# Data protection laws

> Data protection laws are the rules that govern how organizations collect, use, store, and share personal information. Examples include the EU and UK GDPR, California's CCPA, Canada's PIPEDA, Australia's Privacy Act, and New Zealand's Privacy Act.

Also called: privacy laws, GDPR, UK GDPR, CCPA, PIPEDA, Australian Privacy Act.

The EU GDPR applies across the European Union, and the UK GDPR sits alongside the Data Protection Act 2018. In California, the CCPA, as amended by the CPRA, gives residents rights over their data and applies to businesses above set thresholds. PIPEDA is Canada's federal private-sector law. Australia's Privacy Act 1988 contains the Australian Privacy Principles, and New Zealand's Privacy Act 2020 sets out its own information privacy principles.

Although details differ, these laws share common themes: tell people what you collect and why, collect only what you need, keep it secure, respond to people's requests about their own data, and take care when sending it to other countries or suppliers. Several require serious breaches to be reported. A small business serving customers abroad can fall under more than one of these laws.

Which laws apply, and how, depends on where your customers are, what data you hold, and the size of the business, so the question belongs with a qualified legal adviser. This overview is general information, not legal advice. We implement technical safeguards these laws commonly call for, such as access controls, encryption, backups, and logging, but we do not give legal advice or guarantee compliance.

## Where we do this work

- [Cybersecurity services](https://techpitsolutions.systems/services/cybersecurity)
- [Cloud services](https://techpitsolutions.systems/services/cloud-services)

## See also

- [Cyber Essentials](https://techpitsolutions.systems/glossary/cyber-essentials): Cyber Essentials is a UK government-backed certification scheme that sets out five basic technical controls, covering firewalls, secure configuration, security updates, user access control, and malware protection, to guard against common online attacks.
- [Essential Eight](https://techpitsolutions.systems/glossary/essential-eight): The Essential Eight is a set of eight baseline cybersecurity strategies published by the Australian Signals Directorate to help organizations protect internet-connected IT networks against common cyber threats.
- [Local LLM (self-hosted language model)](https://techpitsolutions.systems/glossary/local-llm): A local LLM is a large language model that runs on hardware a business controls, such as its own computer or server, instead of on an AI vendor's cloud service, so prompts and documents stay within that environment.

---

Source: https://techpitsolutions.systems/glossary/data-protection-laws

TechPit Solutions · Run by AI, backed by real people. A remote team working with businesses in the US, UK, Canada, Australia, New Zealand and Europe. Email info.techpit.co@gmail.com, WhatsApp +92 344 3360585. Book a 15-minute call: https://techpitsolutions.systems/contact