VeraSafe

VeraSafe

法律服务

Washington,D.C. 76,913 位关注者

We help businesses comply with global privacy and data protection laws. Our clients include Global Fortune 10 to SMEs.

关于我们

VeraSafe’s mission is to provide the world’s best privacy and data protection advice, with a human touch. Through our global team of certified privacy professionals, cybersecurity experts, and privacy attorneys, we are dedicated to making data privacy compliance simpler and more accessible for businesses of all sizes. Our clients include the Global Fortune 10 and SME’s alike. VeraSafe offers several managed services including: - Outsourced Data Protection Officer Services - Data Privacy Framework Dispute Resolution “IRM” Services - EU and UK Data Protection Representative Services We can apply our strategic, risk-based approach to improve your organization’s data protection program, including: - End-to-end consulting services designed to support compliance across a wide range of industries, jurisdictions, and regulations such as the EU and UK GDPR, Swiss FADP, South African POPIA, Brazilian LGPD, Chinese PIPL, US HIPAA, CCPA/CPRA, and other U.S. state regulations - Data Privacy Framework verification and certification services - Data mapping - Privacy Impact Assessments (PIAs) - Data Protection Impact Assessments (DPIAs) - Legitimate Interests Assessments (LIAs) - Vendor risk management and contract negotiations - Penetration testing and IT security vulnerability management - Cross-border data flows - "Privacy by design" product management - Employee training and awareness Our global team of data protection attorneys, privacy professionals, and IT security experts is dedicated to providing cutting edge privacy and security advice that matches the budget, risk tolerance, and needs of each client we serve. Contact VeraSafe today to learn how we can help. www.VeraSafe.com ***VeraSafe is Hiring!*** Due to rapid growth and increased demand for our European and cross-border privacy and cybersecurity law advisory services, VeraSafe is currently hiring attorneys and privacy professionals to join our consulting team. Visit our LinkedIn page for more details.

网站
https://www.VeraSafe.com
所属行业
法律服务
规模
51-200 人
总部
Washington,D.C.
类型
私人持股
创立
2010
领域
Privacy Law、Data Protection、Compliance Assurance、Risk Mitigation、Cybersecurity、Data Protection Officer Service、Article 27 Representative Service、DPF Dispute Resolution Service、Impact Assessments、Data Subject Rights Requests、Records of Processing Activities、Cross-Border Data Transfers、Privacy Training、Penetration Testing、Privacy Policies、GDPR和Data Protection Addendums

地点

  • 主要

    100 M Street S.E.

    Suite 600

    US,D.C.,Washington,20003

    获取路线
  • Klimentska 46

    CZ,CZ,Prague,110 00

    获取路线
  • 35 Fricker Road

    ZA,Gauteng,Johannesburg,2196

    获取路线
  • Unit 3D North Point House, North Point Business Park

    New Mallow Road

    IE,Cork,T23AT2P

    获取路线
  • Keizersgracht 555

    NL,North Holland,Amsterdam,1017 DR

    获取路线
  • 37 Albert Embankment

    GB,England,London,SE1 7TL

    获取路线
  • Plaza de la Solidaridad, 12

    Floor 5

    ES,Andalusia,Málaga,29002

    获取路线

VeraSafe员工

动态

  • VeraSafe转发了

    查看Kyoungsic Min的档案,图片

    Privacy Counsel at VeraSafe | AIGP, CIPP/E

    In October 2024, the Personal Information Protection Commission (PIPC) of the Republic of Korea issued explicit guidance permitting the processing of video data containing personal information for AI learning purposes. The guidelines, titled "Guidelines for Protection and Utilization of Personal Video Information for Mobile Video Information Processing Devices," primarily address the use of mobile video data processing devices from a privacy perspective. Notably, they include a section on utilizing video data for AI learning, stating that such data can be used through pseudonymization without obtaining the data subject’s consent. This interpretation is grounded in the view that AI learning constitutes scientific research. Under the Personal Information Protection Act (PIPA), personal data may be used without consent through pseudonymization if it serves purposes such as scientific research. In the following analysis, I will examine the practical implications of this interpretation for AI development by comparing it with the GDPR, particularly the European Data Protection Board’s (EDPB) Guidelines 1/2024 on the Processing of Personal Data Based on Article 6(1)(f) GDPR, published in October 2024, and the CNIL's recent report titled “Relying on the Legal Basis of Legitimate Interests to Develop an AI System,” issued in June 2024.

