What does General Data Protection Regulation regulate?

What does General Data Protection Regulation regulate?

• A. US privacy law
• B. Canadian privacy rules
• C. EU privacy and data protection law
• D. Australian data protection law

Answer: (C)

GDPR sets the rules for how personal data is handled in the European Union and European Economic Area. It governs every step of data processing—from how data is collected, stored, and used to how it’s shared with others. It also guarantees individuals specific rights over their data, such as accessing what a company has about them, correcting inaccuracies, having data deleted, and moving data to another service. To make this work, GDPR defines the responsibilities of the people and organizations that handle data (data controllers and processors), requires a lawful basis for processing (like consent or contract), and enforces principles such as data minimization, purpose limitation, accuracy, storage limitation, security, and accountability. It also covers how data can be transferred outside the EU/EEA, using safeguards like adequacy decisions or standard contractual clauses. National authorities enforce the rules and can impose penalties for violations. So, GDPR is EU privacy and data protection law, not laws from the US, Canada, or Australia.

GDPR sets the rules for how personal data is handled in the European Union and European Economic Area. It governs every step of data processing—from how data is collected, stored, and used to how it’s shared with others. It also guarantees individuals specific rights over their data, such as accessing what a company has about them, correcting inaccuracies, having data deleted, and moving data to another service.

To make this work, GDPR defines the responsibilities of the people and organizations that handle data (data controllers and processors), requires a lawful basis for processing (like consent or contract), and enforces principles such as data minimization, purpose limitation, accuracy, storage limitation, security, and accountability. It also covers how data can be transferred outside the EU/EEA, using safeguards like adequacy decisions or standard contractual clauses. National authorities enforce the rules and can impose penalties for violations.

So, GDPR is EU privacy and data protection law, not laws from the US, Canada, or Australia.