General Data Protection Regulation (GDPR)

California Consumer Privacy Act (CCPA)

Personal Information Protection and Electronic Documents Act (PIPEDA)

Health Insurance Portability and Accountability Act (HIPAA)

To protect personal data from unauthorized access, use, or disclosure

To ensure that data is accurate, complete, and up-to-date

To provide individuals with control over their personal data

All of the above

Lawfulness, fairness, and transparency

Purpose limitation

Data minimization

Accuracy

Storage limitation

Integrity and confidentiality

An individual's freely given, specific, informed, and unambiguous indication of their agreement to the processing of their personal data

An individual's implied agreement to the processing of their personal data based on their actions or behavior

An individual's agreement to the processing of their personal data obtained through deception or coercion

None of the above

The right to have one's personal data erased from the records of the data controller

The right to have one's personal data corrected or updated

The right to have one's personal data transferred to another data controller

The right to object to the processing of one's personal data

A security incident that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data

A security incident that leads to the theft of personal data

A security incident that leads to the unauthorized access to personal data

All of the above

€10 million or 2% of the annual worldwide turnover of the preceding financial year, whichever is higher

€20 million or 4% of the annual worldwide turnover of the preceding financial year, whichever is higher

€30 million or 6% of the annual worldwide turnover of the preceding financial year, whichever is higher

€40 million or 8% of the annual worldwide turnover of the preceding financial year, whichever is higher

The principle that data protection should be built into systems and processes from the outset

The principle that data should be collected and processed only for specific, legitimate purposes

The principle that individuals should have control over their personal data

The principle that data should be kept secure and confidential

A person responsible for ensuring compliance with data protection laws and regulations within an organization

A person responsible for managing the organization's data protection policies and procedures

A person responsible for responding to data subject requests

A person responsible for conducting data protection audits

The right to receive one's personal data from a data controller in a structured, commonly used, and machine-readable format

The right to have one's personal data transferred to another data controller

The right to have one's personal data erased from the records of the data controller

The right to object to the processing of one's personal data

The right to object to the processing of one's personal data for direct marketing purposes

The right to object to the processing of one's personal data for profiling purposes

The right to object to the processing of one's personal data for research or statistical purposes

All of the above

A law that regulates the use of cookies and similar technologies on websites

A law that regulates the use of cookies and similar technologies in mobile apps

A law that regulates the use of cookies and similar technologies in online advertising

None of the above

To inform individuals about how their personal data will be collected, used, and disclosed

To obtain consent from individuals for the processing of their personal data

To comply with data protection laws and regulations

All of the above

A data protection law in the state of California, USA

A data protection law in the state of New York, USA

A data protection law in the state of Texas, USA

A data protection law in the state of Florida, USA

A data protection law in Canada

A data protection law in the United States

A data protection law in the United Kingdom

A data protection law in the European Union