GDPR Data Mapping: A How-To Guide

EU Privacy Law

GDPR Data Mapping: A How-To Guide

If you don’t know where your business collects, stores, and processes consumer data,...

Privacy Program Management

Establish Total Customer Trust With a Commitment to Data Privacy

In the last few months alone, dozens of reported data breaches have already...

EU Privacy Law

GDPR Compliance in the U.S.: What to Know

In 1992, Singapore banned the sale of all chewing gum. But if you owned a...

ChatGPT vs Privacy—How Concerned Should We Be?

Note: As of April 28th, ChatGPT is accessible in Italy after OpenAI implemented...

Keeping Privacy Top of Mind at 2023’s Global Privacy Summit

Last week, the Osano team joined privacy professionals from across the globe at the...

US Privacy Law

The Iowa Consumer Data Protection Act (ICDPA): The basics

Iowa has joined California, Colorado, Utah, Connecticut, and Virginia in the growing...

DSAR Management

Privacy Program Management

Employee Data Protection 101

For the most part, businesses gather employee data without too much thought. Sure,...

Essentials

Consent Management

What is the Global Privacy Control (GPC)?

More than ever before, consumers are aware of their rights when it comes to their...

Essentials

Privacy Program Management

Explaining why privacy matters to your peers: A guide for privacy professionals

Roughly 60 percent of Americans don’t understand what companies do with their data....

Essentials

DSAR Management

Privacy Program Management

What is an employee privacy policy? Does my company need one?

To date, 71% of the world’s countries feature some form of privacy legislation. More...

US Privacy Law

What is the California Age-Appropriate Design Code Act (CAADCA)?

On September 25th, 2022, California passed a new law—the California Age-Appropriate...

Privacy Program Management

9 challenges facing privacy teams (and how to solve them)

According to research by the International Association of Privacy Professionals...

Essentials

Marketing

Consent Management

5 red flags in a CMP implementation

No matter how thorough your evaluation process is, deciding on a given software...

DSAR Management

DSAR solutions: The past, present, and future

At midnight on the 25th of May, 2018, millions of people were suddenly in possession...

Essentials

Privacy Program Management

Making the business case for your data privacy program

Anybody whose responsibilities include privacy can relate: Most people vastly...

Essentials

Vendor Management

What is vendor risk management?

In today’s digital environment, businesses seem to have vendors for everything. How...

Privacy Program Management

The 7 Biggest Pitfalls for Modern Privacy Programs

What worse feeling is there in business than to get excited for some new initiative,...

Essentials

Consent Management

Cookie compliance: everything you need to know

When it comes to data privacy, what is at once the greatest source of risk, the most...

Essentials

Privacy Program Management

5 emerging data privacy trends in 2023

Data privacy has never been more top of mind. From regulators to businesses, privacy...

Essentials

Privacy Program Management

What is a privacy program and how can you build one?

For what was once a niche profession, the privacy role is booming. According to...

Vendor Management

3 ways to use Osano Vendor Risk Management

No person is an island, and neither are businesses. Every business relies on a small...

Essentials

DSAR Management

EU Privacy Law

What are data subject rights?

When it comes to data subject rights, most companies focus on the right to access,...

Essentials

What is Data Privacy Day and how can you celebrate it?

If there’s a day to celebrate eating McDonalds (Fast Food Day, November 16th) and a...

Essentials

Privacy Program Management

What is data privacy management?

Between the dozens of data privacy laws on the books and growing consumer awareness,...

Essentials

Consent Management

Cookie Banners: How to Stay Compliant with Privacy Laws

Today, multiple data privacy laws regulate millions of businesses and protect the...

Vendor Management

What is third party risk management (TPRM)?

Small or large, every company works with third parties to help solve business...

Essentials

EU Privacy Law

US Privacy Law

International Privacy Law

Data Privacy Laws: What You Need to Know in 2023

Essentials

DSAR Management

Choosing the right DSAR platform for your business

With more and more data privacy laws coming into effect with some form of subject...

US Privacy Law

1-month countdown to 2023’s state privacy laws

With five data privacy laws coming online in 2023, businesses that operate within...

Essentials

Data discovery: A comprehensive guide

If every company is a tech company, every company is also a data company, collecting...

Essentials

DSAR Management

Your Guide to Data Subject Access Requests (DSARs)

As our lives and the internet become more entwined, our personal information becomes...

Essentials

Consent Management

What is a cookie policy, and why do you need one?

