Director Institute for Data Protection and Data Security. Licensed Attorney at Law (NY). PhD on the topic of Data Protection Compliance in the Cloud with a strong focus on the EU GDPR. Masters of Law University of Zurich. Bachelor of Laws Bond University Australia. Visiting Scholar Columbia Law School (CLS).
You will need a privacy policy setting out the tools you use, the data they collect and the options to object to the collection. Additionally, you will need to give notice to the right to deletion and rectification as well as the contact point for data protection issues. If the GDPR applies to you then you must also enter into data processing agreements with your processors as well as maintain a processing register.