As a committee member, here’s what GDPR means for you:
Keep it minimal
- Only collect the data you actually need. For example, avoid:
- Collecting emails just to contact prize winners
- Emailing groups without BCC (this exposes people’s addresses)
- Sharing student emails with external companies (even if they’re linked to your society)
Be transparent
If you do need to collect personal info (e.g. for event sign-ups), you must:
- Clearly explain how the data will be used
- Ask people to opt in (not opt out) to receive emails from you
Just giving an “opt-out” option is not enough to meet GDPR rules — and it could lead to serious consequences.