Privacy
Rules on collecting, using, sharing and protecting personal information, and on individuals’ rights over it.
Overview
Privacy law includes the GDPR and UK GDPR, PIPEDA and provincial laws in Canada, US state privacy laws and sector laws such as HIPAA and GLBA’s Regulation P.
It connects most directly to GDPR, PIPEDA, Data protection and Privacy and data protection.
Check the official sources below for legal scope, applicable dates and exceptions. This entry is an explanatory reference, not legal advice.
Why it matters
Privacy regimes overlap heavily and differ in detail, especially for multinational firms.
Who it affects
Any organisation handling personal data.
Where it sits
Ten linked steps connect where you operate to the proof that you complied.
- 01Jurisdiction
- 02Industry
- 03Activity
- 04Authority
- 05Regulation
- 06Requirement
- 07Guidance
- 08Control
- 09Evidence
- 10Enforcement
Connections
The terms most closely tied to Privacy. Select one to open it.
What to do about it
- 1List the laws and authorities in this area that apply to you.
- 2Map each obligation to a control and owner.
- 3Monitor change and enforcement in the area.
- 4Report coverage and gaps to management.
From requirement to evidence.
One consent and retention control set is mapped to every privacy regime that applies.
Request early access →