The risks of not having a privacy policy, particularly if you collect or process user data, are potentially catastrophic for your business. Non-compliance with GDPR, the blueprint for many modern data laws worldwide, could result in a fine of up to €10 million, or 2% of the firm’s worldwide annual revenue from the preceding financial year, whichever amount is higher. And that’s the least severe infringements! Considering US businesses need to comply with GDPR if selling to EU customers, we cannot emphasize enough how important a privacy policy is for your website.