QUESTION

Customers in other states and countries are using our site and app and now we are worried that we’re not compliant with their data privacy regulations. What should we do?

SHORT ANSWER
An internal data audit will identify the types of data you collect, from whom the data is collected, and how the data is handled, transferred and use. You can then identify applicable laws.
Read More Below

The first step is to conduct an internal data audit so that we can fully understand the types of data you collect, from whom the data is collected, and how the data is handled, transferred and use.  Once complete, we would review and assess which laws apply and whether your current policies, practices, and contracts are sufficient.  If changes are necessary, we would then work with you to update them accordingly.