Cookies are an essential component of a website. They improve the users’ experience,...

US Privacy Law

What's going on with the Children's Online Privacy Protection Act (COPPA)?

The Children’s Online Privacy Protection Act was passed in 1998 and governs the way...

Essentials

Data mapping 101: A how-to guide

What is data mapping? At a basic level, data mapping involves taking a set of data...

Consent Management

Free template: Your consent management platform scorecard

According to Cisco’s most recent data privacy benchmarking study, businesses spend...

DSAR Management

DSAR process: Why and how to collaborate with your vendors

Once you start collecting consumers’ data, it becomes a real challenge to keep that...

US Privacy Law

2023 State Privacy Laws Q&A

With five state privacy laws coming into effect in 2023, there’s a lot of...

US Privacy Law

An analysis of the Sephora enforcement action

Sephora, the international beauty product retailer, was recently hit with a $1.2...

Consent Management

Manage privacy at scale with Osano’s enterprise access control

When you have just one website that needs to comply with data privacy regulations,...

Privacy Program Management

Standard Contractual Clauses: What SMBs should know

In 2021, the European Commission released the new Standard Contractual Clauses...

Essentials

Consent Management

What is a consent management platform?

Consent management is not a new concept. But it has seen an incredible rise in the...

Marketing

The lessons we learned at INBOUND 2022

Recently, the Osano team was fortunate enough to attend one of the most significant...

Privacy Program Management

What Osano does to stay compliant

In many ways, we’re fortunate — data privacy compliance is at the heart of our...

Marketing

US Privacy Law

Marketing & the CPRA: What do you need to know?

Marketing in the era of data privacy requires your team to keep up to date with the...

Essentials

Your data privacy terminology cheat sheet

In the world of data privacy, your ability to be compliant hinges, in part, upon...

Essentials

Vendor Management

EU Privacy Law

US Privacy Law

What is a Data Protection Impact Assessment (DPIA)?

Europe has consistently been ahead of the curve when it comes to data privacy laws,...

Consent Management

Cookie consent requirements: Are you doing enough?

When the European Union established the General Data Protection Regulation (GDPR) in...

Essentials

US Privacy Law

How CPRA expands consumer privacy rights and information sharing

Superseding the California Consumer Privacy Act (CCPA), the California Privacy...

US Privacy Law

3-month countdown to 2023’s state privacy laws

2022 is zipping by, and 2023 will be here before you know it — and with the new year...

Marketing

5 ways CMOs and DPOs can work together

In many ways, Chief Marketing Officers (CMOs) and Data Protection Officers (DPOs)...

Marketing

[Infographic] 6 key metrics for privacy-aware marketers

Few other business functions touch as much consumer data as marketing. That means...

Essentials

Consent Management

Opt in vs opt out: What's the difference?

Have you ever asked a friend what they wanted to eat for dinner? Sometimes, they...

Consent Management

What to expect when implementing consent management software

You understand the importance of data privacy compliance, the ins and outs of cookie...

Osano

Get to know us with our Spotlight on Osanians series

What does it take to make data privacy simple and stress-free for consumers and...

Osano

Spotlight on Osanians: Get to know Alan J

Welcome to our team member spotlight series! Check out our previous spotlights here....

Essentials

[Infographic] Marketers, when do you collect data?

Whether you work in revenue operations, customer success, marketing, or sales, a...

Essentials

US Privacy Law

The Expert's Guide to California Data Privacy Law | CCPA & CPRA

For a long time, California has been a leader in making sure its citizens’ privacy...

Privacy Program Management

Time to switch your standard contractual clauses

It’s never been easy for businesses to operate across borders, but recent changes to...

Essentials

PII vs. PI vs. Sensitive Information: Know Your Data Definitions

We’re officially in an era where navigating data privacy regulations — and striving...

Consent Management

Cookies, Pixels, and Tags: The data privacy implications of each

You see different companies show up in the headlines every week, suffering...

Osano

Spotlight on Osanians: Get to know Chris W

Welcome to our team member spotlight series! Check out our previous spotlights here....

Essentials

Privacy Program Management

Data privacy (non)compliance: How enforcement works

In 1983, New York enacted the nation’s first mandatory seat belt law. Its reception...

US Privacy Law

What is the ADPPA (American Data Privacy and Protection Act)?

Will the US soon see a federal data privacy bill? Something that equals or surpasses...

Consent Management

Cookie consent policies: Informed consent translation requirements

While the internet makes it easy for users worldwide to visit your site, that...

