ANGOLA PERSONAL DATA MANAGEMENT
Generally, entities must obtain prior express consent from data subjects and provide prior notice to the APD to...
ARGENTINA PERSONAL DATA MANAGEMENT
Personal data collected for purposes of processing must be truthful, adequate, relevant and not excessive in...
AUSTRALIA PERSONAL DATA MANAGEMENT
Organisations may not collect personal information unless the information is reasonably necessary for...
AUSTRIA PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
BAHRAIN PERSONAL DATA MANAGEMENT
Processing is defined under the PDPL as any operation or set of operations carried out on personal data by...
BELARUS PERSONAL DATA MANAGEMENT
Collection and processing of personal data must...
BELGIUM PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
BERMUDA PERSONAL DATA MANAGEMENT
Once fully in force, PIPA will regulate the collection and processing of personal information and will apply to any individual...
BOLIVIA PERSONAL DATA MANAGEMENT
Under the legitimation principle, the person responsible within the Personal Data Protection Authority may...
BOSNIA AND HERZEGOVINA PERSONAL DATA MANAGEMENT
Collection and processing of personal data is permissible if carried out pursuant to the data subject’s consent...
BOTSWANA PERSONAL DATA MANAGEMENT
Processing means any operation or a set of operations which is taken in regard to personal data...
BRAZIL PERSONAL DATA MANAGEMENT
Under LGPD collection and processing is referred to as data treatment, and defined as all operations carried out with personal data, such as...
BRITISH VIRGIN ISLANDS PERSONAL DATA MANAGEMENT
Entities that manage and maintain personal data in the BVI are subject to the common law duties of privacy and confidentiality...
BURUNDI PERSONAL DATA MANAGEMENT
Most sector specific laws and regulations that impose confidentiality and data protection requirements apply to...
BULGARIA PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
CANADA PERSONAL DATA MANAGEMENT
Canadian Privacy Statutes set out the overriding obligation that organisations only collect...
CAPE VERDE PERSONAL DATA MANAGEMENT
The collection and processing of personal data is subject to the rules laid down in the Data Protection Law...
CAYMAN ISLANDS PERSONAL DATA MANAGEMENT
There are no statutory provisions currently in force that specifically address the collection and processing of personal information...
CHILE PERSONAL DATA MANAGEMENT
The processing of personal data is defined as any operation, complex of operations or technical procedures, whether automated or not, that allows the...
CHINA PERSONAL DATA MANAGEMENT
In general, express consent is required from the data subject before personal information can be collected...
COLOMBIA PERSONAL DATA MANAGEMENT
The processing of financial data, credit records and commercial information, collected in Colombia or abroad...
COSTA RICA PERSONAL DATA MANAGEMENT
Any company may store personal information and manage a database containing it if the following rules are respected...
CROATIA PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
CYPRUS PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
CZECH REPUBLIC PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
DENMARK PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
DOMINICAN REPUBLIC PERSONAL DATA MANAGEMENT
The general rule for the treatment of personal data under the DPL is the consent requirement...
EGYPT PERSONAL DATA MANAGEMENT
According to the principles of the Egyptian Civil Code, the collection, use or processing of personal data is prohibited in case...
ESTONIA PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
ETHIOPIA PERSONAL DATA MANAGEMENT
Though Ethiopia has not enacted a specific law to address personal data collection and processing issues...
FINLAND PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
FRANCE PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
GERMANY PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
GHANA PERSONAL DATA MANAGEMENT
A person shall collect data directly from the data subject unless...
GIBRALTAR PERSONAL DATA MANAGEMENT
Data controllers may collect and process personal data when any of the following conditions are met...
GREECE PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
GUERNSEY PERSONAL DATA MANAGEMENT
Data controllers must comply with the data protection principles set out under...
HONDURAS PERSONAL DATA MANAGEMENT
Individuals, companies, and / or Obligated Entities that collect personal data may not use sensitive personal data or...
HONG KONG, SAR PERSONAL DATA MANAGEMENT
A data user may collect personal data from a data subject if...
INDIA PERSONAL DATA MANAGEMENT
Under the Act, if a corporate entity that possesses, manages or handles any sensitive personal information in...
HUNGARY PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
ICELAND PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
INDONESIA PERSONAL DATA MANAGEMENT
Based on Article 14 (2) of GR. 71, processing of personal data includes...
