Blog - Page 57
Legal articles in easy to understand language.
Apple's App Tracking Transparency
On April 26, 2021, Apple introduced App Tracking Transparency, a new feature in iOS 14.5 that will require app developers to be more transparent about what personal data they are collecting and sharing with third parties. Primarily, it's designed for serving ads later on. The app tracking transparency requirement only applies...
Service Level Agreement (SLA) Template
A Service Level Agreement (SLA) is where an organization sets out the minimum performance levels which they will deliver. These agreements are often used in IT services, software as a service (SaaS), and other similar businesses where it is essential for both parties to know what is expected from each...
"Rules for Using our Site or Service" Clauses
While a Terms and Conditions agreement isn't a legal requirement for your website, we strongly recommend having one to protect your website, your service, and your users. A Terms and Conditions agreement is especially useful for clearly and unequivocally setting out the rules for using your website or platform, by inserting...
Utah's Genetic Information Privacy Act (GIPA)
Utah's Genetic Information Privacy Act (GIPA) is a newly-introduced law that regulates how direct-to-consumer (DTC) genetic testing companies obtain consumer consent to collect, use, and disclose their genetic data. Consumers should also have the right to access and erase their genetic data from DTC companies as well as destroy any biological...
Data Security vs Data Privacy
Data security and data privacy are different concepts that people often get mixed up. Some mistakenly use them interchangeably. However, they're not the same thing. Data security protects information from unauthorized access, use, and disclosure. It also protects it from disruption, modification, or destruction. Data privacy is the right to control...
The GDPR's Anonymization versus CCPA/CPRA's De-identification
Anonymization under the EU's General Data Protection Regulation (GDPR), and de-identification under the California Consumer Protection Act (CCPA/CPRA) are both ways to protect the privacy of data subjects. De-identification is a process that can be used in the U.S. for compliance with the CCPA (CPRA). In contrast, GDPR anonymization is used...