Information Privacy
What is Information Privacy?
The right of individuals to control how their personal information is collected, used, and shared by organizations and governments.
Terms that appear alongside information privacy
Each of these is named in at least one of the same controls as information privacy. The number is how many controls name both.
- policy 4 shared controls
- consumer protection 4 shared controls
- ferpa 4 shared controls
- compliance 3 shared controls
- consent 3 shared controls
- opt in consent 3 shared controls
- privacy policy 3 shared controls
- glba 3 shared controls
Frameworks that govern information privacy
What the standards actually require on information privacy
Requirements naming information privacy across 6 standards, quoted from the control text.
Develop and post privacy policies on all external-facing websites, mobile applications, and other digital services, that: (a) Are written in plain language and organized in a way that is easy to understand and navigate;
NIST800-PM-20(1) · PM-20(1) Dissemination of Privacy Program Information | Privacy Policies on Websites, Applications, and Digital Services →Before collection the data subject is informed, in detailed, simple, express and unequivocal terms, of the purpose of processing; who the recipients are or may be;
peru-dpl::18 · Right of information (privacy notice) →Establish the legal foundation of Maryland Online Data Privacy Act of 2024 (Senate Bill 541) codified at Md. Comm. Law Article Title 14 Subtitle 46 Sections 14-4601 through 14-4614. Signed by Governor Wes Moore 9 May 2024 + effective 1 October 2025.
MD-MODPA-Scope-SB541-Title-14-Subtitle-46-Sections-14-4601-14-4614-Effective-1-October-2025-AG-Brown · Maryland MODPA Scope + SB541 + Title 14 Subtitle 46 + Sections 14-4601 to 14-4614 + Effective 1 October 2025 + AG Brown →Per Information Privacy Principles (IPPs) 1-4 of Privacy Act 2020: collection principles. Requirements include (a) IPP 1 - Personal Information must be collected for a lawful purpose connected to the function or activity of the agency + must be necessary for t...
NZPRV-1 · IPP 1-4 Purpose, Source, Collection from Subject, Manner of Collection →The applicant maintains measures to ensure compliance with the APEC Information Privacy Principles, such as internal guidelines or policies and the arrangements that implement them.
CBPR-PR-39 · Measures to ensure compliance →A proposed safe harbor must show program requirements ensuring member operators provide substantially the same or greater protections as 312.2 to 312.8 and 312.10;
coppa::312.11(b)-(c) · § 312.11(b) and (c) Criteria and application for safe harbor approval →Questions people ask about information privacy
What is Information Privacy?
Why is Information Privacy important for compliance?
Which compliance frameworks address Information Privacy?
Where can I learn more about Information Privacy?
See how Information Privacy applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.