Global SaaS Privacy Counsel

CPPA proposed regulations §7150-7160 on Automated Decisionmaking Technology (ADMT) for SaaS — covers significant decisions trigger, pre-use notice, opt-out righ

Brazil Lei Geral de Proteção de Dados (LGPD) compliance for SaaS — covers DPO (Encarregado) appointment requirement, ANPD reporting, Article 18 data-subject ri

California Online Privacy Protection Act (CalOPPA) and California Shine the Light Law (Cal Civ §1798.83) compliance for SaaS — covers still-effective requiremen

CPPA regulation §7025 opt-out preference signal compliance — Global Privacy Control (GPC) technical detection, tag management suppression, 15-day processing SLA

CCPA "sale" definition analysis — money-or-valuable-consideration test — Cal Civ §1798.140(ad), cross-context behavioral advertising as "sharing" under CPRA, Gl

China Personal Information Protection Law (PIPL) cross-border transfer compliance for SaaS — covers three transfer pathways (security assessment, Standard Contr

GDPR Article 35 Data Protection Impact Assessment (DPIA) for SaaS — covers high-risk processing trigger criteria, nine DPIA elements, Article 36 prior consultat

EPrivacy Directive cookie consent compliance for SaaS — covers Article 5(3) opt-in requirement vs implied consent, national law transposition differences, dark-

EU-US Data Privacy Framework (DPF) compliance for SaaS companies — covers 2023 adequacy decision, self-certification to Commerce Department, annual recertificat

GDPR Article 28 sub-processor chain governance for SaaS — covers controller-to-processor DPA mandatory clauses, processor-to-sub-processor flow-down, written au

India Digital Personal Data Protection Act 2023 (DPDP Act) compliance for SaaS — covers Significant Data Fiduciary (SDF) trigger, consent-manager registration,

GDPR-compliant cross-border personal data transfer from EEA to third countries using 2021 Standard Contractual Clauses (SCCs) and Schrems II supplementary measu