Data Protection Matters
Practical privacy, written down
Articles and guides from years of hands-on privacy work: grounded, practical, and written to be genuinely useful. Search our writing, our downloadable guides, and a reference index of the world’s privacy laws.
From our desk
Analysis and guidance drawn from our own engagements and years in the field.
Guides & tools
Free, practical resources. No sign-up, nothing stored.
DPIA Questionnaire: the free EDPB tool
A complete Data Protection Impact Assessment built from the EDPB template. Work through controller details, lawfulness, necessity, risk scoring and the decision, all in your browser. Nothing is sent or stored; export and resume anytime.
Privacy Regulations and Cloud Applications
Navigating privacy compliance in cloud-based, microservices-driven environments: data fragmentation, secure communication, vendor compliance, and privacy by design.
Download PDFSafeguarding Privacy in eCommerce
Practical recommendations for e-commerce: understanding data flow, a comprehensive privacy policy, strong security, customer consent, and staying current with regulations.
Download PDFEnsuring Privacy of Health-Related Data
An overview of the Council of Europe's Recommendation CM/Rec(2019)2 and key principles for the ethical, secure processing of health data.
Download PDFNavigating Standard Contractual Clauses (SCCs)
SCCs for international transfers: common pitfalls, best practices, and why they must be tailored, with the Meta fine as a cautionary tale.
Download PDFSouth Korea's Personal Information Protection Act (PIPA)
A comprehensive analysis of PIPA, its enforcement mechanisms, and how it compares with the GDPR.
Download PDFChina's Personal Information Protection Law (PIPL)
An overview of PIPL compared with the GDPR, and the rights and obligations it creates for individuals and businesses.
Download PDFResponsible AI: Ethics, Data Protection and Governance
How responsible AI, fairness, transparency, accountability, privacy, aligns with data protection and governance, and how to get there.
Download PDFNavigating the Complexities of DPAs
Why Data Processing Agreements matter for trust and compliance, and the practical steps to create and manage them.
Download PDFProtecting HR Data
Guidelines for HR: transparency, limited collection, access controls, secure storage, and team education to protect employee and candidate data.
Download PDFEmbracing the Transition to ISO 27001:2022
Key updates in ISO 27001:2022, its risk-based approach and new controls, and how to transition to the new standard.
Download PDFThe DPO Role: Same Same, But Different
How the Data Protection Officer's role is shifting from compliance enforcer to strategic business partner.
Download PDFSouth Africa's Protection of Personal Information Act (POPIA)
A comparison of POPIA with the GDPR: scope, consent, security, penalties, and what it means for organizations.
Download PDFInternational privacy laws
A quick reference to the major data protection regimes around the world.
GDPR
General Data Protection Regulation (2018), the EU's comprehensive privacy law and the global benchmark.
UK GDPR & DPA 2018
The UK's post-Brexit version of the GDPR, with the Data Protection Act 2018.
CCPA / CPRA
California Consumer Privacy Act as amended by the CPRA: rights to know, delete, correct and opt out.
LGPD
Lei Geral de Protecao de Dados (2020), Brazil's GDPR-inspired data protection law.
PIPL
Personal Information Protection Law (2021): strict rules on processing and cross-border transfers.
Read the guide → South KoreaPIPA
Personal Information Protection Act, one of Asia's strictest privacy regimes.
Read the guide → South AfricaPOPIA
Protection of Personal Information Act, South Africa's comprehensive privacy law.
Read the guide →PIPEDA
Personal Information Protection and Electronic Documents Act.
APPI
Act on the Protection of Personal Information.
Privacy Act 1988
Australia's federal privacy law and the Australian Privacy Principles.
DPDP Act 2023
Digital Personal Data Protection Act, India's new consent-based framework.
PDPA
Singapore's Personal Data Protection Act.
PDPA
Thailand's Personal Data Protection Act, modelled on the GDPR.
Law No. 91/2025/QH15
Vietnam's new comprehensive Personal Data Protection Law.
nFADP
The revised Federal Act on Data Protection (2023).
Privacy Protection Law
Israel's Privacy Protection Law and Amendment 13, enforced by the PPA.
HIPAA
Health Insurance Portability and Accountability Act: privacy and security of health data.
PDPL
The Personal Data Protection Law of the Kingdom of Saudi Arabia.
PDPL
The UAE's federal Personal Data Protection Law.
NDPA
Nigeria Data Protection Act (2023).
No matches. Try a different term.
Stay ahead of the curve
Strategic insights on privacy and AI, straight to your inbox. No noise.