8. Doing Business Abroad — Data Security Issues to Consider

Checklists

When talking to your attorney consider asking the following questions:

  • What types of information are protected in the foreign country?
  • Are there any restrictions on how information can be collected in the foreign country?
  • Are there any restrictions on how information must be stored in the foreign country?
  • Are there any restrictions on how information can be used in the foreign country?
  • Are there any laws limiting how long information can be stored once it is collected?
  • Can information collected by my business in the foreign country be transferred to the United States, or does it have to be stored and used in that country?
  • If I transfer information to the United States, am I restricted from providing that information to other parties, such as companies that assist my business with administrative support?
  • Do any restrictions apply to information that I maintain about employees that I hire in foreign countries?
  • What data security standards apply to data collected in a foreign country—if the data is stored there, or in the United States?

Only 28% of small businesses provide training to employees about Internet safety and security.

Source: 2012 National Small Business Study, National Cyber Security Alliance, Symantec, & JZ Analytics.