Let's take a few moments to look at country‑specific
legislation related to data privacy.
Almost all countries have some kind of legislation or regulation concerning
data related to their citizens being limited for ability to exist on
computers outside of their country. If your business follows the sun and you
have global presence, this is a cool website to use so that you can follow
the laws that you are closest to.
It can do some comparing and contrasting from what it looks like to
house data in one location versus in other locations.
Countries can vary in how they view data privacy.
Some countries have data protection laws that focus on individual citizens
maintaining the rights over data about them the same way that they can
maintain rights regarding their physical person.
Other countries have strict prohibition of the transporter flow of
data in order to help protect state secrets.
When you look at the African continent, nearly two‑thirds of
the 54 nations of the African continent has data protection as
a regulation or is in the process of making it or has it as
part of their constitution.
For the nations that have data protection mechanisms, the
themes include what you see featured here.
Does it remind you of anything? If you said OECD,
you're going down the right path to prepare for the exam.
The APEC's 21 members aim to create greater prosperity for the
people of the region by promoting balanced,
inclusive, and sustainable innovative and secure growth by
accelerating regional economic integration.
These nations are trying to level the playing field with
such partners as the European Union.
In November 2011,
the APEC leaders issued a directive to implement the
APEC Cross‑Border Privacy Rules system.
The CBPR system balances the flow of information and data across borders while
at the same time providing effective protections for personal information
essential to trust and confidence in the online market.
The system is one by which the privacy policies and practices of
companies operating in an APEC region are assessed, and they're
certified by a third‑party verifier known as an accountability
agent, and they follow a set of commonly agreed upon rules based
upon the APEC Privacy Framework.
The Australian National Privacy Act of 1988 is similar to
many of the EU privacy and protection acts.
It provides guidance and regulates how organizations collect, store,
secure a process and disclose personal information.
Also known as the NPP, the National Privacy Principles listed in a
Privacy Act were developed and updated in 2014, this revision of 13
privacy principles. An example of another one would be the EU‑US
Privacy Shield decision that was adopted in July 12th of 2016, known as
the Privacy Shield Framework.
This framework was designed to protect the fundamental rights of anyone in
the EU whose personal data is transferred to the US.
The effective protection and redress for individuals was written into
it, and there should be this annual joint review by the EU and US. Now
it should be known that this was found to be ineffective by the European
Commission a number of years back.
Finally,
let's discuss maintaining legal and regulated privacy by means
of some trusted and effective frameworks.