Preparation of policies for compliance with regulatory legal acts (GDPR, CCPA, LGPD, PIPEDA, COPPA, etc.)

Analysis and alignment of business processes of your company in accordance with GDPR, CCPA, the Law of Ukraine «On Protection of Personal Data».

What is personal data?

As a rule, the term “personal data” is enshrined at the level of national legislation. For example, in the European Union, processing of personal data is regulated by the General Data Protection Regulation (GDPR), in Canada by the Privacy Act and Personal Information Protection and Electronic Documents Act (PIPEDA), in the United States (in California) by the California Consumer Privacy Act (CCPA).

These laws govern how businesses must behave when collecting and processing customer and employee data.

There are slight differences in the definition of personal data, but in order to make it easier to understand, we will use the GDPR definition.

• Personal data is any information relating to an identified or identifiable natural person (“data subject”, i.e. a person).
• An identified natural person is a person whose identifier (name, phone number, personal number, login, etc.) is present in the data.
• An identifiable natural person, in turn, is a person who can be easily identified, that is, distinguished from other people.

Personal data is not only the identifier itself, but also the information related to a person. In simple terms, name, passport number, ID card, username, nickname, e-mail address, phone number, IP address, bank card data are always personal data, because they are identifiers. A license plate number, handwriting, videotape or photo are probably personal data because they are easily identifiable. Address, marital status, sex, gender, e-wallet information, health information, page views, searches, social media posts are personal data when you know who it belongs to.