Effective data protection in online commerce GDPR in e-commerce requires a transparent privacy policy, consent management, technical security, data retention and deletion rules, and audits.