Privacy Law
What is Privacy Law?
Legislation that regulates the collection, storage, use, and disclosure of personal information by organizations and governments.
Terms that appear alongside privacy law
Each of these is named in at least one of the same controls as privacy law. The number is how many controls name both.
- hipaa 12 shared controls
- compliance 12 shared controls
- gdpr 12 shared controls
- ccpa 11 shared controls
- ferpa 10 shared controls
- glba 9 shared controls
- consent 8 shared controls
- data subject 8 shared controls
Frameworks that govern privacy law
What the standards actually require on privacy law
Requirements naming privacy law across 6 standards, quoted from the control text.
Per Iowa Code 715D.8 + 715D.9 ICDPA enforcement is exclusively vested in the Iowa Attorney General with no private right of action and offers the LONGEST cure period among US state privacy laws (90 days vs 30 days in Virginia/Indiana/Utah + 60 days original in...
ICDPA-Enforcement-90DayCure-AttorneyGeneralOnly-NoPrivateRight-CivilPenalties-7500-PerViolation-Longest-Cure · Iowa CDPA Enforcement - Attorney General Exclusive + 90-Day Cure Period (LONGEST among US State Privacy Laws) + No Private Right of Action + Civil Penalties Up to USD 7500 Per Violation →FERPA coordinates with adjacent + overlapping privacy regimes. (1) COPPA (Children Online Privacy Protection Act, 15 USC 6501-6506 + 16 CFR Part 312) - FTC-administered; applies to online services collecting PII from children under 13;
FERPA-Coord-COPPA-PPRA-State · Coordination with COPPA, PPRA, State Student Privacy Laws and Sectoral Laws →Keep informed of issues and developments in privacy law and changing legal obligations, for example through the OAIC's news updates and by taking part in privacy seminars and OAIC webinars.
oaic-privacy-management-framework::4.4 · 4.4 Keep informed of privacy law developments →Honor consumer privacy rights + consent + marketing + loyalty data obligations per applicable jurisdiction privacy law + sectoral marketing law.
NRFCS-4 · Consumer Privacy Rights, Consent, Marketing, and Loyalty Data →The insurer communicates by the method the customer prefers where practical, unless the Code or law requires writing, and satisfies a communication duty by reaching whichever of the applicant, the owner of the policy or group policy, the insured life, a third-...
australia-life-insurance-code-of-practice-cali-life-code::3.1-3.3 · Use the customer's preferred communication method and respect who owns the policy →The organization shall: determine what competence is needed by people working under its direction whose work affects its privacy performance; make sure they have that competence through suitable education, training or experience;
iso-iec-27701-2025::7.2 · Competence →Questions people ask about privacy law
What is Privacy Law?
Why is Privacy Law important for compliance?
Which compliance frameworks address Privacy Law?
Where can I learn more about Privacy Law?
See how Privacy Law applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.