The General Data Protection Regulation (GDPR) goes to great lengths to provide control to users concerning their personal data. It requires organizations, both data controllers and processors, to have appropriate mechanisms to guarantee that all personal data is adequately protected. The term “appropriate” indicates that Article 32 of the GDPR…

China has passed its comprehensive data protection law that came into effect on November 1st, 2021. China’s PIPL imposes very stringent obligations on how organizations process and disclose personal information. PIPL is said to be “China’s GDPR” based on its strict and far-reaching scope. Both GDPR and PIPL have extraterritorial…

The California Privacy Rights Act (CPRA) is California’s equivalent of the European Union’s General Data Protection Regulation (GDPR). Its principal purpose is to ensure that businesses dealing with California consumers’ personal information take the appropriate measures to protect the privacy and integrity of their data. Furthermore, it requires businesses to…

Data classification involves identifying and categorizing all data in a database into certain types based on their associated risk value. For instance, details such as home address and contact details of a British resident are classified as PII per the GDPR. Data can be classified in a number of different…

When a person logs on to a website, the server assigns them a distinctive, user-specific identity. This identity is stored on the mobile or computer on which the browser is running. In case the user enters the website again, the browser sends cookie information to the server, allowing the website…

The California Consumer Privacy Act was drafted to protect an individual’s personal data. This Act was designed to make organizations responsible custodians of the data they hold. If an organization fails to protect this data, it can face serious penalties and fines. This article will talk about all the potential…

The CCPA affords users a whole host of new rights that include the right to transparency related to data collection, right to be forgotten, right to opt out of having their data sold or shared, as well as the opt in requirement in case of minors. Privacy regulations drive organizations…

The global hunger for data collection is increasing exponentially. With businesses starting to collect more and more personal data, a rapid emergence in data privacy laws and regulations can be observed worldwide. The opt in consent model requires a user to perform an affirmative action before they can be sent…

The consistent increase in frequency and severity of data breach incidents, coupled with the introduction of data privacy regulations such as GDPR and CCPA (recently amended by the CPRA), is encouraging organizations to revisit their privacy operations and how they handle their consumers’ personal information. Data discovery, at its most…