Privacy Frameworks

There are a variety of privacy frameworks in the industry, each offering benefits and capabilities, usually designed for a certain location or type of organization.

The following list of framework examples is by no means exhaustive or intended to be exclusive:

Organization for Economic Co-operation and Development (OECD)

The OECD Privacy Principles provide privacy and data protection laws, and tie closely to European Union (EU) member nations' data protection legislation, such as the European Commission (EC) Data Protection Directive (Directive 95/46/EC), and other EU privacy legislation. The OECD Privacy Principles were originally published in the 1980s and are considered by many to be the ancestral parent of the cumbersome GDPR. See OECD reference below:

General Data Protection Regulation (GDPR)

The European Union privacy regulation addresses personal privacy, deeming it an individual human right. GDPR is perhaps the single most powerful and influential regulations associated with IT and data security in the world, influencing laws in many other countries and regions. It is important to note its value as a privacy framework. Legislators around the world are reviewing GDPR and using it as a guiding principle to how local privacy legislation is to be performed. Obviously, the vast restrictions GDPR has introduced into working with the European Union are strongly correlated to its wide influence around the world.

Click to see more

Privacy Management Framework (PMF)

PMF was created as a revision to the former 2009 Generally Accepted Privacy Principles (GAPP) by the American Institute of Certified Public Accountants (AICPA). The framework incorporates local information and data privacy laws and standards, including GDPR and updates to the AICPA's Trust Services Criteria (TSC). See PMF reference below:

Click to see more

Vhen it comes to privacy, it is also important te now local legislation and regulation that may be applicable for a security professional's organization.