Complying with multiple data privacy regimes is not simple, but it is increasingly becoming the expectation of clients and customers around the world.
Your company will be held to treating the personally identifiable information (PII) it collects with respect, storing it securely, and not using it for purposes other than what was disclosed.
