Global data privacy legislation has steadily advanced over the past several years.
One of the most comprehensive and well-known laws is the General Data Protection Regulation (GDPR), governing personal data originating in the European Union, which went into effect in 2018. Many countries, including Brazil, Japan, and Australia, have followed suit and enacted similar legislation to regulate industries and protect certain rights of consumers, businesses, and other parties that are affected in their respective territories. Late in 2020, China, on a similar path, released draft legislation, the Personal Data Protection Law (PDPL), that is moving toward passage. The United States, however, still lacks a comprehensive law at the federal level, relying instead on a patchwork of state laws to protect data privacy rights, resulting in confusion across the country and costly compliance for U.S. businesses. Read more…