National data protection authority

Last updated

There are several national data protection authorities across the world, tasked with protecting information privacy. In the European Union and the EFTA member countries, their status was formalized by the Data Protection Directive [1] and they were involved in the Madrid Resolution.

Contents

This project is a part of the work of the International Law Commission of the United Nations.

Authorities by group of states

List of national data protection authorities

European Economic Area

Europe

Africa

Asia

Oceania

North America

South America

Central America

See also

General aspects

Technical aspects

Related Research Articles

The role of information commissioner differs from nation to nation. Most commonly it is a title given to a government regulator in the fields of freedom of information and the protection of personal data in the widest sense. The office often functions as a specialist ombudsman service.

Information privacy is the relationship between the collection and dissemination of data, technology, the public expectation of privacy, contextual information norms, and the legal and political issues surrounding them. It is also known as data privacy or data protection.

<span class="mw-page-title-main">Information Commissioner's Office</span> Non-departmental public body

The Information Commissioner's Office (ICO) is a non-departmental public body which reports directly to the Parliament of the United Kingdom and is sponsored by the Department for Science, Innovation and Technology. It is the independent regulatory office dealing with the Data Protection Act 2018 and the General Data Protection Regulation, the Privacy and Electronic Communications Regulations 2003 across the UK; and the Freedom of Information Act 2000 and the Environmental Information Regulations 2004 in England, Wales and Northern Ireland and, to a limited extent, in Scotland. When they audit an organisation they use Symbiant's audit software.

Personal data, also known as personal information or personally identifiable information (PII), is any information related to an identifiable person.

Information privacy, data privacy or data protection laws provide a legal framework on how to obtain, use and store data of natural persons. The various laws around the world describe the rights of natural persons to control who is using its data. This includes usually the right to get details on which data is stored, for what purpose and to request the deletion in case the purpose is not given anymore.

<span class="mw-page-title-main">Privacy Act 1988</span> Act of the Parliament of Australia

The Privacy Act 1988 is an Australian law dealing with privacy. Section 14 of the Act stipulates a number of privacy rights known as the Australian Privacy Principles (APPs). These principles apply to Australian Government and Australian Capital Territory agencies or private sector organizations contracted to these governments, organizations and small businesses who provide a health service, as well as to private organizations with an annual turnover exceeding AUD$3M. The principles govern when and how personal information can be collected by these entities. Information can only be collected if it is relevant to the agencies' functions. Upon this collection, that law mandates that Australians have the right to know why information about them is being acquired and who will see the information. Those in charge of storing the information have obligations to ensure such information is neither lost nor exploited. An Australian will also have the right to access the information unless this is specifically prohibited by law.

Privacy law is a set of regulations that govern the collection, storage, and utilization of personal information from healthcare, governments, companies, public or private entities, or individuals.

The Spanish Data Protection Agency is an independent agency of the government of Spain which oversees the compliance with the legal provisions on the protection of personal data. The agency is headquartered in the city of Madrid and it extends its authority to the whole country.

The German Bundesdatenschutzgesetz (BDSG) is a federal data protection act, that together with the data protection acts of the German federated states and other area-specific regulations, governs the exposure of personal data, which are manually processed or stored in IT systems.

<span class="mw-page-title-main">General Data Protection Regulation</span> EU regulation on the processing of personal data

The General Data Protection Regulation, abbreviated GDPR, or French RGPD is a European Union regulation on information privacy in the European Union (EU) and the European Economic Area (EEA). The GDPR is an important component of EU privacy law and human rights law, in particular Article 8(1) of the Charter of Fundamental Rights of the European Union. It also governs the transfer of personal data outside the EU and EEA. The GDPR's goals are to enhance individuals' control and rights over their personal information and to simplify the regulations for international business. It supersedes the Data Protection Directive 95/46/EC and, among other things, simplifies the terminology.

Data anonymization is a type of information sanitization whose intent is privacy protection. It is the process of removing personally identifiable information from data sets, so that the people whom the data describe remain anonymous.

The right to be forgotten (RTBF) is the right to have private information about a person be removed from Internet searches and other directories in some circumstances. The issue has arisen from desires of individuals to "determine the development of their life in an autonomous way, without being perpetually or periodically stigmatized as a consequence of a specific action performed in the past". The right entitles a person to have data about them deleted so that it can no longer be discovered by third parties, particularly through search engines.

Google Spain SL, Google Inc. v Agencia Española de Protección de Datos, Mario Costeja González (2014) is a decision by the Court of Justice of the European Union (CJEU). It held that an Internet search engine operator is responsible for the processing that it carries out of personal information which appears on web pages published by third parties.

