Question 10 from UPSC CSE 2019 - Current Affairs

Question

Which of the following adopted a law on data protection and privacy for its citizens known as 'General Data Protection Regulation' in April 2016 and started implementation from 25th May, 2018?

IASCODEX · Accepted Answer

Correct Option: C. The European Union

Strategy: The presence of the specific term 'General Data Protection Regulation' is a clear indicator—this is a well-known legal framework from the European Union focused on personal data privacy. The other options do not have laws by this name, so direct factual recall helps identify the EU as the only correct answer.

Key Info: The General Data Protection Regulation (GDPR) is a comprehensive legal framework enacted by the European Union for data protection and privacy across all member states. Adopted in April 2016 and enforceable from 25th May 2018, it replaced the Data Protection Directive 95/46/EC. GDPR aims to harmonize data privacy laws across the EU, protect EU citizens' data privacy, and reshape the way organizations approach data privacy. It applies to all companies processing the personal data of individuals residing in the European Union, regardless of company location. Key provisions include requirements for explicit consent for data processing, the right to access, rectify, or erase personal data ('right to be forgotten'), data breach notification protocols, and significant penalties for non-compliance (up to 4% of annual global turnover or €20 million, whichever is greater). Major non-EU data protection acts, such as Australia's Privacy Act, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and the US sectoral laws (like HIPAA and CCPA for California), do not use the term GDPR and have different scopes and standards. The GDPR is regarded internationally as a gold standard in data protection regulatory frameworks.

IASCODEX · Answer

Option A: Australia

IASCODEX · Answer

Option B: Canada

IASCODEX · Answer

Option D: The United States of America