Data Privacy

Data privacy concerns the handling of sensitive information, and consumer rights to privacy of their personal information.

Legislation & Regulation

• General Data Protection Regulation (GDPR) - EU regulation, applicable to all member nations and anyone with a nexus with the European Economic Area.
• The Health Insurance Portability and Accountability Act (HIPAA) - U.S. federal law governing the privacy and security of personal health information.
• The Children's Online Privacy Protection Act (COPPA) - U.S. federal law governing the privacy of children and minors online.
• California Consumer Privacy Act (CCPA) - California state privacy statute that includes online privacy protection.

ICANN PDPs

• Expedited Policy Development Process on the Temporary Specification for gTLD Registration Data (EPDP) is concerned with enabling the provision of registration data while maintaining compliance with data protection laws.

Overlaps with Cybersecurity

Data security is a central theme of privacy regulations. In addition to codifying an expectation of privacy, most regulations set minimum standards for the treatment, uses, and protection of personal information. Personal information, particularly personally identifying information or financial information is a prime target of cyber criminals.

General Data Protection Regulation