Hey Dino,

As this is a legal issue I need to first cover my butt and make it clear that I am not a lawyer nor am I qualified to offer legal advice. If you want to be certain you have a plan that covers you completely then you may want to seek out the advice of a lawyer.

That said, I can tell you what my personal attitude is towards this and what I am doing.

My personal attitude is that this is not as big of an issue is it is being made out to be, especially for small businesses such as musicians even more so for those outside of the EU. I have been working online for more than a decade and have seen a lot of legislation come into effect that causes quite a lot of stir, only to settle down and become a fairly minor issue. I could be wrong, but that is what I predict will happen here. The good news is that most of the services you are already using to collect and pass data (aweber, paypal, etc) are already GDPR compliant and you should already have a privacy policy that will cover most things.

For my part, what I have done is change my privacy policy to address the GDPR more directly. You can find free GDPR privacy policy generators online. Here is one example: https://dsgvo-muster-datenschu.....e/?lang=en

You might also add something like https://wordpress.org/plugins/.....ompliance/ to your site which will help clean things up as well.

Do keep in mind that this is something that only effects the EU. It does theoretically effect people who are getting traffic from the EU, but how they could ever enforce that outside of the EU seems a bit unclear.

If you want to be certain that you are not at any risk you would need to refer to a lawyer.

Please let me know if I can help with anything else.

Happy to help Dino. Cheers.