I own a .com cosmetics website where users leave their personal information including age range, skin tone and skin concerns (acne, eczema etc) and they have an option to show or hide this information on their public profile. Giving them an option to hide this information is enough not to violate their privacy or do I have to do something else?
Also in case a user from Europe, where data collection and protection is more strict than US, registers on my website how do I ensure I follow European private data regulations?
So, for me, IF I were thinking about this I'd do two things:
1- I'd "google it" as that info is "out there" almost assuredly;
2- I'd HIRE an attorney to handle, as it should be no more than an hour or two of work
and if the attorney messed up, you have a lawsuit against him/her to cover the mistake(s)
What I would not do is trust any (maybe even mine?) "free" advice on a legal forum.
Good luck with it!