Law & compliance

Where data flows between systems, technical and legal requirements meet. This category sets out what to consider in integration projects: data processing agreements with providers and hosts, storage locations and third-country transfers, retention and deletion periods for records, electronic invoice formats and their mandatory fields, evidence requirements in cross-border trade and documentation requirements for audits. Added to this are accessibility and security rules that increasingly affect connected systems too. We describe which documents should be produced during a project and how requirements can be written into specifications early. The articles do not replace individual legal advice, but they prepare those discussions. We also show which entries a record of processing activities should contain when data moves regularly between several systems.