Laws and Regulations

Question 1

What three key topics does the privacy team need to understand about the regulatory environment?

Answer 1

• Fines and penalties for noncompliance
• The scope and authority of regulators and oversight agencies
• Recent or upcoming changes in privacy law

Question 2

What are the OECD Guidelines? What do they implement?

Answer 2

The OECD guidelines implement the FIPs in the most widely recognized framework. They include
purpose specification,
openness,
individual participation,
collection limitation,
use limitation,
security safeguards,
data quality,
accountability