Blog: Legal Requirements
Page 7
Jurisdiction-Aware Data Mapping: A Legal Guide to Privacy Compliance Across Borders
If your business collects, stores, or processes personal data, you are subject to privacy laws. But if you operate across different regions or serve users in multiple countries, your compliance obligations grow quickly. Laws such as the GDPR (EU), UK GDPR (UK), CPRA (California), and the LGPD (Brazil) all apply...
What Employers Can (and Can't) Monitor on Personal Devices Under Global Privacy Laws
Employers who monitor their employees' personal devices–including laptops, smartphones, and tablets–need to understand how to comply with applicable privacy laws. This article explains what employee monitoring is, details some of the main global privacy laws that apply to employee monitoring, and includes guidelines for compliance. What Is Employee Monitoring on Personal Devices? Employee...
When Privacy Laws Collide: How to Handle Conflicting Legal Obligations Across Borders
Different countries can at times have wildly diverging privacy laws. But for large multinational companies or even small companies operating across borders, they may be subject to more than one privacy law at a time. Working out how to comply with these issues can be difficult, and fines or other...
BYOD GDPR Compliance: Best Practices for Protecting Personal Data
Many organisations allow their employees to use personal laptops, phones, or tablets to access business accounts, networks, emails, or databases. However, while this is a common practice, there are a number of steps that you need to follow to make sure that any "bring your own device" (BYOD) practices that...
How to Train Your Staff to Respond to Privacy Requests Under Multiple Legal Regimes
Businesses with global operations need to have processes in place to comply with privacy laws from multiple jurisdictions. The requirements for privacy laws vary by location, but an important requirement of many major privacy laws is responding to privacy requests from individuals. This article explains how businesses with an international audience...
How to Handle Data Subject Requests When You're Unsure of the User's Location
It's very common for companies to collect and process personal data from users located all around the world. When a company collects or processes personal data from users in locations where data subject requests (DSRs) are legally allowed, the user will have the right to submit a data subject request...