    Korean Privacy Commission’s Approach on the Processing of Video Data for AI Learning

    Korean Privacy Commission’s Approach on the Processing of Video Data for AI Learning

    Kyoungsic Min,发布于领英

  • 查看VeraSafe的公司主页,图片

    76,913 位关注者

    VeraSafe is looking forward to attending the IAPP Europe Data Protection Congress on 20-21 November, where we'll be engaging in discussions on the latest developments in data protection and compliance. ???????? ?????? ???? ?????????? ??????? We’d welcome the opportunity to connect—send us a message or comment below to arrange a meeting. See you at #DPC24! https://lnkd.in/eWm5ZhB

    IAPP Europe Data Protection Congress 2024

    IAPP Europe Data Protection Congress 2024

    iapp.org

  • 查看VeraSafe的公司主页,图片

    76,913 位关注者

    VeraSafe is delighted to welcome Leila Dreier to the team as our new Marketing Specialist. Leila brings a wealth of experience in content creation, SEO, and UX/UI design to her role. Her deep understanding of data-driven marketing solutions, conversion optimization, and user-first design approach will be instrumental in enhancing our marketing capabilities. Please join us in welcoming Leila to VeraSafe! #NewHire #RemoteWork #VeraSafe

    • 该图片无替代文字
  • 查看VeraSafe的公司主页,图片

    76,913 位关注者

    The FTC has taken significant steps to address deceptive practices in subscription services. On October 16, 2024, the agency issued a broad “Click-to-Cancel" rule introducing new requirements for companies offering subscription services, auto-renewals, free-to-pay conversions, and other services that automatically enroll consumers in recurring payments unless they actively cancel (collectively referred to as “negative options”). Here’s what you need to know: ???????????? ????????????????????????:?Businesses must provide a straightforward method for consumers to cancel their subscription, ensuring that the cancellation process is as easy as the sign-up. The cancellation method must be accessible through the same medium as the sign-up and cannot, for example, require interaction with a representative if such interaction was not required for the sign-up. ?????????? ??????????????: Businesses must obtain “unambiguously affirmative consent” to the negative option before charging consumers and must keep a record of such consent for at least 3 years. Companies can bypass the recordkeeping requirement if they can prove their system makes it impossible to complete a transaction without securing consent. ????????????????????: Businesses must clearly and conspicuously disclose all material terms to consumers before collecting billing information. This includes details about charges, deadlines for cancellation, frequency of charges, and how to access the cancellation mechanism. ?????????????????????????????????? ??????: Businesses are prohibited from misrepresenting any material facts about their offers, including details about the negative option feature, costs, consumer consent, cancellation terms, the purpose or effectiveness of the product or service, health or safety claims, or any other important information. ?????????????????? ??????????: The Rule applies to all negative option programs in any media, including digital channels, telemarketing, in-person sales, and traditional print. ?????????????????? ????????: The ban on misrepresentations will take effect 60 days after the rule is published in the Federal Register, and the provisions regarding disclosure, consent, and cancellation will become effective 180 days after publication. The rule is expected to be published in the Federal Register in the upcoming weeks. The #FTC approved the Click-to-Cancel Rule by a 3-2 vote. Three industry associations have already filed suit claiming the Rule violates the Administrative Procedure Act and exceeds the FTC’s authority. Though the Rule is subject to an existing challenge, for privacy professionals, the message is clear: Businesses should?place greater emphasis on transparency and move away from dark patterns that manipulate user behavior. At VeraSafe, we’re ready to help you navigate these regulatory changes. Reach out to learn how the new rule impacts your business and what steps to take for #compliance. #ClickToCancel #ProductManagement

    • Subscription services face new requirements under the FTC's Click-to-Cancel Rule.
  • 查看VeraSafe的公司主页,图片

