I am the DBA (Database Administrator) of an online group. We store a few bits of personal data for our members. Name, Age, Email. Nothing huge. The rest of the data is specific to our group.
I don't believe we need to do anything specific but I wanted to check.
The thing that I believe makes this complex is that I think there are possibly different countries laws that apply: I (the DBA) live in the UK. About 4/5 of our members are US based. A spattering of members from EU countries. The data is stored on a server in Canada.
Based on this website, in the UK we are based as a hobby group and thus I do not need to do anything. What I don't know is if any other countries law would apply?
Thanks for any help!