Data Protection
GDPR, CCPA, and international data protection compliance
Global Data Protection Framework
Daily Event Insurance maintains comprehensive compliance with global data protection regulations including GDPR (EU), CCPA/CPRA (California), PIPEDA (Canada), and other international privacy laws.
Our data protection framework ensures that customer information is handled with the highest standards of security and privacy, regardless of where the customer is located or where the data is processed.
Regulatory Compliance
GDPR
General Data Protection Regulation
Key Requirements:
CCPA
California Consumer Privacy Act
Key Requirements:
CPRA
California Privacy Rights Act
Key Requirements:
PIPEDA
Personal Information Protection Act
Key Requirements:
GDPR Core Principles & Implementation
Lawfulness, Fairness, Transparency
Clear privacy notices, lawful basis documented, transparent processing
Purpose Limitation
Data used only for stated purposes, no secondary uses without consent
Data Minimization
Collect only necessary data, regular reviews of data needs
Accuracy
Processes to correct inaccurate data, customer self-service options
Storage Limitation
Defined retention periods, automated deletion processes
Integrity and Confidentiality
Encryption, access controls, security monitoring
Accountability
DPO appointed, DPIA processes, compliance documentation
International Data Transfer Mechanisms
Standard Contractual Clauses
EU Commission approved contracts for international transfers
Adequacy Decisions
Transfers to countries with adequate data protection
Binding Corporate Rules
Internal data transfer policies for multinational organizations
Explicit Consent
Customer consent for specific international transfers
Data Breach Response Protocol
Detection (0-4 hours)
- Identify and contain the breach
- Assess scope and data involved
- Activate incident response team
- Document initial findings
Assessment (4-24 hours)
- Determine number of affected individuals
- Evaluate risk level to data subjects
- Identify root cause
- Begin remediation
Notification (24-72 hours)
- Notify supervisory authority (GDPR: 72 hours)
- Notify affected individuals if high risk
- Coordinate with law enforcement if needed
- Update stakeholders
Remediation (Ongoing)
- Implement security improvements
- Provide support to affected individuals
- Conduct post-incident review
- Update policies and procedures
Partners must report any suspected data breaches immediately. Contact our security team at security@dailyeventinsurance.com or call our 24/7 security hotline at 1-800-SECURE-1.
Partner Data Protection Obligations
As a data processor, partners have specific obligations under data protection laws:
Certifications & Audits
SOC 2 Type II
Annual audit
GDPR Compliant
DPO appointed
ISO 27001
In progress
Data Protection Questions?
Contact our Data Protection Officer for compliance questions
Email Data Protection Officer