New privacy legislation – The General Data Protection Regulation (GDPR) – came into effect in May 2018. This affects all businesses who collect personal information from UK and EU citizens. If you are an Australian business engaged in email marketing to UK and EU customers, then you need to comply with the new regulations.
For more information read our guide: How to Comply with GDPR.
The new UK regulations go one step further by requiring a user or visitor to expressly agree to their information being collected, even if the information being gathered is only in relation to their site browsing and in order to provide relevant advertising, rather than to sell or use for improper purposes.
And in addition
It will be important to keep in mind that the customers may be from another jurisdiction(s) and it will be worth investigating what your site will need to do to comply with other jurisdictional requirements. As a general rule one should never assume that a policy will meet other jurisdictions requirements without at least some modification and certain investigation.