Blog: EU Privacy Laws
Page 4
Serving U.S. Customers from the EU? Key GDPR Considerations Explained
The General Data Protection Regulation (GDPR) is an EU law that works to protect the privacy rights of EU residents. Businesses that collect or process personal data from people within the EU must comply with the GDPR. But what about if your company is located in the EU and your customers...
Does the GDPR Apply to Employee Data for U.S. Companies with EU Contractors?
The General Data Protection Regulation (GDPR) imposes strict obligations on companies around the world when it comes to how they can process the personal data of EU residents. U.S.-based companies that work with EU-based freelancers, contractors, or remote hires often aren't sure whether or not the GDPR applies to the handling...
Third-Party Risk Management (TPRM) Guide: What It Is
With increasing cyberattacks and data breaches, as well as stricter privacy laws, organisations are increasingly implementing measures to protect themselves and their data. One necessary step is called third-party risk management (TPRM), which helps to protect your business against risks from partners, vendors, contractors, and other third parties that you...
How to Handle International Data Transfers After Schrems II: A Startup's Guide
Schrems II is an important legal ruling from the European Court of Justice, made in 2020. The ruling invalidated the EU-US Privacy Shield, which was an agreement covering data transfers between the two countries. There are a number of ways in which data transfers can still take place, including Standard Contractual...
Is Google Analytics Illegal? Understanding the EU Rulings
Whether you use Google Analytics to track website traffic, interpret user's online behavior, or in conjunction with Google Ads, it's important to comply with privacy regulations that protect your users' data. Website owners who use Google Analytics should understand how European Union (EU) rulings impact the platform. This article explains what...
User Consent or Legitimate Interest? A GDPR Compliance Guide for Businesses
If you collect personal data from EU residents, GDPR requires you to have a lawful basis for doing so. Two of the most common - and often confused - bases are user consent and legitimate interest. Here's when and how to use each. This article explains who needs a legal basis...