Blog: Legal Requirements
Page 9
Does the GDPR Apply to Employee Data for U.S. Companies with EU Contractors?
The General Data Protection Regulation (GDPR) imposes strict obligations on companies around the world when it comes to how they can process the personal data of EU residents. U.S.-based companies that work with EU-based freelancers, contractors, or remote hires often aren't sure whether or not the GDPR applies to the handling...
How U.S. Companies Can Inadvertently Trigger LGPD Enforcement in Brazil
Brazil's Lei Geral de Proteção de Dados (LGPD) has strict compliance requirements for companies that handle the personal data of Brazilian residents. U.S.-based companies - namely eCommerce and SaaS companies - may be required to comply with the LGPD if they have customers or users located in Brazil. This article will...
How to Handle Consent for Minors: Complying with US COPPA, EU & UK GDPR, and Other Emerging Privacy Laws
If you make websites, apps, or games for kids, or services that are likely to be used by them, you need to make sure you comply with legal rules relating to minors. In particular, a number of different privacy laws, including the Children's Online Privacy Protection Act (COPPA), the General Data...
Third-Party Risk Management (TPRM) Guide: What It Is
With increasing cyberattacks and data breaches, as well as stricter privacy laws, organisations are increasingly implementing measures to protect themselves and their data. One necessary step is called third-party risk management (TPRM), which helps to protect your business against risks from partners, vendors, contractors, and other third parties that you...
Managing Consent in a Multichannel Marketing Strategy
If your business connects with users via email, SMS, websites, and apps, you may be collecting personal data across multiple legal risk zones. Here's how to manage consent across all touchpoints and stay compliant with privacy laws like GDPR, CCPA, and more. This article explains what multichannel marketing is, why you...
How to Handle International Data Transfers After Schrems II: A Startup's Guide
Schrems II is an important legal ruling from the European Court of Justice, made in 2020. The ruling invalidated the EU-US Privacy Shield, which was an agreement covering data transfers between the two countries. There are a number of ways in which data transfers can still take place, including Standard Contractual...