Essentials

The anatomy of a data privacy law: Demystifying privacy

Over 260 pages. Over 50,000 words. Chock full of words like, “pseudonymization,”...

DSAR Management

EU Privacy Law

US Privacy Law

Employee data in CPRA vs GDPR

If you’re a chief information officer, chief technical officer, human resources...

Essentials

[Infographic] A quick guide to privacy rights

As a business leader, it's essential you know the privacy rights afforded to...

US Privacy Law

Meet the California Privacy Protection Agency(CPPA)

Laws are only as good as the agencies in place to enforce them. That’s why the...

DSAR Management

HR’s role in managing employee DSARs

If you haven’t heard of data subject access rights (or DSARs) before, you wouldn’t...

Consent Management

5 ways to identify cookies and scripts

Data privacy laws like the GDPR require user consent before you can track their...

Essentials

DSAR Management

[Infographic] Essential DSAR terms to know

When legislators craft data privacy laws, they write them for other legal experts —...

Essentials

EU Privacy Law

GDPR Compliance Regulations: The 12 Biggest Need-to-Knows

Marketing

What is privacy-first marketing?

For marketers, the rise of data privacy regulations like the GDPR and CCPA/CPRA can...

Osano

Spotlight on Osanians: Get to know Seanna

Welcome to our team member spotlight series! Check out our previous spotlights here....

Marketing

Marketing's Y2K: Universal Analytics and third-party cookies

This blog was updated on July 28, 2022. At the turn of the new millennium, the world...

EU Privacy Law

GDPR in marketing: Strategies to stay compliant

The GDPR: Heard of it?

Essentials

How to conduct a privacy compliance audit

If you’re a responsible driver, you get an oil change at least once a year. If you...

Essentials

Consent Management

The Ultimate Guide to Understanding Cookie Laws

As ubiquitous as so-called “cookies” are in the operation of the Internet, their use...

Consent Management

Answering the “build vs. buy” question for cookie consent tools

With the alphabet soup of data privacy legislation growing every day, emerging and...

Essentials

The definitive guide to the New York SHIELD Act

Every day, we share personal information online. Whether we’re paying bills,...

US Privacy Law

2022’s data privacy laws: UCPA and CTDPA

Now that we’ve made some headway into 2022, it’s a good time to pause and look back...

Osano

Spotlight on Osanians: Get to know Kelsey

Welcome to our team member spotlight series! Check out our previous spotlights here....

EU Privacy Law

Understanding GDPR's data protection officer (DPO)

While the data protection officer role is required by the EU's General Data...

US Privacy Law

6-month countdown to 2023’s state privacy laws

2023 is shaping up to be a big year for US businesses. No fewer than five state...

Privacy Program Management

What is privacy management software?

Does it ever feel like you have to choose between your business goals and compliance...

Essentials

How to use data privacy metrics to prove contribution to revenue

It can be easy for data privacy professionals to become hyper-fixated on metrics...

Essentials

Ecommerce data privacy: What you need to know

One essential aspect of running an online business is data privacy. Ecommerce...

Osano

Spotlight on Osanians: Get to know Kait

Welcome to our team member spotlight series! Check out our previous spotlight on...

Marketing

Make data privacy software "marketer-friendly"

If you’re concerned data privacy regulations might make it harder for you to do your...

Marketing

3 ways to embrace privacy in marketing

Gone are the days of marketing by gut instinct. In a study by Wunderman, in...

Essentials

The ultimate privacy policy checklist

Maybe you’re just starting a new business and have recently launched a website or...

Essentials

Consent Management

The right way to approach consent optimization

Fifty-six percent of website visitors ignore opt-in cookie banners. For marketers,...

Osano

Spotlight on Osanians: Get to know Tyson

Welcome to our team member spotlight series! In this blog, get to know Tyson...

Essentials

Consent Management

How cookies work, and how to conduct a cookie audit

Though cookies play an essential role in website functionality, they’re still a...

Essentials

3 ways to improve data privacy in martech

Marketing has come a long way since the days when advertisements in newspapers,...

Essentials

[Infographic] Take data privacy seriously: Here's why

“Data privacy doesn’t apply to my organization.”

Consent Management

How to prepare for third party cookies going away

Marketers love cookies. And we’re not just talking about the...

Consent Management

Cookie consent for WordPress

Whether you’re a multinational business with an enormous web presence or a...

Privacy Program Management

EU Privacy Law

US Privacy Law

Less is more: the GDPR data minimization principle

The GDPR revolutionized the data privacy world, setting the framework for businesses...