IRAN PERSONAL DATA MANAGEMENT
Data collection and processing, including publication, is subject to data subject consent, provided that the “data message”...
IRELAND PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
ISRAEL PERSONAL DATA MANAGEMENT
The collection, processing or use of personal data is permitted subject to obtaining the informed consent of the data subjects...
ITALY PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
JAPAN PERSONAL DATA MANAGEMENT
When handling personal information, a business operator must specify to the fullest extent possible the purpose of use of...
JERSEY PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles that apply to all processing of personal data...
KAZAKHSTAN PERSONAL DATA MANAGEMENT
Kazakh law requires those collecting and processing personal data to have the consent of the personal data subject or...
KENYA PERSONAL DATA MANAGEMENT
The processing of personal data must comply with the principles prescribed in this part. It must be...
KUWAIT PERSONAL DATA MANAGEMENT
The E-Commerce Law includes a general obligation prohibiting Kuwaiti governmental bodies from collecting or...
KYRGYZSTAN PERSONAL DATA MANAGEMENT
One of the basic principles of dealing with personal data is that personal data must be collected for accurately pre-defined...
LESOTHO PERSONAL DATA MANAGEMENT
The DP Act defines processing as an operation or activity or any set of operations, whether or not by automatic means relating to any of the following...
LATVIA PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
LITHUANIA PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
LUXEMBOURG PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
MACAU PERSONAL DATA MANAGEMENT
Personal data may be processed only if the data subject has given his or her unequivocal consent or if processing is deemed necessary...
MADAGASCAR PERSONAL DATA MANAGEMENT
The following principles must be satisfied when personal data is collected and processed...
MALAYSIA PERSONAL DATA MANAGEMENT
Under the PDPA, subject to certain exceptions, data users are generally required to obtain a data subject’s consent for...
MALTA PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
MAURITIUS PERSONAL DATA MANAGEMENT
Subject to exceptions provided under the Act, a controller cannot collect personal data unless the collection...
MEXICO PERSONAL DATA MANAGEMENT
The term ‘processing’ is broadly defined to include the collection, use, communication or storage of personal data by any means...
MOLDOVA PERSONAL DATA MANAGEMENT
Personal data shall be processed with the consent of the personal data subject, unless an exception applies...
MONACO PERSONAL DATA MANAGEMENT
Data processing must be justified by at least one of the following bases...
MONTENEGRO PERSONAL DATA MANAGEMENT
A prerequisite for the legitimate processing of personal data is to obtain the data subject’s valid, informed consent...
MOROCCO PERSONAL DATA MANAGEMENT
The personal data must be processed in accordance with the following principles...
MOZAMBIQUE PERSONAL DATA MANAGEMENT
Under the Constitution of the Republic of Mozambique, individually identifiable information, concerning to political...
NAMIBIA PERSONAL DATA MANAGEMENT
There are no restrictions on the collection and processing of personal data...
NETHERLANDS PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
NEW ZEALAND PERSONAL DATA MANAGEMENT
Subject to specific exceptions, agencies may collect, store and process personal information in accordance with the...
NIGERIA PERSONAL DATA MANAGEMENT
Personal Data must be collected and processed in accordance with a specific, legitimate and lawful purpose consented to by the Data Subject...
NORTH MACEDONIA PERSONAL DATA MANAGEMENT
The DP Law sets forth the fundamental principles for personal data collection and processing require...
PAKISTAN PERSONAL DATA MANAGEMENT
There are no restrictions on the collection and processing of personal data...
NORWAY PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
PANAMA PERSONAL DATA MANAGEMENT
In Panama, personal information is protected at the constitutional level...
PARAGUAY PERSONAL DATA MANAGEMENT
In accordance with the Private Information Law, every person has the right to collect, store and process personal information for a strictly private use...
PERU PERSONAL DATA MANAGEMENT
The collection and processing of personal data requires the data subject’s prior, informed, express and...
PHILIPPINES PERSONAL DATA MANAGEMENT
The collection and processing of Personal Information must comply with the general principle that Personal Information must be...
POLAND PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
PORTUGAL PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
QATAR PERSONAL DATA MANAGEMENT
Generally, data subject consent is required to collect and process personal data...
