Posts

Showing posts with the label GDPR

Achieve Data Privacy Compliance with Sitecore (GDPR, CCPA, CDPR)

Image
It started in April 2016 with EU's General Data Privacy Regulation (GDPR), then came China's Cybersecurity Law (CSL) in Nov 2016, also known as China Internet Security Law, then add China's Data Protection Regulation (CDPR) to that and now California's Consumer Production Law (CCPA) went into effect in January 2020. With ever increasing data privacy regulations across the globe going into effect, we are seeing an increase in demand for compliance from large and small, private and public enterprises alike. Although achieving full data privacy compliance for each of the regulations may be a tall order, there is a silver lining here. All of the data privacy regulations seem to have evolved from GDPR and hence you see a lot of similarities across them The means that there is a common denominator to achieving some level of compliance across all the regulations and that is what I will attempt to cover in this post. If you deployed a leading Digital Experience Platfor...

Sitecore, GDPR, China's Cyber Security Law (CSL) & Data Protection Regulation (CDPR)

China has had strong data protection regulation for a while and it only seems to be getting tighter in 2019.  Increasingly, clients running Sitecore as their digital CXM platform require multi-regional deployments, and deploying solutions in the APAC region usually tends to pose a challenge. A couple of years ago, it may have been easy enough to simply carve out some infrastructure local to China and direct all local language variant traffic to the instance. But this is no longer sufficient. China seems to have taken a lot of articles from GDPR and continues to add to them and make privacy law even from stringent. Sitecore has quite a few provisions OOTB for handling some of the GDPR articles and the other can be handled via either solution design, custom implementation or system architecture. Here is are some of the ToDos related to CSL, CDPR as they relate to GDPR. Compliance via solution design & custom implementation CSL & GDPR: Implement consent...