Blog: EU Privacy Laws
Page 2
Data Redaction Under GDPR: What Must Be Hidden Before You Respond to a DSAR
If you are subject to the European Union's (EU) General Data Privacy Regulation (GDPR), you will need to fulfill Data Subject Access Requests (DSARs). Certain personal data must be redacted before responding to DSARs. This legal and operational guide explains what the GDPR is and who it applies to, how DSARs...
How to Verify the Identity of a Data Subject: Balancing Access Rights and Fraud Prevention
Businesses are increasingly required to walk a fine line between two competing responsibilities: allowing data subjects to exercise their legally-granted privacy rights under laws like the GDPR, and preventing unauthorized access to personal information that could lead to identity theft, fraud, or data breaches. When someone submits a request to do...
Anonymized and Pseudonymized Data: Are They Subject to Data Subject Requests?
Privacy laws like the GDPR and CCPA/CPRA grant data subjects several rights over their personal data, but what happens when that data is anonymized or pseudonymized? Do data subject rights still apply, and if so, to what extent? The legal implications of these two de-identification methods differ fundamentally. Truly anonymized data...
How to Deny a Data Subject Request (Legally): Lawful Grounds, Template Language, and Documentation
Under privacy laws like the GDPR and CCPA/CPRA, data subjects can submit formal requests to exercise their user rights over their personal information. But these laws also allow businesses to deny those requests under specific, lawful circumstances. If someone bombards your business with frivolous requests, tries to extort a payout, or...
Are You Liable for Your Vendor's GDPR Violations? Understanding Joint vs. Independent Controller Risk
If your business operates in the European Union (EU) or handles EU residents' personal data, you're likely familiar with the General Data Protection Regulation (GDPR). This regulation sets strict rules for how personal data must be processed, stored, and transferred. But what happens when you outsource tasks to third-party vendors,...
Privacy Law Conflicts: When U.S. Employer Policies Clash With EU Employee Rights
U.S. companies with employees located in the European Union (EU) need to ensure their policies are in compliance with EU privacy laws. This article explains what U.S. employers need to know to protect EU employee rights, including what the EU's main privacy law requires and a list of practical compliance tips. What...