Blog - Page 17
Legal articles in easy to understand language.
How to Handle International Data Transfers After Schrems II: A Startup's Guide
Schrems II is an important legal ruling from the European Court of Justice, made in 2020. The ruling invalidated the EU-US Privacy Shield, which was an agreement covering data transfers between the two countries. There are a number of ways in which data transfers can still take place, including Standard Contractual...
Can You Use Consent as a Catch-All Legal Basis? Pros, Cons, and Risks
Consent is the most visible legal basis under GDPR, but it's also one of the most misused. Many companies rely on consent for all types of data processing, only to discover they've made their compliance harder, or illegal. You need to have a lawful basis for collecting or using personal data...
How to Handle User Requests for Data Access, Deletion, and Portability
You've got your Privacy Policy, and you're fully compliant with data protection legislation. But part of your duties involve being ready to handle the following requests: Access to data Requests for deletion (sometimes known as the "right to be forgotten" Portability requests (receive a copy of their personal data to transfer to another...
Cookie Consent in SaaS Dashboards: Session Recording, Heatmaps, and A/B Testing Compliance
Software as a Service (SaaS) apps must comply with data privacy laws and requirements when handling protected personal information, including personal information collected through the use of cookies. Most SaaS apps include cookie banners on their marketing site, but keep tracking users after login. If your dashboard uses session recordings, heatmaps,...
Withdrawal of Consent: A Tactical Guide to Implementing Consent Withdrawal
Implementing effective consent withdrawal mechanisms is critical for legal compliance. Consent withdrawal allows users to revoke previously granted permissions for data processing, including cookie tracking, CRM data usage and marketing communications/emails. This guide covers three critical areas when it comes to consent withdrawal: cookie consent banners, CRM systems, and email marketing...
Consent Lifecycle Management: How to Collect, Store, and Respect User Consent
Consent lifecycle management is an increasingly important aspect of doing business online. As data protection and privacy laws continue to expand across the globe and get more strict, businesses must be mindful of every step of the consent lifecycle management process, from how consent is collected, to when collected personal...