QATAR – FINANCIAL CENTRE PERSONAL DATA MANAGEMENT
Data controllers may process personal data when any of the following conditions are met...
RUSSIA PERSONAL DATA MANAGEMENT
Data controllers may collect and process personal data where any of the following conditions are met...
ROMANIA PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
SAUDI ARABIA PERSONAL DATA MANAGEMENT
There is no concept of data controller or data processor in the KSA...
SERBIA PERSONAL DATA MANAGEMENT
The collection and further processing of personal data has to be legitimate and legally grounded...
SEYCHELLES PERSONAL DATA MANAGEMENT
The data protection principles set out in the Act apply to personal data held by data users. Those data protection principles are as follows...
SINGAPORE PERSONAL DATA MANAGEMENT
Organisations may only collect, use or disclose personal data in the following scenarios...
SLOVAK REPUBLIC PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
SLOVENIA PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
SOUTH AFRICA PERSONAL DATA MANAGEMENT
"Processing" of information is defined in POPIA as any operation or activity or any set of operations, whether or not by automatic means...
SOUTH KOREA PERSONAL DATA MANAGEMENT
If a Data Handler under PIPA or an IT Service Provider under the IT Network Act intends to collect Personal Data from the data subject or IT service user...
SPAIN PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
SWEDEN PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
SWITZERLAND PERSONAL DATA MANAGEMENT
The following principles apply to the collection and processing of personal data (including data of legal entities)...
TAIWAN, CHINA PERSONAL DATA MANAGEMENT
Under the PDPL, the data controller should not collect or process personal data unless there is specific purpose and...
TAJIKISTAN PERSONAL DATA MANAGEMENT
PDPL provides the following definitions of collection and processing of personal data...
THAILAND PERSONAL DATA MANAGEMENT
Collection, use or disclosure of Personal Data requires consent of the Data Subject...
TRINIDAD AND TOBAGO PERSONAL DATA MANAGEMENT
The knowledge and consent of the individual is required for the collection...
TUNISIA PERSONAL DATA MANAGEMENT
The following principles generally apply to the processing of personal data...
TURKEY PERSONAL DATA MANAGEMENT
Pursuant to the LPPD, it is mandatory to comply with certain principles while collecting and processing personal data...
TURKMENISTAN PERSONAL DATA MANAGEMENT
Owner of personal data shall give consent on collection and processing of its personal data...
UAE – ABU DHABI GLOBAL MARKET FREE ZONE PERSONAL DATA MANAGEMENT
Data controllers may process personal data when any of the following conditions are met...
UAE – DUBAI (DIFC) PERSONAL DATA MANAGEMENT
Data controllers may process personal data when any of the following conditions are met...
UAE – DUBAI HEALTH CARE CITY FREE ZONE PERSONAL DATA MANAGEMENT
Patient Health Information is not permitted to be collected by any Licensee unless it is for a...
UAE – GENERAL PERSONAL DATA MANAGEMENT
If the collection and processing of any personal data pertains to an individual's private or...
UGANDA PERSONAL DATA MANAGEMENT
Restrictions on the collection or processing of the personal data...
UKRAINE PERSONAL DATA MANAGEMENT
The Data Protection Law requires obtaining the consent of data subjects for the processing of their personal data...
UNITED KINGDOM PERSONAL DATA MANAGEMENT
Controllers are responsible for compliance with a set of core principles which apply to all processing of personal data...
UNITED STATES PERSONAL DATA MANAGEMENT
US privacy laws and self-regulatory principles vary widely, but generally requires that a notice be provided or made available pre-collection...
URUGUAY PERSONAL DATA MANAGEMENT
In order to collect personal data contained in a database...
UZBEKISTAN PERSONAL DATA MANAGEMENT
Under the Law on Personal Data, processing of personal data includes actions with respect to...
VIETNAM PERSONAL DATA MANAGEMENT
According to Vietnamese laws, the solid legal basis for the processing of personal information...
ZAMBIA PERSONAL DATA MANAGEMENT
Data controllers must adhere to the following principles in respect of collection and processing...
ZIMBABWE PERSONAL DATA MANAGEMENT
There are no specific provisions for the collectors of personal data to obtain the prior approval of data subjects for the processing of their personal data...
