Topics In Demand
Notification
New

No notification found.

An Overview of Global Data Protection Laws
An Overview of Global Data Protection Laws

October 4, 2024

7

0

Consumers across the globe use their personal data on the internet more now than ever. However, recent increase in number of data breaches and unauthorized access to personal data have raised concerns about how third party platforms protect individual’s digital data. Intentional breaches into computer networks, inadequate cybersecurity practices and privacy policies led to exposure of personal information of millions of people around the globe. As an outcome, privacy and protection of personal data and cybersecurity have emerged as an unavoidable matter that requires constant review. 

Today, every country around the globe has enacted some data privacy law to ensure that their citizens’ personal data are more stringently protected. With countries setting out regulations for collecting, using, sharing and processing data of customers, it’s time companies gain and review their compliance with international data privacy laws.  

Here’s a quick overview of global data protection laws from top line countries:

European Union:
General Data Protection Regulation (GDPR ):

GDPR imposes obligations on any organization across the globe that collects or processes personal data of any EU citizen. The key principles, obligations, and rights under the GDPR include Data minimization, Integrity and Confidentiality, Access to Data, Accountability, Right to Edit Information, Right to Deletion, Limitations on Automated Processing, and Data Portability. Several organizations ignoring GDPR were hit by hefty fines and reputational damages. 

United States:
California Consumer Privacy Act ( CCPA) and California Privacy Rights Act (CPRA) 

There is no comprehensive privacy law at the federal level in the US. However, several states in the US have their own data privacy laws and regulations. California’s CCPA (California Consumer Privacy Act) and its predecessor, CPRA (California Privacy Rights Act), are among such laws. CCPA enables California residents to have more control over their personal data that organizations collect about them. Other US states such as Alabama, Florida, Connecticut, New York, Florida, Illinois, Washington, Virginia and Texas have data-related bills, either in place or in the process of being passed. 

Canada:
Personal Information Protection and Electronic Documents Act (PIPEDA)

Canada’s PIPEDA aligns with the EU data protection law and five global privacy principles. It is applicable to private sector companies in Canada using, collecting, or disclosing personal data of consumers during commercial activities. 

Brazil:
General Data Protection Laws (LGPD)

Brazil’s LGPD is world’s largest data privacy regulation after GDPR and CCPA. Its key objective is to combine 40 different data privacy regulations and resolve conflicts that occur due to such vast number of diverse data privacy laws in the country. This law defines concepts of public and personal data, clear liabilities, and is applicable to organizations operating in all sectors, regardless of where the company is headquartered in Brazil.  

India:
Digital Personal Data Protection Bill (DPDP)

The Digital Personal Data Protection Act, 2023 is applicable to the processing of digital personal data within India where such data is collected offline or online and later digitized. DPDP is also applicable to such processing outside the country, if the organization happens to offer goods or service in India. DPDP Act defines the role of Significant Data Fiduciary (SDF) which the Indian government will identify using the sensitivity and volume of personal data processed. They will also be obligated to maintain data accuracy, security, and deletion once the purpose has been met. DPDP empowers citizens of India with the right to seek more information on how their personal data is processed. They will also have the right to correction and erasure, and grievance redressal. 

Other global data protection laws include Australia’s Privacy Act 1988, Angola’s Data Protection Law South Africa’s Protection of Personal Information Act (POPIA), US-industry specific laws such as Health Insurance Portability and Accountability Act (HIPAA), Gramm-Leach- Bliley Act (GLBA), Federal Information Security Management Act 2022 (FISMA), Sarbanes-Oxley Act(SOX), Children’s Online Privacy Protection Act (COPPA), British Virgin Islands’ Common Law Duty of Privacy and Confidentiality, China’s Personal Information Protection Law (PIPL), Israel’s Protection of Privacy Law.

The article was first published on CSM Blog Named: An Overview of Global Data Protection Laws


That the contents of third-party articles/blogs published here on the website, and the interpretation of all information in the article/blogs such as data, maps, numbers, opinions etc. displayed in the article/blogs and views or the opinions expressed within the content are solely of the author's; and do not reflect the opinions and beliefs of NASSCOM or its affiliates in any manner. NASSCOM does not take any liability w.r.t. content in any manner and will not be liable in any manner whatsoever for any kind of liability arising out of any act, error or omission. The contents of third-party article/blogs published, are provided solely as convenience; and the presence of these articles/blogs should not, under any circumstances, be considered as an endorsement of the contents by NASSCOM in any manner; and if you chose to access these articles/blogs , you do so at your own risk.


CSM Tech provides transforming solutions and services in IT for Governments and large or small Industries. As a CMMI Level 5 company, CSM emphasizes more on Quality of delivery and Customer Satisfaction. With about 2 decades of delivering solutions and more than 500 employees, CSM has developed a comprehensive portfolio of products, solutions and smart consulting services. CSM has achieved quite a few unique distinctions of being first to many unexplored business opportunities.

© Copyright nasscom. All Rights Reserved.