What It Protects
Basic identity data (name, address, ID numbers), web data (location, IP, cookies, RFID), health, genetic, and biometric data, racial/ethnic data, political opinions, and sexual orientation.
Home | Consulting | Strategy | GDPR & ACCESSIBILITY COMPLIANCE
Two regulations. 92% of U.S. companies call this a top priority.
A PwC survey found 92% of U.S. companies consider GDPR a top data protection priority — and nearly 15% of the global population depends on accessible technology under WCAG. Photon runs both as one readiness program, not two disconnected audits.
GDPR, in plain terms
The EU's General Data Protection Regulation — what it protects, who it applies to, and what's at stake.
Who It Affects
Any company with an EU presence, or without one but processing EU residents' data — effectively any organization with 250+ employees, or fewer with sensitive or non-occasional data processing.
What's At Stake
Fines up to 4% of global annual revenue or €20 million, whichever is higher. The law is extra-territorial: it protects the data subject, not just EU-registered businesses.
GDPR compliance checklist (US companies)
01
Audit EU Data
Confirm what personal data you process and whether any belongs to people in the EU.
02
Disclose Processing
Inform customers why you're processing their data under Article 6's lawfulness bases.
03
Assess & Protect
Run a Data Protection Impact Assessment; implement encryption and "privacy by design."
04
Vendor Agreements
Data processing agreements with every vendor handling personal data on your behalf.
CCPA — California's answer to GDPR
The California Consumer Privacy Act extends GDPR-equivalent protections to California residents — one of the most wide-reaching US data privacy laws.
01
Right to Disclosure
Understand what personal information businesses collect, why they collect it, and how it is used or shared.
02
Right to Access
Request access to the specific personal information a business holds about you.
03
Right to Delete
Ask businesses to delete personal information collected from you, subject to certain legal exceptions.
04
Right to Opt Out of Sale or Sharing
Direct businesses to stop selling your personal information or sharing it for cross-context behavioral advertising.
The four WCAG principles (POUR)
Perceivable
Information and UI components must be presentable to users in ways they can perceive — it can't be invisible to all of their senses.
Operable
UI components and navigation must be usable — the interface cannot require interaction a user cannot perform.
Understandable
Information and operation must be easy to grasp — content cannot be beyond a user's understanding.
Robust
Content must be reliably interpreted by assistive technologies, and remain accessible as technology evolves.
Evidence
Fortune 500 Retail Pharmacy Chain
ADA Compliance
ADA compliance work across iOS, Android, and Windows native mobile applications.
Sales & Marketing Services Company
WCAG 2.1 Compliance
WCAG 2.1 compliance assessment and audit, tested across desktop, tablet, and mobile against strict ADA guidelines.
Fortune 500 Insurance & Investment Holding Company
ADA Assessment
ADA assessment of a premium website, testing every individual component with JAWS screen-reader technology.
