Blog - Let's Talk About International Data Privacy and Protection
From GDPR to PIPEDA and HIPAA, there are a lot of acronyms associated with international data and privacy protection. We hear these terms thrown around and are told to comply with them, but this can become confusing. What do they all mean again? 🤔
This is exactly why we celebrate International Data Privacy Week all around the world from January 24-28. This National Cybersecurity Alliance initiative is an international effort to empower individuals and encourage businesses to respect privacy, safeguard data, and enable trust.
We’re here to motivate you to “Own Your Privacy” with a refresh on some important data privacy laws. In honor of this global effort, let’s talk about International Data Privacy and Protection.

What Are Data Privacy Laws and Who Do They Apply To?
It’s no wonder not everyone can keep track of all the data privacy laws circulating around. According to The United Nations Conference on Trade and Development (UNCTAD), “128 out of 194 countries had put in place legislation to secure the protection of data and privacy.” 😮
Just the United States alone has hundreds of privacy and data security among its 50 states and territories. These privacy laws often concern privacy topics such as:
- Requirements for safeguarding data.
- Disposal of data.
- Privacy policies.
- Appropriate use of Social Security numbers.
- And data breach notification.
And that’s just to name a few!
Then, there are state-level privacy laws that differ, as well as Federal Trade Commission (FTC) jurisdictions over commercial entities to protect consumers against unfair or deceptive trade practices.
But before we overload you with all the laws, let’s start by discussing the principles behind these regulations:
Principles for International Data Privacy Regulations
Why all the data privacy laws? There are five global privacy principles that international privacy laws for data protection generally follow, including:
- Notice. This is about letting a person know about the policies in place to protect their data.
- Choice and consent. People should have the right to choose and allow how a company uses, storages, manages, and collects personal information.
- Access and participation. Who can see and use the data that’s being shared and protected? We need security protocols to regulate visibility and use.
- Integrity and security. This concerns how the data is being stored and how it’s being used. Is it ethical?
- Enforcement. These laws must be enforced in a way that inspires organizations to comply with the rules.
One of the Biggest Examples: GDPR
The General Data Protection Regulation (GDPR) is known as one of the most extensive legal provisions for the protection of personal data and security.
This 2018 international privacy law for data protection affects any organization that processes any personal data from any EU citizen.

Today, a company not complying with the GDPR can face costly fines and broken reputational trust for violating it. Throughout this month, we’ll share a few important things to know about the GDPR and other important privacy laws and regulations.
Find Your Country/State’s Privacy Laws
Let’s prepare for International Data Privacy Week by understanding some of the privacy regulations that apply to you as an individual and to our company at large.
DLA Piper offers this Law Map to compare the data protection laws across the world. Filter by country to understand the laws that affect you and our organization.
We’ll be talking more in-depth about common privacy laws this month; hang tight!