Blog: Legal Requirements

Page 20

GDPR Record of Processing Activities (ROPA)

Under Article 30, the General Data Protection Regulation (GDPR) requires certain organizations under its scope to maintain a Record of Processing Activities, or ROPA for short. A ROPA is a comprehensive account of a business's data processing activities and other relevant information. This document not only helps demonstrate a commitment to...

Choice of Law in Cross-Border Operations

The Internet makes long-distance transactions possible for even the smallest businesses. When you sell apps through the App Store or Google or run an online ecommerce storefront, there is a chance that someone will buy from you across international lines. This leads to the problem of knowing which laws to...

Protecting Your Online Business from GDPR Privacy Complaints

The EU's General Data Protection Regulation (GDPR) has had online businesses the world over scrambling to comply before it came into full effect on May, 25th 2018, and for good reason. The fines associated with GDPR infringement could be crippling, and end users will have the right to report such...

A Designer/Developer's Role in a Client's Online Legal Agreements

Legal liability: it's not the favorite topic of discussion among designers and developers for online businesses, but everyone realizes the weight of those words. When it comes to taking ownership of legal liability, most prefer to pass it along to someone else. With that in mind, could a designer or...

Small Businesses and the GDPR

This question has been coming up a surprising amount: "I run a small business. Does the GDPR affect me?" If your small business deals with citizens of the EU, the answer is a resounding YES. While some aspects of the GDPR may affect you differently, with less strict rules for small businesses...

"Legitimate Interests" Under the GDPR

One of the most ambiguous and controversial components of the GDPR to date is the term "legitimate interests," particularly in Article 6. In this article we will delve into the sections of the GDPR that use the phrase "legitimate interests" and determine what this phrase means and how it affects...