Data Privacy

From Open Risk Manual

Definition

Data Privacy (also Information Privacy) denotes the perimeter of information collection and dissemination that is acceptable in a given legal and political environemnt. Related concepts with nuanced differerences in meaning are Information Privacy and Data Protection.

  • The concept of data privacy is in-principle tecnhology agnostic. Digital technology has both complicated and accelerated the recognition of data privacy as an important aspect of societal organization.

Data Types

  • Various types of [[Personal Data] often come under privacy concerns
    • Media Consumption patterns (newspapers, radio, television)
    • Online Data (web browsing, email, messaging, search, comments, geolocation)
    • Educational Data
    • Medical Data
    • Commercial Data (purchases, sales, organizational structure)
    • Financial (transactions)

Privacy Laws

  • General Personal Data Protection Law (Brazil)
  • Data Protection Directive (European Union)
  • California Consumer Privacy Act|California Consumer Privacy Act (CCPA) (California)
  • Privacy Act (Canada)
  • Privacy Act 1988 (Australia)
  • Personal Data Protection Bill 2019|Personal Data Protection Bill 2019 (India)
  • China Internet Security Law|China Cyber Security Law (CCSL) (China)
  • Data Protection Act, 2012 (Ghana)
  • Personal Data Protection Act 2012 (Singapore)
  • Republic Act No. 10173: Data Privacy Act of 2012 (Philippines)
  • Data protection (privacy) laws in Russia
  • Data Protection Act 2018 (United Kingdom)
  • Personal Data Protection Law (PDPL) (Bahrain)

Privacy Authorities and Organizations

  • National data protection authority|National data protection authorities in the European Union and the European Free Trade Association
  • Office of the Australian Information Commissioner (Australia)
  • Privacy Commissioner (New Zealand)
  • Commission nationale de l'informatique et des libertés, France
  • Federal Commissioner for Data Protection and Freedom of Information (Germany)
  • Office of the Privacy Commissioner for Personal Data (Hong Kong)
  • Data Protection Commissioner (Republic of Ireland)
  • Office of the Data Protection Supervisor (Isle of Man)
  • National Privacy Commission (Philippines)
  • Personal Data Protection Act 2012 (Singapore)
  • Personal Data Protection Office (Turkey) (KVKK, Turkey)
  • Federal Data Protection and Information Commissioner (Switzerland)
  • Information Commissioner's Office]] (ICO, United Kingdom)
  • Confederation of European Data Protection Organisations
  • Data Protection Day (28 January)
  • International Association of Privacy Professionals (headquartered in USA)
  • Privacy International (headquartered in UK)

Mitigation Mechanisms

See Also

References