Blog - Page 20
Legal articles in easy to understand language.
Reasonable Security Measures Under the CCPA/CPRA
The California Consumer Privacy Act (CCPA), amended by the California Privacy Rights Act (CPRA), is a significant piece of legislation that protects the privacy rights of people in California. These laws set out the privacy rights of consumers in California, and establish rules for how businesses should deal with personal...
Are Consent Logs Required? How to Comply With Cookie Consent Laws
A critical yet often overlooked component of the consent management process is the consent log: a record of user consents that have been obtained. This article explains whether consent logs are required for cookie consent banners, why and when they are needed, how to maintain them in a legally compliant way,...
What are Your Legal Obligations When Using Open Source Licenses?
Open source software allows businesses to modify software source code, adapting it to their specific needs. It is often free or paid for by donations, making it a cost-effective way for any business to develop customized software. While open source licenses give users huge freedom, they come with some strings attached....
Definition of "Business" Under Privacy Laws
As a business owner, many privacy laws will apply to the operation of your business. But what exactly is the scope of these laws, and what exactly do they mean by "business"..? If you aren't sure whether or not your business is a "business" for purposes of specific laws, this article...
Do Affiliate Cookies Require Consent? Or Are Affiliate Cookies Strictly Necessary?
Affiliate cookies live in a curious gray area of privacy law. Under the GDPR and ePrivacy Directive, all cookies need user consent unless they're deemed "strictly necessary," which begs the question: where do affiliate cookies fall? The short answer is that most affiliate cookies do require consent. That said, if an...
Reasonable Security Measures Under the GDPR
The General Data Protection Regulation (GDPR) is an EU data privacy law that requires companies or organizations processing personal data, to comply with certain rules. Some of these rules are about what information you have to disclose to users when you collect or process their data. Other rules are about when...