Jun 7, 2018
Data privacy regulations worldwide are evolving rapidly. In particular, GDPR (General Data Protection Regulation) in Europe was introduced on May 25, bringing strict penalties of up to 4% of gross annual worldwide revenue or €20M (whichever is greater) for each violation. This new legal protocol has changed the posture of many organizations globally with respect to the collection of personal information. And these rules can apply to companies based in any country, and customers based in any country, if a company has any sustained business presence in Europe (such as a small sales or support office) or does business with any European subjects.
The Treasure Data JavaScript SDK and Android, Unity and iOS SDKs are all able to collect data that counts as personal data under GDPR. To protect Treasure Data customers (and Treasure Data) from legal jeopardy under GDPR, the SDKs have been updated to minimize the collection of personal data by default. Treasure Data customers who use such personal data must make code changes to continue to collect such data.
For the JavaScript SDKs, this personal information includes the td_client_id and IP address of a web site visitor. For the mobile SDKs, the personal information includes the td_uuid and IP address of the application sending events.
GDPR-ready releases of our SDKs have been made available prior to the May 25 GDPR deadline, including:
Release 2.1.0 (JS SDK) - https://github.com/treasure-data/td-js-sdk#data-privacy
Release 0.1.9 (Unity SDK) - https://github.com/treasure-data/td-unity-sdk-package#gdpr-compliance
Release 0.1.27 (iOS SDK) - https://github.com/treasure-data/td-ios-sdk#gdpr-compliance
Release 0.1.18 (Android SDK) - https://github.com/treasure-data/td-android-sdk#opt-out
Developers using the SDKs should upgrade to the latest SDK to ensure GDPR compliance.
Then, after appropriate reviews by your company’s privacy officer and legal counsel, you can explicitly enable collection of personal data for events if this is in line with your legal obligations and your company’s chosen data privacy posture.
The documentation for each SDK, hosted in GitHub, explains the new data privacy-related controls and how to re-enable data collection. If you have technical questions about the use of the SDKs, contact Treasure Data support or customer success for implementation guidance.