Initial Assessment
We review your event's specific requirements—industry regulations, geographic considerations, attendee types. This shapes our compliance approach for your project.
Compliance Standards That Actually Matter
When you're analyzing events across Taiwan and international markets, compliance isn't just paperwork. It's the foundation that lets you operate without looking over your shoulder.
We've spent years building systems that meet regulatory requirements while staying practical. Because compliance frameworks should protect your work, not slow it down. Our approach starts with understanding what regulators actually care about—and what your clients need to feel confident in your reports.
Every event analysis project touches personal data. Attendee information, behavior patterns, engagement metrics. The rules around this data have gotten stricter, and for good reason. But meeting those standards doesn't mean drowning in bureaucracy if you set things up right from the start.
Standards We Follow Without Exception
Taiwan Personal Data Protection Act
This is non-negotiable for any business operating here. We maintain strict protocols for data collection, processing, and storage. Our systems document consent at every touchpoint and give attendees real control over their information.
ISO 27001 Information Security
Certified since 2023, we follow international standards for protecting event data. Regular audits keep us honest. The framework covers everything from access controls to incident response—practical stuff that prevents problems before they start.
GDPR Alignment for International Events
When your events include European attendees, GDPR applies. We've built our data handling to meet these requirements by default, which means you're covered whether participants come from Taipei or Berlin.
Industry-Specific Requirements
Healthcare conferences, financial summits, government events—each sector has additional rules. We adapt our compliance approach to match your industry's specific requirements without reinventing the entire system.
How We Actually Protect Event Data
Collection Transparency
We tell attendees exactly what data we're gathering and why. No hidden tracking or surprise data points.
- Clear consent forms before data collection
- Plain language explanations
- Opt-in for non-essential analytics
- Easy withdrawal process
Storage & Encryption
Event data lives on Taiwan-based servers with military-grade encryption. Access is logged and limited to essential personnel only.
- AES-256 encryption at rest
- TLS 1.3 for data in transit
- Role-based access controls
- Automated backup with retention limits
Third-Party Management
Every vendor who touches event data signs data processing agreements. We audit their security practices annually.
- Vendor security assessments
- Contractual data protection clauses
- Limited data sharing scope
- Regular compliance reviews
Retention Policies
We keep data only as long as necessary—usually 24 months for event analytics. After that, it's permanently deleted unless you request otherwise.
- Automated deletion schedules
- Client-controlled retention periods
- Secure data destruction methods
- Deletion confirmation records
Incident Response
If something goes wrong, we have a 24-hour notification protocol. Our incident response plan includes containment, investigation, and transparent communication.
- Immediate breach containment
- Forensic investigation process
- Regulatory notification within legal timeframes
- Affected party communication
Access Rights
Attendees can request their data, correct inaccuracies, or ask for deletion. We respond to these requests within 15 days, usually faster.
- Data portability in standard formats
- Correction request processing
- Right to be forgotten compliance
- Processing restriction options
Our Audit Process Explained
1
2
System Configuration
Our analysts configure data collection tools to match your compliance needs. This includes consent mechanisms, data minimization rules, and security protocols.
3
Ongoing Monitoring
Throughout your event, automated systems check for compliance issues. Any anomalies trigger immediate review by our security team.
4
Post-Event Verification
After data collection ends, we verify all processes followed protocols. You receive documentation proving compliance for your records.
5
Annual Reviews
Every client gets an annual compliance review. We check if regulations have changed and update our systems accordingly—at no additional cost.
People Behind the Process
Compliance works because real people care about doing it right. Our team includes certified professionals who understand both technical requirements and practical business needs. They're not just checking boxes—they're protecting your reputation.
Stellan Bergquist
Compliance Director
Stellan spent a decade in regulatory affairs before joining us in 2022. He holds CIPP/E and CIPM certifications and actually reads legal updates for fun. His team ensures every project meets current standards without unnecessary complexity.
Liora Vasilyev
Data Protection Officer
Liora manages our data protection framework and handles all privacy impact assessments. She's the person who makes sure technical teams understand legal requirements and lawyers understand technical constraints. Certified DPO since 2021.
Questions About Compliance Requirements?
Every event has unique compliance considerations. We're happy to discuss your specific situation and explain how our systems would apply to your project.
Get in Touch