- Controllers shall maintain an inventory of personal data.
- A controller may not retain personal data that is no longer relevant and reasonably necessary to the purposes for which the data was collected.
- Controllers must document the policies and procedures adopted to comply with the law.
- Consumers may question the results of a controller’s profiling decisions.
- Controllers must maintain records of all appeals and responses for at least 24 months.
Click here to learn more about applicability and for a refresher on the privacy laws going into effect this year.
Questions? Our Privacy Team is available to assist: Cybersecurity, Privacy & Data Governance
Disclaimer
While we are pleased to have you contact us by telephone, surface mail, electronic mail, or by facsimile transmission, contacting Kilpatrick Townsend & Stockton LLP or any of its attorneys does not create an attorney-client relationship. The formation of an attorney-client relationship requires consideration of multiple factors, including possible conflicts of interest. An attorney-client relationship is formed only when both you and the Firm have agreed to proceed with a defined engagement.
DO NOT CONVEY TO US ANY INFORMATION YOU REGARD AS CONFIDENTIAL UNTIL A FORMAL CLIENT-ATTORNEY RELATIONSHIP HAS BEEN ESTABLISHED.
If you do convey information, you recognize that we may review and disclose the information, and you agree that even if you regard the information as highly confidential and even if it is transmitted in a good faith effort to retain us, such a review does not preclude us from representing another client directly adverse to you, even in a matter where that information could be used against you.
