The Impact of GDPR on Marketing, PR and Outreach for Startups

by Startacus Admin
The arrival of the European Union’s GDPR replaces existing data protection laws. Here's some thoughts on how it will impact on how marketing and PR is undertaken.
The growth in data protection legislation takes a big step forward this year. The arrival of the European Union’s General Data Protection Regulation (GDPR) updates, replaces existing data protection laws. Its key features are the harmonisation of data privacy laws across Europe, including Britain, whatever happens later with Brexit. The aim is to protect privacy and create a common method for all business, including marketing and PR when the laws take force on the 25th of May.
The GDPR Effect
When GDPR takes effect, it provides everyone with various improved rights to access and understand the use of their data when supplied to business. For marketers and enterprises, the new responsibilities for accountability and governance reflect the current digital-business marketplace, and go some way beyond the current data protection landscape.
For example, any small business can now collect millions of pieces of personally identifying data. And, it may not have the knowledge or staffing to manage them in an appropriate and secure manner. The major change when adopting GDPR is that each business must demonstrate compliance by design, proving that data retention policies and services are fit for purpose.
This applies to both internal data of employees, and external from consumers, customers and prospects. There are many useful resources for marketers concerned about how GDPR will impact their business and operations, including this handy GDPR guide from AppInstitute. As far as marketing departments are concerned, they need to be as on-the-ball as IT and other areas of a company.
Marketing, Startups and the GDPR
The Data Protection Act expects businesses to only hold the minimum amount of identifying data a company needs. So, for an all-electronic marketing company, an email address would be sufficient. GDPR may also include IP addresses, so goes far beyond this, with large fines, up to 4% of global turnover, for non-compliant companies.
Any marketing and PR company should be aware of their current and future data identifying plans, and ensure that key responsible staff are identified. Any other organisations that information can be shared with should also be identified.
For any new data gathering procedures, ensuring that the right to be forgotten is easily accessible through that mechanism, with all privacy notices updated to reflect the new laws.
Startups will be at an advantage, as they can build new IT systems from scratch that meet the demands of the legislation, and companies that have been planning for GDPR will have been careful to migrate data to compatible platforms.
Companies that may struggle include small marketers who are focused on a few clients, and have not considered the data implications of sharing information from or with larger businesses. Some companies will not deal with non-compliant businesses, which has large implications for smaller firms that deal with big business.
All types of companies should ensure the whole company is aware of new privacy information. They should identify what the lawful basis for any data processing activity is, with updated documentation. Procedures need to be in place for handling access requests and consent to store data.
When it comes to data breaches, companies need to report these, which will prevent companies from trying to bury bad news. While a boutique marketing practice might not think it would be a target, automated data theft means anyone can be a victim, so the correct procedures need to be in place to detect data loss or hacking, as well as how to report and investigate a personal data breach.
Any marketing business that focuses on the younger demographic need to be focused on the new rules about parental or guardian consent for any data processing activity, which could complicate sign-ups and sharing of their details.
Finally, every firm will need a data protection officer with responsibility for compliance and information sharing. The complexity increases for those working outside the EU, with details available from the ICO. Also, whenever Brexit does occur, in whatever form, British marketing firms will need to stay on their toes to keep up with any changes. Current government thinking is a rewrite of the rules to make for improved trade deals with the US and others. While that may have longer term benefits, it could cause chaos in the interim.
Subscribe to our newsletter
If you would like to receive our startup themed newsletter, full of the latest startup opportunities, events, news, stories, tips and advice, then sign up here.
Tobin Capital continues to expand its portfolio by investing in pop-up marketplace Sook, the startup on a mission to revolutionise the high street.

Sodexo and L Marks open call for applications from innovative startups and scaleups to join their inaugural Sodexo Healthcare and Seniors Accelerator.

The lowdown on FuturePlus, the startup that's on a mission to make sustainability accessible, achievable and affordable for all businesses.

John McLachlan, author and co-founder of Monkey Puzzle Training & Consultancy examines the differences between action-oriented and reflective leaders and which approach is best.

The fitness app that's not just about physical fitness; GoJoe helps employers to engage, motivate and connect their people across all pillars of wellbeing.

Now in its fifth year, North West England water firm United Utilities opens call for Innovation Lab, its pioneering ideas incubation programme.

Not-for-profit OneTech has spunout from Capital Enterprise to expand its offering and continue its mission of creating a more equitable, diverse and supported startup ecosystem.

London-based startup Deep Render tackles the internet’s data and bandwidth challenges via its innovative AI-powered file compression technology.

The lowdown on Dublin-based startup and NUI Maynooth spin-out Neuromod Devices and its innovative evidence-based bimodal neuromodulation treatment for chronic tinnitus.

With the clear shift towards generative AI, Richard Hayes, search director at digital marketing agency Catalyst explores what it means for SEO...
Published on: 20th February 2018
If you would like to enable commenting via your Startacus account, please enable Disqus functionality in your Account Settings.







- Startup Sook Receives Investment from Tobin Capital 24th May 2023 Tobin Capital continues to expand its portfolio by investing in pop-up marketplace Sook, the startup on a mission to revolutionise the high street.
- L Marks Seeking Startups and Scaleups for Sodexo Healthcare and Seniors Accelerator 23rd May 2023 Sodexo and L Marks open call for applications from innovative startups and scaleups to join their inaugural Sodexo Healthcare and Seniors Accelerator.
- United Utilities Innovation Lab launches call-out for innovative ideas for fifth programme 18th May 2023 Now in its fifth year, North West England water firm United Utilities opens call for Innovation Lab, its pioneering ideas incubation programme.
- OneTech Spins Out from Capital Enterprise to Support Underserved Communities in Tech Across the UK 18th May 2023 Not-for-profit OneTech has spunout from Capital Enterprise to expand its offering and continue its mission of creating a more equitable, diverse and supported startup ecosystem.