Cybersecurity risks often come disguised in the form of unique opportunities. Most of us feel confident that we can spot phishing emails,...

Our conception of "personal data" does not always align with legal approaches. License plate numbers, ZIP codes, or even phone numbers...

Privacy notices might be the most obvious and least popular GDPR obligation. Typically, drafting a privacy notice will be the very first...

The topic of data transfers is a GDPR evergreen. In earlier articles, we covered data transfer basics, and we provided you with a...

As most areas of law, data privacy has its own language. Privacy professionals love their acronymes and abbreviations. For "outsiders,"...

Due to the vast amount of different rules and regulations in the area of privacy compliance, losing track of core requirements is easy....

Data transfers are a crucial area of GDPR compliance. If you plan to move personal data from the EU to any other region, you need to be...

Many compliance guides are tailored to highly sophisticated compliance programs. One main reason for this approach is a tendency to...

Privacy is an ever-changing area of law. As such, it requires continuous efforts for businesses and their workforce to stay on top of...

Businesses in the United States and elsewhere sometimes believe that the European Union's comprehensive data privacy law does not apply...

Because each business is different, there is a broad variety of approaches when it comes to information management and privacy compliance...

Today, U.S. lawmakers have unveiled the results of a bipartisan effort to regulate privacy rights at federal level, called the American...

Compared to the GDPR, the ePrivacy Directive and its corresponding member state laws do not get a lot of attention. This is why many...

Earlier this year, the European Data Protection Board published a report on the role of Data Protection Officers, or DPOs, under the...

In times of remote work, many companies are not bound to physical locations anymore. Where operations are not confined by location,...

According to media reports, the United States Department of Justice will file an antitrust lawsuit against Apple, Inc., on Thursday....

Even after the EU-U.S. Data Privacy Framework was established, many organizations still consider data transfers from the European Union...

The California Consumer Privacy Act (CCPA) is often described as the most comprehensive privacy law in the United States, particularly...

The GDPR emphasizes the ideas of transparency and accountability. For this reason, it requires organizations to document their processing...

A robust incident response program is an integral part of your organization’s compliance framework. Even the most careful protections can...