The GDPR (General Data Protection Regulation) comes into effect on Friday (25 May 2018). It enhances existing data protection laws across Europe, creating a single European framework and approach for how personal data should be managed. As a European law, not all Australian and New Zealand businesses will be affected.
With regard to applicability of the General Data Protection Regulation (GDPR) to companies operating in Australia and New Zealand, we would direct clients to the OAIC guidance note available here.
Ticketmaster has a dedicated Global Privacy Office and operates under a global privacy control framework. Our Global Privacy team has been working hard to prepare for the implementation of GDPR.
One important step which we are proud to announce is that the Ticketmaster family has formally applied for both Controller and Processor Binding Corporate Rules (BCRs). BCRs are considered the gold standard of compliance under the GDPR and ensure that, no matter where personal information is handled or stored within the Ticketmaster family, we are accountable to European standards which are currently considered the highest threshold of compliance, globally.