In this section, you can access the different parts of our guide for policy engagement on data protection “The Keys to Data Protection”. The guide is intended to help organisations and individuals improve their understanding of data protection, by providing a framework to analyse the various provisions which are commonly presented in a data protection law.

The guide was developed from Privacy International’s experience and expertise on international principles and standards applicable to the protection of privacy and personal data, and our leadership and research on modern technologies and data processing.

Part 1 introduces data protection: what it is, how it works and why it is essential for the exercise of the right to privacy.

While data protection laws vary from country to country, there are some commonalities and minimum requirements, underpinned by data protection principles and standards which tend to be reflected in the structure and content of relevant legislation. Each part of the report presents these, including:

• General provisions, definitions and scope (Part 2);
• Data protection principles (Part 3);
• The rights of data subjects (Part 4);
• The grounds for processing personal data (Part 5);
• The obligations of controllers and processors (Part 6); and
• Oversight and enforcement structures (Part 7).

Part 8 provides some additional resources on data protection, and outlines opportunities for organisations to engage on data protection.

Much of our engagement on data protection for the last decade has been undertaken through our work with our partners in the Privacy International Network. We would like to take the opportunity to acknowledge their incredible efforts to promote and advocate for the adoption of data protection laws across the world.

Please reach out to Privacy Internation on  email if you have any feedback on the guide via: info@privacyinternational.org