Essentials

Privacy Program Management

Combatting distrust via your company privacy policy

After an onslaught of massive data scandals and breaches in the last several years,...

Essentials

Consent Management

Goodbye third-party cookies! Is zero and first-party the answer?

This blog was updated July 28, 2022. We're in the midst of a data privacy...

Essentials

Create a Shopify data privacy plan for GDPR & CCPA

More than 2 billion people purchased goods and services online in 2021, entrusting...

Ensuring data privacy compliance in the age of “accepting all terms”

In signing up for and downloading various apps and websites, the onslaught of...

Privacy Program Management

What is a RoPA? GDPR Requirements for Record of Processing Activities

Laws about data privacy and protection are only as good as the measures taken to...

DSAR Management

US Privacy Law

CCPA vs. CPRA: New rules for data subject access requests

In 2018, Californians voted for the California Consumer Privacy Act (CCPA), the...

Essentials

Consent Management

Consent Management 101: Everything You Need to Know

  Using the internet to do business isn’t new. But as people increasingly share...

US Privacy Law

How to comply with the California Privacy Rights Act (CPRA): A transcript

In January 2022, Osano assembled privacy attorneys with extensive experience working...

German DPAs advise on cookie compliance under new telecom law

On Dec. 1, 2021, Germany passed the Telecommunications-Telemedia Data Protection Act...

EU Privacy Law

EU privacy law proposals to watch in 2022

There's no shortage of legal proposals hitting the EU this year. The bills to watch...

Apache Log4j vulnerability update

CVE-2021-44228 and CVE-2021-45046 Dec. 13, 2021

Engineer's blog: Scaling our Consent Manager API

This blog aims to illustrate pain points we've run into at various stages of...

Essentials

Privacy Program Management

The ultimate guide to personal data

What is personal data?  The term "personal data" has many definitions, depending on...

US Privacy Law

Mass General to settle lawsuit over patient cookies

A Massachusetts judge has granted preliminary approval for a class-action settlement...

International Privacy Law

China's Personal Information Protection Act: A primer

IPL (China’s privacy law) is in force: Here's what you need to know about the law...

US Privacy Law

How to comply with the California Privacy Rights Act 'look-back' provision

Like most things in privacy, California’s privacy law can seem like a letter-salad:...

Engineer's Corner: How to test cookie consent in multiple languages

This blog aims to illustrate pain points we've run into at various stages of...

Apple forges ahead with plan to scan iPhotos for child sexual abuse media

"Apple's compromise on end-to-end encryption may appease government agencies in the...

Who is Helen Nissenbaum?

Here at Osano, we name our major product feature releases after privacy heroes....

US Privacy Law

California Attorney General releases new violation-reporting tool

California's attorney general has reported his one-year enforcement metrics on the...

How using a blockchain database solved our scalability problem

This blog aims to illustrate pain points we've run into at various stages of...

US Privacy Law

Colorado Privacy Act (CPA): What is it?

What is the Colorado Privacy Act? This week, Colorado became the third U.S. state to...

Customer Stories

Why Mailgun switched to Osano

Ever since the EU General Data Protection Regulation was enacted in 2016, there has...

EU Privacy Law

European Commission issues new SCCs

Today, June 4, the European Commission announced new standard contractual clauses...

US Privacy Law

Virginia's Consumer Data Protection Act vs. CCPA and CPRA

A close-up comparison of Virginia's Consumer Data Protection Act (CDPA) vs....

Supreme Court strips FTC of 'strongest tool'

On April 23, the Supreme Court ruled that the U.S. Federal Trade Commission cannot...

Who is Estelle Griswold?

Settlement indicates SDKs are on the hook for privacy

While some have waved a dismissive hand at the Disney/adtech settlement approved by...

EU Privacy Law

Digital Services Act proposal: A primer

The European Commission's proposed Digital Services Act could impact some aspects of...

Schrems II problem may be a long fix

Anyone with a stake in data transfers out of the EU and into a different country has...

EU Privacy Law

UK data-transfer adequacy: An explainer

The European Commission issued a draft decision on Feb. 19 declaring the U.K. to be...

US Privacy Law

Virginia Privacy Law Passes

Virginia passed its privacy law on Feb 19. Many other states are considering their...

Essentials

What is personal data?

The definition of personal data varies depending on which law you're reading. But...

Customer Stories

Why TBG Security partnered with Osano

TBG Security, a privacy and security consultancy, recently partnered with Osano to...

