This Global Trends benchmark on privacy in the digital age covers Australia, Brazil, Canada, China, the European Union, India, Ireland, Japan, Korea, Singapore, South Africa, and the United States.
Among the main findings of this research:
- A new privacy law was adopted in China in November 2021 and the amended privacy law in Japan became effective in April 2022. Canada and India both introduced new privacy bills to Parliament.
- Most of the surveyed countries apply general privacy rules to location data and treat biometric data as a sensitive category of personal data, where explicit consent is generally required.
- Not all countries have set up an independent data protection authority (DPA). In the countries which have DPAs, they vary significantly in their years of operation and level of resources. Concerns about insufficient resources have been expressed even in advanced regions like the EU.
- There are few examples of significant data protection fines involving big tech, and the fines have generally been low compared to the size of the companies. The one standout is the US where Facebook reached a US$5bn settlement with the US government. In the EU, the Luxembourg DPA imposed the highest fine over General Data Protection Regulation (GDPR) infringements (US$837m) on Amazon.
Read the full research and discover how privacy is regulated and its enforcement works in practice across 12 different geographies around the world by clicking on “Access the full content” (Global Trends clients).
To request the report and/or a demo of the Global Trends service, click on “Request Access”, in case you are not subscribed to our Global Trends service.
more news
16 March 26
Africa tightens oversight of IoT connectivity as roaming and SIM rules diverge
Cullen International’s latest benchmarks assess the regulatory frameworks affecting IoT and M2M services in Africa. The research examines three core areas: whether permanent roaming is permitted, requirements for authorisation and notification, and whether and how SIM cards should be registered.
12 March 26
National implementation of the EU Gigabit Infrastructure Act
The Gigabit Infrastructure Act (GIA) is a regulation and as such directly applicable in all member states without the need for transposition into national law. Despite being a regulation, the GIA often sets minimum requirements, on top of which member states can adopt additional measures to address country-specific circumstances. Our new benchmark shows the choices made by member states when implementing the GIA.
09 March 26
How are EU member states transposing NIS2?
Our latest benchmark tracks the progress of the Directive on measures for a high common level of cybersecurity across the EU (NIS2) transposition in the 27 EU member states.