Privacy
Individual privacy rights and privacy-preserving technologies
menu_book
PublicationHandbook on Data Protection in Humanitarian Action
The authoritative reference on data protection for humanitarian organisations, covering cloud services, biometrics, digital identity, and risk assessment frameworks
menu_book
PublicationDigitisation and Sovereignty in Humanitarian Space
Academic analysis of how digitalisation and reliance on global platforms reshape power relations, authority, and sovereignty in humanitarian operations
description
SovereignskyRefugee ID
When 5,000 refugees arrived daily at the Polish-Ukrainian border, there were no IT systems and no way to tell helpers from traffickers. Refugee ID is a QR-based wristband identification system built to protect the most vulnerable.
menu_book
PublicationThe Humanitarian Metadata Problem: 'Doing No Harm' in the Digital Era
Technical analysis of how metadata from telecommunications, messaging apps, cash transfers, and social media can endanger humanitarian beneficiaries and staff
APPI
Japan's data protection law, substantially revised in 2020 and 2022 to strengthen protections and align with international standards.
BDSG
German federal law supplementing GDPR with national provisions for employment data, public sector processing, and video surveillance.
DPDP Act
India's first comprehensive data protection law providing individual rights while maintaining broad government exemptions.
ePrivacy Directive
EU directive protecting privacy in electronic communications, covering cookies, spam, and confidentiality of communications.
EU-US DPF
2023 adequacy decision enabling personal data transfers from EU to certified US companies, successor to invalidated Privacy Shield.
FADP
Swiss data protection law substantially revised in 2023 to align with GDPR while preserving Swiss legal traditions.
GDPR
EU regulation giving individuals control over their personal data with comprehensive rights and strong enforcement.
Personopplysningsloven
Norwegian national law implementing GDPR through the EEA Agreement, with supplementary provisions specific to Norway.
PIPA
South Korea's comprehensive data protection law with strong enforcement, individual rights, and strict cross-border transfer requirements.
PIPEDA
Canada's federal privacy law for commercial activities, establishing fair information principles for private sector data handling.
PIPL
China's comprehensive personal data protection law providing GDPR-like rights while operating alongside state access requirements.
Privacy Act 2020
New Zealand's modernized privacy law strengthening individual rights, requiring breach notification, and enhancing enforcement powers.
Schrems II
Landmark 2020 CJEU ruling that invalidated EU-US Privacy Shield and imposed strict requirements for international data transfers.
UK GDPR
Post-Brexit retained version of EU GDPR forming the core of UK data protection law alongside the Data Protection Act 2018.