Resource Library

This checklist can help organizations determine if the Colorado Privacy Act (CPA) applies to them. It will also help organizations learn how to update their privacy policies to comply with CPA.

This checklist provides a means to determine if your business is affected by the California Privacy Rights Act (CPRA). If your business falls under this category, this checklist also covers building action items that move the organization toward compliance.

This Privacy Capability Maturity Model provides a detailed maturity model for all aspects of an organization’s privacy program, including its use of Artificial Intelligence (AI) and Machine Learning (ML) using personal information.

It seeks to gauge program capability across a variety of program elements, taking a “big picture” view on an organization’s readiness to comply with these requirements.

2023 is shaping up to be a landmark year for data privacy, as comprehensive consumer privacy laws take effect in four states and a fifth state expands its already robust privacy compliance requirements. Womble Bond Dickinson assembled a panel of privacy, technology and data security attorneys to discuss these upcoming changes and the regulatory compliance steps companies need to take. This article is taken from that conversation. 

The European Union has approved a new framework for transferring personal data between Europe and the US. This is a major development that could resolve the current legal limbo for transatlantic data transfers. 

This checklist provides practical steps for your privacy, legal, and compliance teams to asses whether this Virginia Consumer Data Protection Act (VCDA) applies to your organization's data and provide tips for your organization to become compliant.

Organization’s records retention schedules need to be synchronized with assurance current and emerging privacy laws . Records retention laws and regulations may require companies to retain records for a certain number of years, driven by literally thousands of record retention regulations. These requirements may override consumer deletion requests of their personal information.

In this ACC Guide, learn why letting electronic information accumulate can be hurtful, and why deleting it can be difficult. The guide  reviews several deletion approaches that are ineffective and highlights those approaches that work well. These smart strategies will enable companies to create effective programs that ensure compliance, reduce risk, lower costs, and increase productivity.

The ACC Records Management Program Maturity model provides a detailed maturity model for all aspects of an organization’s records program.

It seeks to gauge program effectiveness across a variety of program elements, taking a “big picture” view to increase program value.

This article discusses tips to ensure that a document retention policy protects your company in the case of litigation, is compliant with current laws, and is cost-effective.