EMI & GDPR: FAQs

We are less than a month away from the launch of the EU’s new General Data Protection Regulation (GDPR). While the regulation is for the Europe, it has global implications since any organization that deals with Europe and its citizens need to comply.  EMI understands the implications and has put together a series of FAQs to review to help you get a better idea what GDPR is and what EMI are doing to get and maintain compliance.

What is GDPR?

GDPR goes into effect on May 25, 2018.  At this time all organizations that do business in the EU or with EU citizens must be compliant.

Is EMI Compliant?

We are working with all our partners to ensure we are GDPR complaint.  At this time, over 90% of our network is compliant, and the rest will be by May 25, 2018.

How will you maintain compliance with the survey sample you provide?

We maintain a strict partner review program with our partners.  We are also reviewing all surveys we provide sample for to ensure that none of the GDPR regulations are broken.

What constitutes personal data?

Personal data is any information related to a natural person or ‘Data Subject’, that can be used to directly or indirectly identify the person. This includes:

• Name
• Address
• Email Address
• Home Phone Number
• Mobile Phone Number
• Birthdate
• Mobile Device Identifier
• IP Address
• Photographs
• Audio / Video Recordings
• National Identifier Numbers (Driver’s License, National Insurance, Etc.)
• User Identifiers (Assigned by Your Organization)
• Social Media User Names
• Cookie / Tracking Pixel / Tag Data

Are there any changes when surveying minors, beyond ESOMAR regulations?

Yes, GDPR requires that parental consent be given for the processing of any personal data of children under the age of 16.  Member states may legislate for a lower age of consent, but this will not be below the age of 13.

Want more details on EMI’s GDPR compliance plan?  Click the button below to read our commitment to GDPR document.