The General Data Protection Regulation (GDPR) is a regulation that is intended to strengthen data protection for individuals within European Union (EU) countries. The GDPR went into effect on May 25, 2018. The primary objectives of the GDPR are to give people more control over their personal data, to help protect personal data from the risk of loss, and to unify regulatory privacy and data requirements within the EU.
The California Consumer Privacy Act of 2018 requires U.S. companies to implement a number of similar privacy initiatives, which will afford California residents unparalleled (in the United States) data privacy rights. The law takes effect on January 1, 2020. Subject to a number of exceptions, discussed below, the CCPA covers every “business” that collects and sells consumer “personal information” or discloses personal data for a business purpose.
The Personal Information Protection and Electronic Documents Act of Canada states that organizations must obtain an individual’s consent when they collect, use or disclose that individual’s personal information. Individuals should also be assured that their information will be protected by appropriate safeguards.