Blog: Legal Requirements

Page 6

Are You Liable for Your Vendor's GDPR Violations? Understanding Joint vs. Independent Controller Risk

If your business operates in the European Union (EU) or handles EU residents' personal data, you're likely familiar with the General Data Protection Regulation (GDPR). This regulation sets strict rules for how personal data must be processed, stored, and transferred. But what happens when you outsource tasks to third-party vendors,...

Auditing Software License Compliance: A Checklist for In-House Counsel

In-house counsel plays an important role in setting up regular internal audits of software license compliance to help prevent legal liability. Their responsibilities can include identifying risks, monitoring third-party code use, and ensuring compliance with licensing terms. This article explains what software license compliance audits are and why you need them,...

AI Tools and Licensing: Who Owns the Output?

Intellectual property law is based on the idea of human originality, and ownership of creative works. But the creation of artificial intelligence (AI), and its ability to generate creative works in tandem with humans, has raised a number of questions about how these laws apply. Legal questions have also arisen in...

Dual Licensing Explained: How to Balance Open Source Principles with Commercial Profit

It's a common conundrum in the open source world: How can a business use open source software and still make money? Fortunately, the idea that companies committed to open source principles can't be profitable is a misconception This article explains what open source software is, whether open source principles are at...

Privacy vs. Productivity: Drafting Legally Compliant Remote Work Policies

Remote work is becoming increasingly common, and takes place both within one country as well as across borders. It can be flexible for employees, and helps employers to find talent further afield. However, remote work also creates privacy and security challenges, as well as questions around which labour, health and safety,...

DPF vs. SCCs vs. BCRs: Choosing the Right Cross-Border Data Transfer Framework For Your Business

In a globalized world like ours, businesses often transfer personal data across borders, whether it's sharing EU customer information with a cloud provider in the U.S., collaborating with a vendor in Asia, or managing internal data flows within a multinational corporation. For companies that are subject to the General Data...