Is Your Nonprofit at Risk? Donor Data Protection Is a Global Priority
GDPR Affects the US, Too
Although the GDPR is European law, it affects people and organizations around the world, including U.S. nonprofits. Here’s why: the GDPR requires that entities anywhere in the world protect the information of European citizens and residents. The rationale behind the GDPR is that Europeans have the right to be forgotten—and protected—in the digital world and also that Europe wanted to update laws that existed, but were found to be inadequate.
However, if you think that you’ll skate through because the U.S. does not have this law, you’re making a serious mistake on several grounds.
1. One, can you be confident that every single person on your database resides in the U.S. exclusively? In today’s global world, that’s not something most organizations can know for sure.
2. Further, certain U.S. states have started to legislate laws concerning data information and privacy, which will only grow in the coming years, especially as every more massive data breaches occur, such as the recent Marriott breach, which exposed information of 50 million people. People increasingly want protection from thieves, hackers and even corporations and the government of very personal, private and sensitive information.
3. Imagine a few scenarios that can compromise your nonprofit, even unintentionally. A person in a European country gets onto your website and signs a form that allows them to enter a telephone number or address that is non-U.S., or a person makes a donation to your organization using information that is not U.S. based, such as European currency. Just these two situations would create legal exposure for your nonprofit.
The reality is that we all have a right to privacy in the U.S., even if it is not expressly stated in the Constitution. However, the Bill of Rights does protect privacy in the 1st Amendment concerning religion, 3rd Amendment regarding the home, the 4th Amendment related to unreasonable searches and the 5th Amendment concerning the right to protect oneself against self-incrimination. Today, our leaders and politicians continue to try to guide the nation in that spirit, especially when their constituents to whom they are beholden become more vocal about the issue. It’s fair to say that the public is tired of having their private information compromised, exposed or shared, even if it is with regulators.
Paul D’Alessandro, J.D., CFRE, is a vice president at Innovest Portfolio Solutions. He is also the founder of High Impact Nonprofit Advisors (HNA), and D’Alessandro Inc. (DAI), which is a fundraising and strategic management consulting company. With more than 30 years of experience in the philanthropic sector, he’s the author of “The Future of Fundraising: How Philanthropy’s Future is Here with Donors Dictating the Terms.”
He has worked with hundreds of nonprofits to raise more than $1 billion dollars for his clients in the U.S. and abroad. In addition, as a nonprofit and business expert — who is also a practicing attorney — Paul has worked with high-level global philanthropists, vetting and negotiating their strategic gifts to charitable causes. Paul understands that today’s environment requires innovation and fresh thinking, which is why he launched HNA to train and coach leaders who want to make a difference in the world.
