Оглавление
Amit Luhach. International Data Protection Laws
International Data Protection Laws. EU, USA and India. Amit Luhach. Katharina Scheja
Contents
Copyright
Preface
Data Protection Law – Origins and Development
European Union: General Data Protection Regulation
GDPR Terminology. Personal Data
Sensitive Personal Data
Processing
Controller
Processor
Recipient
Third Party
Data Subject
Material and Territorial Scope. Material Scope
Exemptions
Territorial Scope
Data Processing Principles
Lawfulness, Fairness and Transparency
Purpose Limitation
Data Minimization
Anonymization and Pseudonymization
Data Accuracy
Storage Limitation
Integrity and Confidentiality
Accountability
Lawful Processing. Technical and Organizational Measures
Personal Data Processing
Consent
Performance of Contract
Vital interests
Processing of Sensitive Data
Data Processing Contracts. Controller–Processor Contracts
Processing under Authority of Controller or Processor
Joint Controllership
Controller, Processor and Joint Controllers Checklists
Security, Accountability and Compliance. Security of Processing
Confidentiality
Data Breach Notifications
Data Protection by Design and Default
Records of Processing
Cooperation with Supervisory Authority
Data Protection Impact Assessment
Data Protection Officer
Codes of Conduct
Certifications
Data Subject´s Rights and Enforcement. Data Subject’s Rights. Right to Information
Right to Rectification
Right to Erasure (Right to be Forgotten)
Exceptions
Right to Restriction of Processing
Right to Data Portability
Right to Object
Right to not be Subject to Automated Decisions
Remedies, Compensation and Penalties
International Data Transfers. Nature of Personal Data Transfers
Free Flow of Personal Data
Third Country Transfers. Adequacy Decision
Brexit and GDPR
Appropriate Safeguards
Schrems II and Standard Contractual Clauses
Binding Corporate Rules
International Agreements
Derogations
Member States´ Specifics
Belgium
Denmark
France
Germany
Italy
Netherlands
Spain
Sweden
United Kingdom
Other Member States
Federal Privacy Laws
Fair Credit Reporting Act
Health Insurance Portability and Accountability Act
Gramm-Leach-Bliley Act
Children´s Online Privacy Protection Act
Controlling Assault of Non-Solicited Pornography and Marketing Act
California Consumer Privacy Act
Scope and Applicability
Exceptions
Definitions
Individual´s Rights
Business Responsibilities
Enforcement
California Privacy Rights Act
Definitions
Applicability
Consumer Rights
Business Obligations
Enforcement and Penalties
State Privacy Laws
Laws Passed
Active Bills
India: Personal Data Protection Act
Territorial Scope and Definitions
Personal Data
Sensitive Personal Data
Critical Personal Data
Data Fiduciary
Data Processor
Data Principal
Personal Data Processing. Data Fiduciary´s Obligations
Processing Grounds
Exemptions
Innovation Sandbox
Data Principal´s Rights. Right of Access
Right to Correction and Erasure
Right to Portability
Right to be Forgotten
Exercising Rights
Transparency and Accountability Measures. Privacy by Design
Transparency
Security Safeguards
Reporting Personal Data Breach
Significant Data Fiduciary
Data Protection Impact Assessment
Maintaining Records
Audits
Data Protection Officer
Processing by Other Entities
Grievance Redressal
Cross Border Transfers. Personal and Sensitive Data Processing
Sensitive Personal Data
Critical Personal Data
Data Protection Authority of India. Powers and Functions
Codes of Practice, Directions, Inquiry, Search and Seizure
Co-ordination
Penalties, Offences and Adequacy under GDPR. Penalties
Compensation
Offences
Adequacy under GDPR
Closing Remarks: Data Protection Concepts and Principles
Abbreviations and acronyms
Cases
Notes. Data Protection Law – Origins and Development
I. European Union: General Data Protection Regulation
1. GDPR Terminology
2. Material and Territorial Scope
3. Data Processing Principles
4. Lawful Processing
5. Data Processing Contracts
6. Security, Accountability and Compliance
7. Data Subject´s Rights and Enforcement
8. International Data Transfers
9. Member States´ Specifics
10. Federal Privacy Laws
11. California Consumer Privacy Act
12. California Privacy Rights Act
13. State Privacy Laws
III. India: Personal Data Protection Act
14. Territorial Scope and Definitions
15. Personal Data Processing
16. Data Principal´s Rights
17. Transparency and Accountability Measures
18. Cross Border Transfers
19. Data Protection Authority of India
20. Penalties, Offences and Adequacy under GDPR
Authors
