One of the most important ways to demonstrate your company’s compliance with the EU’s General Data Protection Regulation (GDPR) is to prepare a Data Protection Impact Assessment (DPIA) for any high-risk data processing activities. The GDPR requires a DPIA for…
On March 2, 2021, Virginia enacted the Virginia Consumer Data Protection Act (VCDPA), becoming the second U.S. state, after California, to enact a comprehensive data privacy law. Although the California Consumer Privacy Act (CCPA) and the VCDPA are at the…
When the European Union (EU) enacted the General Data Protection Regulation (GDPR) on May 2, 2018, the world was introduced to the concept of data minimization. According to Article 5 of the GDPR, data minimization means “personal data shall be…