    76,913 位关注者

    VeraSafe is delighted to welcome Gabrielle Nicole Portelli to the team as Associate Privacy Advisor. Gabrielle holds a Bachelor of Laws and a Master of Advocacy from the University of Malta as well as a Master of Law and Technology with a focus on data protection and privacy from Tilburg University. Her experience spans public institutions, private law firms, and a recent traineeship at a European agency in France. Gabrielle looks forward to expanding her knowledge of privacy and cybersecurity with VeraSafe. Please join us in welcoming Gabrielle to the team! #NewHire #RemoteWork #VeraSafe

    • 该图片无替代文字
  • VeraSafe转发了

    查看Kyoungsic Min的档案,图片

    Privacy Counsel at VeraSafe | AIGP, CIPP/E

    On September 26, 2024, the Personal Information Protection Commission of Korea announced the "Standards for Personal Information Handlers' Measures Regarding Automated Decisions". The commission also published a "Guide to the Rights of Data Subjects Regarding Automated Decisions" alongside the notice. A notable part of this notice is that it clarifies, as a condition for determining what constitutes an automated decision, that companies should consider whether the final decision is made by AI or a human. Another interesting part is that the guide accompanying the notice encourages the use of Explainable AI (XAI) to fulfill personal information handlers’ obligations to explain automated decisions. I've prepared a brief explanation for the notice and guide here.

    Korean Privacy Commission's Guidelines on AI-Based Automated Decisions – Brief Comparison with GDPR

    Korean Privacy Commission's Guidelines on AI-Based Automated Decisions – Brief Comparison with GDPR

    Kyoungsic Min,发布于领英

  • 查看VeraSafe的公司主页,图片

    76,913 位关注者

    As of October 1, 2024, ??????????????’?? ???????????????? ???????? ?????????????? ?????? (????????????) is officially in effect. If your business handles the personal data of 50,000+ Montana residents, it’s time to make sure you’re in compliance. Note that the law requires, among other things, respecting opt-out preference signals (such as the Global Privacy Control) as well as conducting data processing assessments starting in January 2025. In addition, perhaps off the radar of many, the last of ??????????????????????’?? ???????? ???????????????????? ???? ?????? ???????? ?????????????? ?????? (enacted via Public Act No. 23-56) have now taken effect—provisions that materially update processing requirements for minors under the age of 18. Under amendments effective October 1, 2024, companies must use reasonable care to avoid any heightened risk of harm to minors. There is a rebuttable presumption they exercised such care if they conduct a data protection assessment. Businesses must also get opt-in consent for processing minors’ data for any purpose that is not reasonably necessary to providing the service, as well as for targeted advertising, sale, and automated profiling that produces legal or similarly significant effects. If your business is struggling to keep up with the growing patchwork of U.S. privacy laws, including Montana’s #MTCDPA and Connecticut’s #CTDPA, VeraSafe can help. Contact us today to schedule a free consultation. https://lnkd.in/dd5E7GB #Privacy #DataProtection #Compliance

    • 该图片无替代文字
  • 查看VeraSafe的公司主页,图片

    76,913 位关注者

    VeraSafe is delighted to welcome Arlo Sporn to the team as Associate Privacy Advisor. Arlo joins with over two years of legal experience, including time at a leading international law firm. He has a strong background in corporate transactional practice, including company side representation for equity financings, mergers, employment, and governance matters. In his time at Harvard Law School, he worked at the Harvard Cyberlaw Clinic as a student advisor to the City of Boston, focusing on privacy-related contractual negotiations. These experiences enable him to craft efficient solutions for his clients. Please join us in welcoming Arlo to the team! #NewHire #RemoteWork #VeraSafe

    • 该图片无替代文字
  • 查看VeraSafe的公司主页,图片

    76,913 位关注者

    Recently, members of the VeraSafe team came together in Zambia, Africa for a micro-meetup filled with adventure, community service, and camaraderie. Our time together was the perfect blend of work and relaxation with a visit to Victoria Falls, a sunset cruise, and two community service projects. For a 100% remote team, these moments are essential.?They allow us to connect, share our diverse perspectives, and strengthen the relationships that make VeraSafe so unique. #TeamMeetup #RemoteWork #Collaboration #VeraSafe

相似主页

查看职位