Blog: How to
Page 2
Identity Verification Standards Under GDPR vs. CCPA/CPRA
If your business collects customer data, you're probably familiar with data subject (customer) requests. They often run along the lines of "I want to see the data you hold on me," or "I want you to delete everything you have on me." These requests are common, and it's your job to...
Choosing a Redaction Tool: Legal Requirements, Features to Demand, and Pitfalls to Avoid
Data privacy breaches can cost companies millions of dollars and erode customer trust overnight. Because of this, redaction has become a non-negotiable practice for businesses. Using a redaction tool helps you ensure that personal data, trade secrets, and confidential details stay permanently hidden. But not all redaction software is built equally....
Metadata Matters: Why Redacting Visible Text Isn't Enough to Comply with Privacy Laws
Privacy laws require organizations to take steps to protect personal data, including redacting certain information when sharing personal data with third parties or responding to Data Subject Access Requests (DSARs). Regulators and courts are increasingly attentive to the risks posed by hidden metadata. Under the GDPR, for example, supervisory authorities stress...
How to Verify the Identity of a Data Subject: Balancing Access Rights and Fraud Prevention
Businesses are increasingly required to walk a fine line between two competing responsibilities: allowing data subjects to exercise their legally-granted privacy rights under laws like the GDPR, and preventing unauthorized access to personal information that could lead to identity theft, fraud, or data breaches. When someone submits a request to do...
Data Privacy in M&A Transactions: Due Diligence Risks and Red Flags
During mergers and acquisitions (M&A), one company joins or purchases another company. In the process, a lot of information is shared, including the personal information of customers or clients, as well as information on employees. This information-sharing process, called due diligence, raises cyber security and privacy risks for personal data. A number...
How to Deny a Data Subject Request (Legally): Lawful Grounds, Template Language, and Documentation
Under privacy laws like the GDPR and CCPA/CPRA, data subjects can submit formal requests to exercise their user rights over their personal information. But these laws also allow businesses to deny those requests under specific, lawful circumstances. If someone bombards your business with frivolous requests, tries to extort a payout, or...