Bodil Lindqvist v Åklagarkammaren i Jönköping (2003) is a decision by the Court of Justice of the European Communities. It held that referring to various persons on an internet page and identifying them either by name or by other means constitutes processing of personal data by automatic means within the meaning of Community law.

The Ley Federal de Protección de Datos Personales en Posesión de los Particulares, is a law of Mexico, approved by the Mexican Congress on April 27, 2010. The law aims to regulate the right to informational self-determination. The law was published on July 5, 2010, in the Official Gazette and entered into force on July 6, 2010. Its provisions apply to all natural or legal persons who carry out the processing of personal data in the applicable exercise of their activities. Companies such as banks, insurance companies, hospitals, schools, telecommunications companies, religious organizations, and professionals such as lawyers, doctors, and others, are required to comply with the provisions of this law.

The Organic Law 15/1999 of December 13 on Protection of Personal Data was Spanish organic law that guaranteed and protected the processing of personal data, public liberties, and fundamental human rights, and especially of personal and family honor and privacy. It was approved by the General Court on December 13, 1999. This law was developed based on Article 18 of the Spanish Constitution of 1978, the familiar and personal right to privacy, and the secrecy of communications.

The National Privacy Commission, or NPC, is an independent government body in the Philippines created under Republic Act No. 10173 or the Data Privacy Act of 2012; the Commission is mandated to administer and implement the provisions of the Act, and to monitor and ensure compliance of the country with international standards set for data protection. While attached to the Philippines' Department of Information and Communications Technology (DICT) for purposes of policy coordination, it remains independent in the performance of its functions. The Commission safeguards the fundamental human right of every individual to privacy, particularly information privacy, while ensuring the free flow of information for innovation, growth, and national development.

<span class="mw-page-title-main">Ximena Puente de la Mora</span> Mexican lawyer, academic, and researcher (born 1977)

Ximena Puente de la Mora is a Mexican lawyer, academic, and researcher who will serve as a proportional representation federal deputy in the LXIV Legislature of the Mexican Congress. Prior to being a federal deputy, she was a commissioner of the Federal Institute of Information Access from 2014 to 2016. After the General Law of Transparency and Access to Public Information took effect, this became the National Institute of Transparency, Information Access, and Personal Data Protection, of which she remained president through 2017 and commissioner through March 2018. She holds a degree in law from the University of Colima, a master's in legal sciences from the University of Navarra in Spain, and a PhD in law from the University of Guadalajara.

<span class="mw-page-title-main">National Directorate for Personal Data Protection</span> Law enforcement agency

The National Directorate for Personal Data Protection (NDPDP) is the enforcement body for the Argentine Republic's National Personal Data Protection Act. It is a dependency of the Ministry of Justice and Human Rights. The directorate is in charge of the National Databases Register, an organized tool that is used in order to understand and control the data bases that circulate throughout the country. The National Databases Register assists and advises those responsible for archives, data banks, registers, and databases with complaints and claims made against them. Such claims are made for violations of rights of information, access, rectification, updating, deletion, and confidentiality in the processing of data. The complaints that are brought before the National Directorate for Personal Data Protection are exclusively about revealing deficiencies or incompliance with applicable standards in the treatment of personal data.

<span class="mw-page-title-main">Personal Information Protection Commission (South Korea)</span> South Korean government agency for data protection issues

The Personal Information Protection Commission is the national data protection authority of South Korea. It is formed as independent agency in year 2011 by 'Personal Information Protection Act(PIPA, Korean: 개인정보 보호법)', and is now located in Government Complex Seoul. The Commission is constituted with 9 commissioners and one of them is the Chairperson, who is appointed by the President of South Korea.

References

  1. ↑ Article 28 of EU directive 95/46/EC
  2. ↑ OECD Recommendation on Cross-border Co-operation in the Enforcement of Laws Protecting Privacy
  3. ↑ "Datenschutzaufsichtsbehörden für den nicht-öffentlichen Bereich". www.ldi.nrw.de. Retrieved Oct 15, 2020.
  4. ↑ "Home l Information Regulator SA".
  5. ↑ "Brazil's Temer creates data protection agency - official gazette". Reuters. 2018-12-28. Retrieved 2018-12-28.
  6. ↑ "Home". rnp.hn.
  7. ↑ "Archived copy". Archived from the original on 2022-06-17. Retrieved 2022-07-14.{{cite web}}: CS1 maint: archived copy as title (link)
This page is based on this Wikipedia article
Text is available under the CC BY-SA 4.0 license; additional terms may apply.
Images, videos and audio are available under their respective licenses.