Essentials

How to write a privacy policy

It's important to know how to draft a privacy policy that accurately reflects your...

Alex Pentland helped idealize the General Data Protection Regulation

Alex Pentland is one of the seminal thinkers in data privacy and AI. His thought...

Essentials

What's the Information Commissioner's Office (ICO)?

The Information Commissioner's office regulates privacy and data protection in the...

US Privacy Law

California Privacy Protection Agency is faceless, for now

In November, California voters passed the Consumer Privacy Rights Act, which will...

Customer Stories

Consent Management

Demio implements custom cookie consent within 24 hours

About Demio Demio was founded in 2014 by two marketers who realized webinars were...

For Sweeney, data is never bias-free

Meet the Harvard professor uncovering discrimination and vulnerabilities in data...

Customer Stories

How Herschend Family Entertainment streamlined processes, ensured data privacy

About Herschend Family Entertainment Herschend Family Entertainment (HFE) creates,...

International Privacy Law

Brazil's national data privacy legislation comes into force

The enactment of the European Union's General Data Protection Regulation (GDPR)...

Customer Stories

Reshoevn8r saves up to six hours a day by streamlining data privacy management

About Reshoevn8r Created in Arizona in 2010, Reshoevn8r has become the leader in...

Alan Westin is the father of modern data privacy law

While we may think that data privacy is a relatively new concept that began gaining...

Osano

How Osano keeps you GDPR-compliant in light of the Schrems II decision

If you've been following the news, you're probably aware that the European Union...

Osano

Essentials

Infographic: The Osano Data Privacy and Data Breach Link

The infographic below comes from recently released analysis showing the relationship...

EU Privacy Law

US Privacy Law

The EU-US Privacy Shield invalidated: What this means for you

On July 16, 2020, the European Union Court of Justice (CJEU) invalidated the EU-US...

Essentials

ePrivacy: The EU’s other data protection rule

The European Union takes the flow of data seriously. They recognize that data is a...

Essentials

TCF 2.0: The latest standard of transparency and user consent

Meeting the transparency and user choice requirements of the General Data Protection...

Essentials

The lowdown on how contact tracing affects your privacy

Contact Tracing: The Lowdown Ever since the coronavirus pandemic has gripped the...

Louis Brandeis: The patron saint of privacy laws

When we think of data privacy, most of us consider it a relatively new challenge...

US Privacy Law

The California Privacy Rights Act and the California Consumer Privacy Act

In May 2020, the privacy advocacy group “California for Consumer Privacy” surprised...

EU Privacy Law

US Privacy Law

Comparing CCPA and GDPR: 8 Key Differences Between the Privacy Laws

Getting It Straight The European Union’s General Data Protection Regulation (GDPR)...

Customer Stories

Consent Management

Autorola automates cookie consent across hundreds of domains

About Autorola Autorola was established in 2001 and is the largest online wholesale...

Osano

Covid-19 Coronavirus response

In 25 years of building technology companies, I have never seen anything like the...

Consent Management

Cookies: Proof of consent vs. records of consent

Security, privacy, and related topics have been all over the news in recent months...

Essentials

What Will Brexit Mean for my GDPR Data Transfers?

US Privacy Law

CCPA Enforcement Has Come, Now What?

California has passed a new privacy law, to be regulated by a new enforcement body....

US Privacy Law

The Great Big List of Data Privacy Laws by State

The United States of America has 50 states. all of those American states have at...

EU Privacy Law

How to comply with the General Data Protection Regulation (GDPR)

The European Union has become a leader in consumer protection with its data privacy...

International Privacy Law

The definitive guide to Brazil's privacy law, the LGPD

What is the Brazilian LGPD all about? Brazil, a country which counts around 200...

US Privacy Law

The CCPA is a Harbinger for U.S. Data Privacy Regulations

The CCPA is a Harbinger for U.S. Data Privacy Regulations

US Privacy Law

Can CCPA Affect Your Small Business?

California Consumer Privacy Act: It Applies to Small Businesses Also! You may have...

Essentials

Privacy policies: Are they that big of a deal?

The Misunderstood Privacy Policy Privacy policies are necessary to explain how a...

Osano

It’s Time for a New Era, Where Data Privacy Comes First

The last 20 years, the Internet has been the Wild West. A land grab for interesting...

Vendor Management

Your Vendor's Lawsuits Can Impact Your Business

Almost half of the 392 million people living in America had their sensitive data —...