Data protection regulations

Data protection regulations across the world are designed to enable personal data to be used while minimising the risk of harmful impacts.

These regulations typically outline three key things:

  1. The lawful basis for collecting, using and sharing personal data.

  2. The rights of the data subject (the person the data is about).

  3. Liabilities and penalties.

Different countries have their own data protection legislation covering personal data, which needs to be adhered to. For instance, data protection laws in some countries include a ‘right to erasure’. This means that when data is published online, an individual has the right to have personal information about them deleted. Where details of legal proceedings or convictions are included within a dataset, these may have to be deleted after a certain time period.

Last updated