The content here is for informational purposes only, should not be taken as legal business, tax,

or investment advice, or be used to evaluate any investment or security and is not directed

at any investors or potential investors in any A16Z fund. For more details, please see A16Z.com

slash disclosures.

Hi, everyone. Welcome to the A6 and Z podcast. I'm Sonal. Today's topic is something

that's top of mind for so many, GDPR or general data protection regulation by the EU Parliament,

which goes into effect very soon. Since this affects so many startups and actually companies of all

kinds, we thought we'd share a sort of primer by podcast.

But be sure to also check out the show notes for links to some other resources mentioned in this episode.

Our special guest is Lisa Hock, who is VP of Security and Compliance at Everlaw in A6 and Z portfolio company.

She started as an environmental scientist and lawyer,

but spent most of her career in regulatory compliance. And joining her to host this conversation

is A6 and Z board partner, Steven Sinovsky. So I'm super excited to have a chance to talk about

a really complicated topic with a great friend and guest to join the podcast. Thanks, Stephen.

It's really, really exciting to be here and especially to talk about this great topic. It's on everybody's mind lately.

So we're going to just dive right in to GDPR, the general data protection and regulations of the

European Union. So first off, like just who is going to be regulated by it? Like a bunch of people,

like our product managers and compliance people and engineering and ops are wondering

whose job is and appointed each other. So like who is regulated by it? Well, in legal terms,

there's a thing called a long-arm jurisdiction. And this is probably one of the longest of the long-arm

jurisdictions. And what I mean by that is a situation where a local court can actually assert

jurisdiction over someone in another state, another county, and in this case, from the European

...