Episode 15 — Govern affiliate data sharing without creating privacy landmines

Sharing personal data between corporate affiliates or subsidiaries requires a sophisticated governance framework to avoid significant privacy and regulatory violations. This episode examines the legal requirements for "inter-company" data transfer agreements and the necessity of maintaining transparency with the data subjects. For the GLEG exam, practitioners must understand the concept of "joint controllership" and how liability is shared when data is processed across different business units. In practice, this governance involves mapping the flow of information to ensure that it only moves between affiliates with a valid legal basis and proper technical safeguards. A frequent pitfall is assuming that because two companies share a parent organization, they can share personal data without specific consent or a formal agreement. By implementing rigorous affiliate governance, you protect the organization from "cascading" privacy breaches and ensure compliance with global regulations like the GDPR. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.