If you send email, especially email marketing or other bulk email, then there are the two things that your business contracts must contain, even in the U.S., to be not just GDPR compliant, but GDPR-proofed. GDPR (the EU General Data Protection Regulation) requires, among many other things, that there be a contract between any data controller and data processor that covers “the subject-matter and duration of the processing, the nature and purpose of the processing, the type of personal data and categories of data subjects and the obligations and rights of the controller.” (Here is our explanation of who is a data controller and who is a data processor. If you are a business, you are at least one, and quite possibly both.)
Prefer to read it instead of listen to it? Do that here: https://www.isipp.com/blog/what-your-contracts-must-contain-to-be-gdpr-compliant-and-gdpr-proof/
The Everything Email Marketing blogcast is provided by Get to the Inbox by ISIPP SuretyMail, the founder of the email deliverability industry. For more information about how we can help you get to the inbox go to GetToTheInbox.com