Readers of our first post, GDPR update, in this series have already worked through Step 1: Transfer Mapping.  Part of that step was determining what countries you’re exporting data to.  Now, we move onto Step 2: Transfer Tools.  Truth be told, Step 2…

Personally Identifiable Information (“PII”) has become a buzzword in the privacy law world the last few years, and it is heavily protected by rules and regulations around the world, such as the General Data Protection Regulation (GDPR). Companies that fail…

Last week the European Commission announced that the Standard Contractual Clauses (the “SCCs”) are being updated.  These changes primarily apply to entities exporting data out of the European Economic Area.  Starting in 2021, whether you’re a controller or a processor (or both!), you’ll…

You’ve got customer names. You’ve got user addresses. Your analytics are starting to pile up. But, you haven’t even started to figure out how to process, store, and maintain this data. More than that, you don’t know what your responsibilities…