Blog: Consumer Privacy
Page 6
Privacy Considerations for Remote Work and Employee Monitoring
Remote work has fundamentally changed how companies worldwide manage their teams. A 2025 ExpressVPN survey found that 73% of US-based employers now use online monitoring tools. This shift raises both legal and ethical questions. Employers want visibility into how employees spend their work time. Employees expect privacy and transparency. The big...
BYOD GDPR Compliance: Best Practices for Protecting Personal Data
Many organisations allow their employees to use personal laptops, phones, or tablets to access business accounts, networks, emails, or databases. However, while this is a common practice, there are a number of steps that you need to follow to make sure that any "bring your own device" (BYOD) practices that...
How to Train Your Staff to Respond to Privacy Requests Under Multiple Legal Regimes
Businesses with global operations need to have processes in place to comply with privacy laws from multiple jurisdictions. The requirements for privacy laws vary by location, but an important requirement of many major privacy laws is responding to privacy requests from individuals. This article explains how businesses with an international audience...
Jurisdictional Conflicts: What Happens When GDPR and CCPA Apply at the Same Time?
If you collect or use individuals' personal information through your website, app, or service, you likely already know that it's essential to comply with applicable privacy laws. But what happens when you are subject to both the European Union's (EU) General Data Protection Regulation (GDPR) and the California Consumer Privacy...
How to Handle Data Subject Requests When You're Unsure of the User's Location
It's very common for companies to collect and process personal data from users located all around the world. When a company collects or processes personal data from users in locations where data subject requests (DSRs) are legally allowed, the user will have the right to submit a data subject request...
Can You Host EU Data in the U.S. Under the Data Privacy Framework (DPF) and Still Be Sued Under GDPR?
The EU-U.S. Data Privacy Framework (DPF) was adopted in July of 2023. It effectively replaced the now-invalidated Privacy Shield and helped give some clarity to U.S. companies who receive personal data from individuals located in the EU. However, many legal experts and privacy advocates have cautioned that DPF certification is not...