WIth the GDPR, it applies to all companies. regardless of where they are based, including American companies so long as they collect and process information on any EU citizen. Any information that can be used to identify an EU citizen. That would include a user account that we have to sign up for, or GPS data that could be cross referenced against other metrics to pinpoint and "anonymised" user.
All user data processing is on an opt in basis. You can no longer have one wide reaching tick yes box to agree to our terms. Each use of the data has to be individually agreed to. The useage also has to be stated in clear and plain language. No legal gobbledygook! The potential fine for a breach is 20 million, or 4% of World Wide annual turnover. Which ever value is higher. The potential fines can be massive!
As an EU citizen, I never agreed to have my data collected in such a manner to use a device I purchased in good faith! I was also not informed of such a requirement at the time of purchase! So unless GoPro get this sorted, I expect and would encourage all EU users that are angry about this to get ready to bombard their data protection commissioners on or after the 25th May 2018.
