Privacy Principles
What is Privacy Principles?
Fundamental guidelines that form the basis of data protection laws and best practices, including fairness, purpose limitation, and data minimization.
Terms that appear alongside privacy principles
Each of these is named in at least one of the same controls as privacy principles. The number is how many controls name both.
- compliance 4 shared controls
- accountability 4 shared controls
- information privacy 2 shared controls
- consent 2 shared controls
Frameworks that govern privacy principles
What the standards actually require on privacy principles
Requirements naming privacy principles across 6 standards, quoted from the control text.
Processing of personal information is allowed subject to the Act and to the principles of transparency, legitimate purpose and proportionality, and the controller must ensure the principles are implemented: personal information must be collected for specified...
philippines-data-privacy-act::11 · General data privacy principles: transparency, legitimate purpose, proportionality →Anyone who collects, retains, manages, uses, processes or stores personal information in Trinidad and Tobago, collects it from individuals there, or uses a local intermediary or telecoms provider to do so must follow the General Privacy Principles;
trinidad-and-tobago-data-protection-act-2011::s69 · ss.69, 71 to 74 Follow the General Privacy Principles and comply with any mandatory code of conduct (not yet proclaimed) →Be accountable for complying with measures that give effect to privacy principles and for onward transfers to other personal information controllers and processors.
CBPR-08 · Accountability →Implement policies and procedures that address AI-specific risks, evaluate their effectiveness and adapt them: (a) data governance for using data with AI models and systems, including management of usage rights covering intellectual property and copyright, Ind...
australia-guidance-for-ai-adoption-2025::5.4.1 · 5.4.1 Extend data governance, privacy and cybersecurity policies to AI →The organisation indicates the measures it uses to ensure compliance with the Global CBPR Privacy Principles (internal guidelines or policies, contracts, compliance with sector laws, self-regulatory codes, other) and maintains records of its processing activit...
global-cross-border-privacy-rules-global-cbpr-forum::CBPR.46 · Global CBPR requirement 46: measures to ensure compliance, including records of processing →A database operator must amend or remove information within 14 days of a listing lessor's or agent's notice, give a person a copy of their listed information within 14 days of a written request (with any fee not excessive), and keep listed information no longe...
act-residential-tenancies-act-1997::s94-97 · ss 94 to 97 Database operator duties →Questions people ask about privacy principles
What is Privacy Principles?
Why is Privacy Principles important for compliance?
Which compliance frameworks address Privacy Principles?
Where can I learn more about Privacy Principles?
See how Privacy Principles applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.