GDPR
11 min read
Data subject access requests (DSARs) under GDPR Article 15
Under GDPR Article 15, anyone can ask what personal data you hold about them and must get a copy wit...
Read morePrivacy
Collect less, explain more.
How to collect less data, answer visitor rights requests and write notices people understand, across Europe, the US and beyond.
Articles in Privacy
GDPR
GDPR
13 min read
Children's data and parental consent under GDPR Article 8
A child can consent to an online service alone from 16 under GDPR Article 8, or from 13, 14 or 15 wh...
Read more
Privacy
14 min read
Data Protection by Design and by Default: A Practical Guide to GDPR Article 25
GDPR Article 25 requires every data controller to bake privacy into systems from the start - not bol...
Read more
Cookies
11 min read
GDPR territorial scope and websites outside the EU
Article 3 of the GDPR reaches a non-EU website through an EU establishment or by targeting people in...
Read more
Privacy
14 min read
The Right to Erasure: How to Handle "Delete My Data" Requests
The right to erasure is one of the most frequently exercised data subject rights under the GDPR, and...
Read more
GDPR
15 min read
Lawful Basis for Processing: Which of the 6 Legal Grounds Applies to You?
Article 6 of the GDPR requires every organisation that processes personal data to have a valid lawfu...
Read more
Privacy
12 min read
CCPA vs CPRA, what changed and what stayed the same
The CPRA is not a separate law: it amended the CCPA, effective 1 January 2023 and enforceable from 1...
Read more
Privacy
13 min read
What is the CPRA? California's privacy law for websites
The CPRA is the 2020 ballot law that amended the CCPA from 1 January 2023, adding sharing, sensitive...
Read more
Privacy
12 min read
What is the ePrivacy Directive? The EU cookie law still in force
The ePrivacy Directive (2002/58/EC) requires consent before a website stores or reads information on...
Read more
