Zansa › Answers › Fundamentals
What privacy laws affect business analytics, such as GDPR and POPIA?
Laws such as the EU and UK GDPR and South Africa's POPIA regulate how personal information is collected, used, stored and shared. Analytics that touches customer or employee data must have a lawful basis, limit data to what is needed, secure it and respect individuals' rights. Check with a qualified adviser for your situation.
Common principles across such laws:
- Collect only what is necessary for a stated purpose
- Keep data secure and limit access
- Retain it no longer than needed
- Be transparent with people
- Control cross-border transfers
Many analytics needs can be met with aggregated or pseudonymised data, which reduces exposure. This is general information, not legal advice. Rules differ by country and by industry, so confirm the specific obligations that apply where your customers and data are located.
Want this applied to your business? Zansa builds dashboards and forecasts for small and mid-sized companies worldwide. Start with a free intro call.
Book a call