Six months after implementation of the European Union’s General Data Protection Regulation (“GDPR”),¹ many charitable organizations are still struggling with compliance. Our pro bono clients frequently ask whether consent is now required to send solicitations or communications via email to donors or potential donors.  Before addressing that discrete question, here are some key GDPR principles that apply to non-profit organizations:

What is personal data? Personal data encompasses any information that may directly or indirectly identify an individual (for example, a name is a direct identifying element, while a date of birth, email address, phone number, home address, or photo is an indirect identifying element).²  Personal data also includes information about the characteristics of an individual (hobbies for instance), opinions of a person, and online identifiers (cookies, IP address).  Because the definition of personal data is so broad, all charitable organizations process personal data.

What is data processing?³ Processing is defined very broadly in the GDPR and includes the collection, recording, storage, adaptation, use, erasure, and mere consultation of personal data.

Earlier this month, Proskauer filed an amicus brief on behalf of the Brady Center to Prevent Gun Violence in support of the Commonwealth of Massachusetts’ ban on assault weapons, such as the AK-47 or the AR-15, and large-capacity magazines.  We filed the brief with the United States Court of Appeals for the First Circuit in Worman v. Healey, a case challenging the ban on Second Amendment grounds.  Partner Kimberly Mottley and I led the team, with Lindsey Olson Collins and Steven A. Sutro co-authoring the brief.

Since 1998, Massachusetts has banned the sale and possession within the state of military-style assault weapons and large capacity magazines.  These same weapons were used in some of America’s deadliest mass shootings:  Sandy Hook Elementary in Newtown, Connecticut;  the Pulse nightclub in Orlando, Florida;  the Route 91 Harvest Festival in Las Vegas, Nevada;  Marjory Stoneman Douglas High School in Parkland, Florida; and most recently,  the Temple of Life synagogue in Pittsburgh, Pennsylvania. The popularity of such assault weapons among perpetrators led the New York Times to dub them the “rifles of choice for mass shootings.”

It was unlike any courtroom I had seen before. The Immigration Judge appeared on a video screen a little blurry but larger than life. My client, an eight-year-old girl, sat next to me at a long table. This proceeding in Dilley, Texas was not open to the public but was held behind two locked doors in a trailer secured within a sprawling “family residential center” that despite its friendly name, had all the indicia of a jail.

This was an expedited removal proceeding, and I was appealing an asylum officer’s negative credible fear determination for my young client. Her mother’s appeal already had been denied so this was our last chance to prevent the two from being deported. Especially considering my client’s age, I wanted to marshal the evidence and explain why the legal standard had been met in this case. “May I be heard Your Honor?” I asked. “No, you may not,” he responded. The Judge asked my client a few questions with little follow-up and denied the appeal, wishing my client, “good luck in your home country.”