Organization for Economic Cooperation and Development (OECD)

Intergovernmental economic organisation founded to stimulate economic progress and world trade.

OECD is a forum of countries describing themselves as committed to democracy and the market economy, providing a platform to compare policy experiences, seek answers to common problems, identify good practice and coordinate domestic and international policies of its members.

The privacy principles defined by the OECD consist of the following:

  • Collection Limitation: Data collection should occur only with the knowledge and consent of a concerned individual (data subject).
  • Data Quality: You should only collect information which is relevant and accurate for a particular aim.
  • Individual Participation: The concerned individual should know if their information has been collected and must be able to access it if such data exists.
  • Purpose Specification: The intended use for a particular piece of information must be known at the time of collection.
  • Use Limitation: Collected data must not be used for purposes other than the ones specified at the time of collection.
  • Security Safeguards: Reasonable measures must be taken to protect data from unauthorized use, destruction, modification, or disclosure of personal information.
  • Openness: Individuals should be able to avail themselves of data collection and be able to contact the entity collecting this information.
  • Accountability: Data collector should be held accountable for failing to abide by any of the above rules. There needs to be a dedicated person.

OECD Guidelines: 8 Privacy Principles to Live By

Data Privacy Laws in the United States and How They Affect Your Business

By Peter Curac-Dahl in Data Privacy & Security

Still feeling the effects of the European Union’s GDPR, the world waits for an answer from the United States. With federal-level solutions focusing on healthcare, many states have risen to the occasion, putting forward data privacy regulations of their own. Without a comprehensive blanket solution like GDPR, states are taking it in their hands to […]

Read more

The CJEU Sheds More Light on Trackers and Consent Requirements

By Karolina Matuszewska in Analytics, Data Privacy & Security, GDPR

This year, the Court of Justice of the European Union (CJEU) has issued two crucial rulings on consent requirements regarding cookie compliance, under General Data Protection Regulation (GDPR), ePrivacy Directive 2002/58/EC (ePrivacy Directive also known as Cookie Directive) and Directive 95/46/EC (Data Protection Directive). They highlight that the use of pre-ticked boxes on websites to […]

Read more