General

The Metasoul Data privacy assistant provides question catalogs for various use cases. Based on the answers to a question catalog, Metasoul generates a GDPR-compliant privacy notice and, if needed, additional documents.
If questions in a catalog cannot be answered, the catalog can be easily shared with other individuals.
Once a privacy notice or another document has been created with the Metasoul Data privacy assistant, it can be made publicly available online via a Metasoul link as a PDF or HTML, or dynamically embedded on a website or in an app using an iFrame or JavaScript. Content can also be kept private.
Embedding via iFrame or JavaScript ensures that legal or content-related changes are automatically applied. Embedding via JavaScript also allows a privacy notice or other content to match the website’s style. The following document types are currently supported:

• Privacy notices for websites, applications, and general services directed at end customers. Privacy notices for employee management, marketing measures, and associations are currently available only for selected beta customers.
• Imprints
• Data Processing Agreements (only in Metasoul Business)
• Confidentiality agreements / NDA (currently available only for selected beta customers)
• General terms and conditions / GTC (currently available only for selected beta customers)
• Internal privacy policies for handling personal data (currently available only for selected beta customers)

In principle, yes. The Metasoul Data privacy assistant provides options to extend the privacy notice with data protection components from various sector-specific regulations as well as federal laws in the USA. Since data protection in the USA is not generally regulated as in Europe, but rather on a sector-specific basis and supplemented by state-level laws (for example, CCPA in California), compliance with data protection requirements in the USA is complex.

For the creation of US-specific content in Metasoul privacy notices, the following US laws have been taken into account:

• Cybersecurity Information Sharing Act
• Right to Financial Privacy Act
• Privacy Protection Act
• Foreign Intelligence Surveillance Act
• US Patriot Act
• FISA Amendments Act
• USA Freedom Act
• CAN-SPAM Act
• Drivers Privacy Protection Act
• Health Insurance Portability and Accountability Act (HIPPA)
• Genetic Information Nondiscrimination Act
• Health Information Technology for Economic and Clinical Health Act
• Confidentiality of Substance Use Disorder Patient Records Rule 21st Century Cures Act
• Childrens online Privacy protection Act (COPPA)
• Fair Credit Reporting Act Fair and Accurate Credit Transaction Act
• Gramm-Leach-Bliley Act Dodd-Frank Act
• Civil Rights Act Pregnancy Discrimination Act
• Americans with Disabilities Act
• Age Discrimination Act
• Equal pay Act
• Telephone Consumer Protection Act
• Telemarketing and Consumer Fraud and Abuse Prevention Act
• Junk Fax Prevention Act
• Cable Communications Policy Act
• Telecommunications Act
• Video Privacy Protection Act
• Video Privacy Protection Amendments
• California Online Privacy Protection Act
• California Age-Appropriate Design Code Act
• California’s Student Online Personal Information Protection Act
• Family Educational Rights and Privacy Act
• California Consumer Privacy Act (CCPA)
• California Consumer Rights Act (CCRA)
• Colorado Privacy Act
• Connecticut Data Privacy Act
• Delaware Personal Data Privacy Act
• Florida Digital Bill of Rights
• Indiana Consumer Protection Act
• Iowa Consumer Data Protection Act
• Kentucky Consumer Data Protection Act
• Maryland Online Data Privacy Act
• Minnesota Consumer Data Privacy Act
• Montana Consumer Data Privacy Act
• Nebraska Data Privacy Act
• Nevada Privacy of Information Collected on the Internet from Consumers Act and Amendment SB-260
• New Hampshire Privacy Act
• New Jersey Data Privacy Act
• Oregon Consumer Privacy Act
• Rhode Island Data Transparency and Privacy Protection Act
• Tennessee Information Protection Act
• Texas Data Privacy and Security Act
• Utah Consumer Privacy Act
• Virginia Consumer Data Protection Act
• California’s Shine the Light law

Since the GDPR already imposes extensive requirements on privacy notices, the privacy notices generated with Metasoul are applicable not only in Switzerland, the United Kingdom, and Norway, but also in many other countries outside the EU and the USA, and are compatible with the requirements of other countries’ data protection laws. If the privacy notices generated by Metasoul are intended for audiences beyond the mentioned regions, a prior review of their applicability is recommended.

Metasoul support can be best reached via the support functions provided within the Metasoul app. Further information can be found here.