What is GDPR and why does it matter in marketing?

• A. A global standard for email content length.
• B. A regional trademark regulation.
• C. European privacy regulation governing data collection and usage; affects consent, data handling, and marketing practices.
• D. US privacy regulation focused on consent.

Answer: (C)

GDPR is a European privacy regulation governing data collection and usage; it matters in marketing because it tightly defines how you obtain consent, how you store and use personal data for campaigns, and what rights individuals have over their information. It applies to any company processing the data of people in the EU, even if the business is outside Europe, so marketing teams must design processes with privacy in mind from the start. You need a lawful basis for processing personal data—often consent for marketing messages or legitimate interests with safeguards—and you must be transparent about what data you collect, for what purpose, and how long you’ll keep it. Consent for marketing communications must be clear and freely given, and individuals can withdraw it at any time. GDPR also gives people rights to access, rectify, erase, or port their data, and to object to certain processing like profiling and targeted advertising. That means you must practice data minimization, secure handling, and have data processing agreements with any vendors (email platforms, analytics, ad networks). Finally, non-compliance carries substantial fines and reputational risk, so list-building, segmentation, and tracking must align with these rules.