The following documents give guidance on ensuring that the information you collect from your customers is done so in a secure and legal manner.
They also contain best practice information.
Overview Binding Corporate Rules ("BCR") are internal rules (such as a Code of Conduct) adopted by multinational group of companies which define its global policy with regard to the international transfers of personal data within the same corporate group to...
8个中国企业需要遵守GDPR的原因 《通用数据保护条例》（GDPR）是一项全面的数据保护法律，规定了企业如何收集、处理和存储个人数据的规则。虽然它是一项欧洲法规，但适用于处理欧盟公民个人数据的任何公司，无论该公司位于何处。这意味着处理欧盟公民个人数据的中国公司也必须遵守GDPR。本文将探讨8个中国公司需要遵守GDPR的原因。 法律要求：中国公司需要遵守GDPR的主要原因之一是它是法律要求。不遵守GDPR可能会导致巨额罚款和法律后果，这可能会损害公司的声誉和财务稳定性。...
In 2021, the European Commission updated the EU Standard Contractual Clauses (SCCs) to ensure the lawful transfer of personal data to countries outside the European Economic Area, also known as third countries. The previous SCCs did not reflect the General Data...
The EU-U.S. and Swiss-U.S. Data Privacy Frameworks were developed by the U.S. Department of Commerce in consultation with the European Commission and Swiss Government, and with industry and other stakeholders, to provide companies on both sides of the Atlantic with a valid legal mechanism to comply with data protection requirements when transferring personal data from the European Union (EU) and Switzerland to the United States in support of transatlantic commerce.
The CCPA gives California consumers the right to know what personal information is being collected about them, the right to request that their personal information be deleted, and the right to request that their personal information not be sold.
The law applies to for-profit businesses that collect personal information from California consumers and meet certain thresholds for annual revenue, number of consumers, or amount of personal information collected. The CCPA also requires businesses to provide certain disclosures to California consumers about their data collection practices.
The General Data Protection Regulation is a series of laws that were approved by the EU Parliament in 2016. They came into affect on May 25th 2018.
The EU’s General Data Protection Regulation (GDPR) is an initiative by the EU to bring data protection legislation into line with new ways that data is now used.
The new regulations give users great control over their data, including the ability to export it, withdraw consent and request access to it.
It also makes data protection rules more or less identical throughout the EU, allowing for the easier transfer of data through out the European Union.
It affects any company that does business with Europe, whether they are based in the EU or not.
It serves as a leading regulatory model for other data protection authorities throughout the world.
At PrivacyTrust, we understand the critical importance of data protection in today's digital age. With the ever-increasing amount of data being collected and processed by businesses, the need for skilled professionals to manage and protect that data is more...
Introduction: Data privacy is a critical issue that affects individuals and businesses alike. The Trans-Atlantic Data Privacy Framework, also known as the EU-US Privacy Shield, is a set of guidelines that regulate the transfer of personal data between the EU and...
In March of 2022, the European Commission and the United States reached a preliminary agreement for a Trans-Atlantic Data Privacy Framework. This agreement was based on several key principles that aim to enable data to flow freely and safely between the EU and...
Our team of experienced privacy attorneys & certified privacy professionals have a proven track record of delivering privacy frameworks and data privacy solutions, tailored to your business needs.