One aspect of e-commerce which is likely to be affected is the quantity of personal data being requested by the e-commerce site. The GDPR request necessity and proportionality, or data minimization. Where the processing and completion of an e-commerce transaction don’t need a particular personal data item, it cannot be justified for collection. Take for example, asking for home address if the item is to be supplied electronically via email.
Contributors: Chris Payne from Advanced Cyber Solutions