Key Points

1. public and private B2C sites subject to many regulations in different jurisdictions
2. need to know applicable policies
3. need to know how to design and manage for compliance, audits
4. PII management policies - GDPR and related personal data privacy policies
5. Site access policies
6. Implied warranties and merchantibility - don't exist
7. Identify contact points and recourse processes
8. File, track and manage compliants
9. User agreement to arbitration processes in specific jurisdictions
10. Token policies by jurisdiction

References

Key Concepts

Data Protection Methods Overview

https://cdn2.hubspot.net/hubfs/5096489/Collateral/Protegrity_Methods_of%20Data_Protection_FINAL_02.pdf

Data Privacy Studies

GDPR regulations - data privacy limitations

https://www.nytimes.com/2019/09/24/technology/europe-google-right-to-be-forgotten.html

Data Sharing agreement concepts

https://www.jdsupra.com/legalnews/cfpb-outlines-principles-for-consumer-98316/

The Consumer Financial Protection Bureau (CFPB or Bureau) recently released a set of consumer protection principles for protecting consumers when they authorize third party companies to access their financial data to provide certain financial products and services

The principles, which are intended to be read together, relate to:

• data access;
• data scope and usability;
• control of the data and informed consent;
• payment authorizations;
• data security;
• transparency on data access rights;
• data accuracy;
• accountability for access and use; and
• disputes and resolutions for unauthorized access.

Potential Value Opportunities

Potential Challenges

Candidate Solutions

Step-by-step guide for Example

sample code block

Recommended Next Steps

Related articles