Old topic revisited: gdpr and guests

Were all guests sent an opt-in email because we have some of their data? Our VPM asked because he just learned about this and he never received an opt in email. I told him members were grandfathered in.

Couldn’t find in support docs or forums.

YES, anyone added to the FTH server from the GDPR mods receives an email to opt-in.

Previously anyone who was on the server before GDPR were not, members had signed the membership form and that used to be enough. but alas no longer.

Does this apply to non-members (guests, prospects, etc)? Did these people receive an opt in email?

if they were on the system when the GDPR was implemented they did not receive any emails.

Anyone added after GDPR was sent an email.

Moving forward, what is likely is that non-member information will be retained for a limited time in the near future. Brian and I and the rest of the FTH Ambassadors have been discussing limiting the retention time of non-member information, and I am edging very close to implementing some code related to that. (Still mulling over the implementation in my mind.)

We have discussed what the time limits should be, but I am sure that will probably be discussed more after I actually implement something. Also, we have discussed what should happen after the time limit has passed. I believe Brian favors deletion of the data... I am more inclined to want to just deactivate those people with an opt-in email sent to them at that point to allow them to "re-opt-in". (If the do not opt-in again, then they are deleted.) We could end up with a hybrid approach, also. I think the deletion approach is probably fine for people on the Prospects and Guests lists, but I think the "re-opt-in" approach is probably better for people on the Former Members list.