KMK Law Cybersecurity & Privacy Blog

Four years ago, the European Union (“EU”) began enforcement of the General Data Protection Regulation (“GDPR”). The GDPR is a comprehensive data privacy law enacted to create a standardized and cohesive data privacy framework across all EU member countries. The GDPR has since encouraged the adoption of data privacy laws throughout the world,^[1] such as the California Consumer Privacy Act. Businesses in the United States that process^[2] personal data of European residents, after it has transferred from a country in the European Economic Area to the United States, must ...