so impressive. So if you're, if you need a lawyer and you want to talk to somebody, I'm happy to do so. I even have a special URL that I came up with recently because I. I'm a URL buyer, so you can go to foodbloglawyer.com so because I love the food bloggers so much and I've had the pleasure of working with them over the years, or listlegal is my firm and if you do want to DIY businesses, offers templates that really are there for bloggers and influencers. Because I know it's hard sometimes when you're like, I want to buy a privacy policy, but I don't know if they deal with bloggers or if this is meant just more for a small business that has a website. Because your needs are going to be different just because of the type of information you're collecting, particularly if you're doing sponsored content and ads and things like that.

Your work has been super helpful for us. Like I said, it's really nice for us to know when something comes in, where do we route that to? And that's just such a wonderful thing to have somebody who's like, great. You know, we have Pat helps with finances, Danielle who helps with legal. So that's been a huge help. And I know that these now seven different podcast episodes you've done are always helpful for people as well to get a pulse on what's happening. So thanks for coming on, Danielle. Really appreciate it.

Thank you so much for having me. It's been a pleasure. Hello.

Hello. Hi there, Leslie here from the Food Blogger Pro team. Thank you so much for tuning into this episode and we really hope that you enjoyed it. Before we sign off, I wanted to mention a really exciting live event that we have coming up on April 14, and it's a live Q and A all about keyword research with Food Blogger Pro expert Casey Marquis. So he's going to be joining Bjork to answer all of your questions about keyword research during this live Q and A. So normally our live Q&As are actually exclusively for FoodBlogger Pro members only, but this one is live to the everyone, to the entire public. So whether you're a member or not, we really would encourage you to come. If you really want to learn more about keyword research and SEO, it's just going to be a fantastic time. So if you'd like to get registered, the Q and A is going to be on April 14th at 4pm Eastern, 3pm Central, and you can get registered by going to foodbloggerpro.com keyword and there you'll be able to register by putting in your name, your email, and a question you have about keyword research. So maybe you're wondering how to get started or you have a specific question about domain authority or search volume. You can ask all of those questions and then we'll be really excited to hit all of them and as much as we can during the Q and A. So again, you can get registered by going to foodbloggerpro.com keyword and we can't wait to see you there on April 14th. All right, that's all we've got for you in today's episode. Thanks again for tuning in. And until next time, make it a great week.

Sam.