All IONOS websites include an SSL certificate. This protects any data that visitor's transmit to and from your website. However, there are also other regulations that may affect your small business website. Canada currently has its own regulation in the works, the Canadian Consumer Privacy Protection Act (CPPA). If passed, it would take over from the Personal Information Protection and Electronic Documents Act (PIPEDA) and be one of the strictest privacy laws in the world. Fines could be as much as 3% of an organization’s worldwide annual revenue or up to 10 million Canadian dollars. You are required to obtain user consent and be clear about how a user’s data is collected and used. You can do this with a privacy policy . If a user requests access to their personal data, you must be able to provide it to them. The same applies to deleting their data if they ask. Although the General Data Protection Regulation or GDPR is largely an European Union (EU) initiative, if your website handles data from visitors who live in the EU, then your website has to comply with the GDPR.