Data Subject Rights: Right to access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection, and rights related to automated decision-making.
Accountability: Data Protection Impact Assessments (DPIAs), record-keeping, and appointing a Data Protection Officer (DPO).
Cross-Border Data Transfers: Strict rules on transferring data outside the EU/EEA (e.g., Standard Contractual Clauses, adequacy decisions).
California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) - USA: For targeting the US market, especially California residents. Grants consumers rights to know, delete, and opt-out of the "sale" or "sharing" of their personal information. Many other US states (e.g., Virginia, Colorado, Connecticut, Utah) have enacted similar laws.
Digital Personal Data Protection Act (DPDPA) 2023 - India: India's new gambling data cambodia comprehensive law, emphasizing consent, purpose limitation, data minimization, and significant data principal rights. Crucial for targeting the Indian market.
Federal Decree-Law No. 45 of 2021 (UAE DPL) - UAE: The UAE's federal data protection law, aligned with international standards, with strong emphasis on consent and individual rights.
PIPEDA (Personal Information Protection and Electronic Documents Act) - Canada: Canada's federal privacy law, with provincial variations (e.g., Quebec's Law 25), focusing on consent, accountability, and purpose limitation.
Transparency: Clear, concise privacy notices
-
- Posts: 365
- Joined: Sun Dec 22, 2024 4:02 am