Data Privacy
Data privacy today, in a nutshell
Not only was GDPR the tip of the global data privacy iceberg, but it’s also become the “gold standard” for states and countries seeking to protect the privacy of their residents. Each law has its own unique set of requirements, but many have some key features in common that mirror the European law, including:
- • Geographic coverage based on the consumer’s residency, not the business’ location
- • The granting of specific rights to consumers that businesses are required to honor
- • Sufficient "teeth"—in the form of significant consequences for violations—to compel businesses to comply
Data privacy explained for: legal experts
Ever since the European Union passed the GDPR in 2016, data privacy has been a critical issue for businesses across industries. With the enactment of California’s CCPA—plus the supplemental CPRA that just passed via referendum—GDPR-inspired legislation arrived on this side of the Atlantic, and other states are following suit.
Given the current patchwork of U.S. state laws, legislation in other countries and regions, enforcement regulations, and court rulings on all fronts, even determining which requirements apply to your organization can be a challenge. In businesses that don’t have the luxury of a dedicated data privacy specialist, in-house legal teams have had to train up on data privacy legislation—and keep up with the never-ending flow of changes—in addition to their already-extensive list of obligations.
One key difference between CCPA and GDPR is the former’s private right of action clause, which gives consumers the right to institute a civil action for damages resulting from unauthorized access to their personal data. While this clause is currently limited to damages from data breaches, there is talk of expanding it to other areas, and other states are considering—or have already passed—similar measures. So if the threat of regulatory fines isn’t enough to make businesses take data privacy seriously, they also have the concern of potential lawsuits to consider.
Why legal experts are critical for data privacy readiness
Legal teams are the lynchpin between data privacy laws and the businesses they cover. Internal teams across the organization—including IT, sales, customer service, marketing, and others—look to their legal experts for guidance on how to implement the requirements they are expected to meet.
To meet this obligation, legal teams need a thorough understanding not only of the data privacy laws that apply to their organizations, but also of how the organization gathers, stores, uses, and shares the personal data of covered individuals. In addition to learning how to “speak data privacy,” they must also learn, in some capacity, to “speak data.”
How we can help
If this sounds like a major undertaking, it is. Most legal teams have more than enough on their plates, without adding the need to serve as internal consultants for the organization's data privacy readiness efforts. That’s where we come in.
Logic20/20 brings together a unique team of lawyers, data experts, and strategists—all thoroughly versed in data privacy requirements—to help clients across industries prepare for GDPR, CCPA, and similar laws.
Data privacy
We focus our data privacy approach on achieving readiness for GDPR, CCPA, and/or whatever similar laws apply to your organization. Our experts help you achieve an ongoing understanding of the data in your organization that keeps you aligned with existing regulations, prepared to respond to data requests, and ready for future requirements.
Data privacy as a service (DPaaS)
DPaaS runs a bit like a traditional managed service, but with a dedicated team of data privacy professionals that improve your ecosystem and stay on top new regulations. We take the time to understand your current data privacy program, establish lines of communication, and provide cross-functional training across teams.