How does GDPR apply to me?

GDPR applies to all organisations and individuals who work with personal data. Under GDPR, a ‘DataSubject’ is a natural person whose data is to be protected. Further, GDPR identifies two categories of data users. The two categories are ‘Data Controllers’ and ‘Data Processors’. A data controller states how and why personal data is processed. A data processor is the party doing the actual processing of some or all of the data on behalf of a data controller. doTERRA has identified itself as a data controller. In addition, doTERRA has also identified its Wellness Advocates as data controllers. Accordingly, doTERRA is updating its Wellness Advocate Agreements and Policy Manuals across Europe to contract with its Wellness Advocates as data controllers as well as define their relationship to doTERRA as data controllers.