Blog - Page 73
Legal articles in easy to understand language.
Do I Need a Privacy Policy if I Don't Collect Any Data?
If you don't actually collect any personal information, you might not need a Privacy Policy. However, many third parties and app stores require one. Also, you may be collecting protected personal information without knowing it, such as with an Analytics service. This article will look at ways you might be collecting...
Brazil's LGPD vs. the GDPR
Brazil's new privacy law, Lei Geral de Proteção de Dados (LGPD), and the EU's General Data Protection Regulation (GDPR) look pretty similar. In fact, they are practically identical in many places. However, there are a few important differences between the two laws. If you're more familiar with one than the other,...
What is a Privacy Policy?
A Privacy Policy is a publicly-posted legal agreement that discloses how a business collects, uses, shares and protects personal information. Privacy Policies are required by a number of laws and by third-party services. For example, the EU's GDPR requires a Privacy Policy for businesses that interact with users in the EU...
Washington D.C. Security Breach Protection Amendment Act of 2019
Following several other US states, and many legal jurisdictions around the world, Washington, D.C. has strengthened one of its key privacy laws: the Washington D.C. Data Breach Notification Law. The Security Breach Protection Amendment Act of 2019, B23-0215, makes several important changes to the D.C. data breach law, including a broader...
Why is a Privacy Policy Required?
Whether you're developing an app, creating a website, or selling goods through an ecommerce store, you need a Privacy Policy. But why do you need one? What will happen if you don't have one? And does anyone even read those things? Let's find out. There are many reasons why you need a Privacy...
Why the EU-U.S. Privacy Shield Was Invalidated
Editor's Note: In July of 2023, the new EU-U.S. Data Privacy Framework was adopted. On July 16, 2020, the Court of Justice of the European Union (CJEU) delivered its judgment on the case of Data Protection Commissioner v Facebook Ireland Ltd and Maximillian Schrems (otherwise known as "Schrems II"). The CJEU decided...