This content is reserved for Premium Members.
The content can be, for example, sample policies, sample procedures, working documents, workbooks or presentations.

collection of legal texts related to the topic; no claim to completeness

advice and information on courses and training programmes related to the topic

Since its public release on 7 April 2024, the American Privacy Rights Act discussion draft has generated much buzz within the privacy community. Privacy professionals continue to process the published text to better understand the operational implications that might arise if the discussion draft becomes the U.S.'s first comprehensive federal privacy law.
The APRA draft enumerates 18 categories of sensitive covered data, a subset of "covered data" to which heightened protections attach.
Understanding the proposed categories for sensitive covered data requires context, including with respect to other relevant regulatory frameworks at the state, federal or international level.

comprehensive data protection law enacted by the EU; safeguard the privacy and personal data of individuals; sets a high standard for data protection practices globally
Unterforen: Data Breach Management and Notification, Data Processing Agreements, Data Protection Impact Assessments (DPIA), Data Protection Officer (DPO), Data Retention and Deletion, International Data Transfers, Lawful Bases for Processing, Privacy by Design and Default, Rights of Data Subjects, Record of Processing Activities (ROPA)

The key piece of legislation in the UK is the UK GDPR. The UK GDPR is effectively the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'), as amended and incorporated into domestic law by the European Union (Withdrawal) Act 2018, as further amended by the European Union (Withdrawal Agreement) Act 2020 ('the Withdrawal Act') and the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019, as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc.)(EU Exit) Regulations 2020.

The Federal Act on Data Protection (nFADP) improves the processing of personal data and grants new rights to Swiss citizens. This important legislative change is accompanied by a number of new obligations for businesses and a strengthening of existing requirements.
The completely revised Data Protection Act and the implementing provisions of the new Data Protection Ordinance (DPO) and Data Protection Certification Ordinances (DPCO) entered into force on the 1st September 2023.

regular training programs for employees on data protection best practices; awareness campaigns to reinforce the importance of data protection