Data Privacy

From Open Risk Manual
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

Definition

Data Privacy (also Information Privacy) denotes the perimeter of information collection and dissemination that is acceptable in a given legal and political environemnt. Related concepts with nuanced differerences in meaning are Information Privacy and Data Protection.

  • The concept of data privacy is in-principle tecnhology agnostic. Digital technology has both complicated and accelerated the recognition of data privacy as an important aspect of societal organization.

Data Types

  • Various types of [[Personal Data] often come under privacy concerns
    • Media Consumption patterns (newspapers, radio, television)
    • Online Data (web browsing, email, messaging, search, comments, geolocation)
    • Educational Data
    • Medical Data
    • Commercial Data (purchases, sales, organizational structure)
    • Financial (transactions)

Privacy Laws

  • General Personal Data Protection Law (Brazil)
  • Data Protection Directive (European Union)
  • California Consumer Privacy Act|California Consumer Privacy Act (CCPA) (California)
  • Privacy Act (Canada)
  • Privacy Act 1988 (Australia)
  • Personal Data Protection Bill 2019|Personal Data Protection Bill 2019 (India)
  • China Internet Security Law|China Cyber Security Law (CCSL) (China)
  • Data Protection Act, 2012 (Ghana)
  • Personal Data Protection Act 2012 (Singapore)
  • Republic Act No. 10173: Data Privacy Act of 2012 (Philippines)
  • Data protection (privacy) laws in Russia
  • Data Protection Act 2018 (United Kingdom)
  • Personal Data Protection Law (PDPL) (Bahrain)

Privacy Authorities and Organizations

  • National data protection authority|National data protection authorities in the European Union and the European Free Trade Association
  • Office of the Australian Information Commissioner (Australia)
  • Privacy Commissioner (New Zealand)
  • Commission nationale de l'informatique et des libertés, France
  • Federal Commissioner for Data Protection and Freedom of Information (Germany)
  • Office of the Privacy Commissioner for Personal Data (Hong Kong)
  • Data Protection Commissioner (Republic of Ireland)
  • Office of the Data Protection Supervisor (Isle of Man)
  • National Privacy Commission (Philippines)
  • Personal Data Protection Act 2012 (Singapore)
  • Personal Data Protection Office (Turkey) (KVKK, Turkey)
  • Federal Data Protection and Information Commissioner (Switzerland)
  • Information Commissioner's Office]] (ICO, United Kingdom)
  • Confederation of European Data Protection Organisations
  • Data Protection Day (28 January)
  • International Association of Privacy Professionals (headquartered in USA)
  • Privacy International (headquartered in UK)

Mitigation Mechanisms

See Also

References