4.2 Global legislation

• Explain data protection outside the UK?


  Personal data should not be transferred outside of the UK as long as the country receiving the data has adequate data protection laws that match he DPA/GDPR.
• What is the EU-US privacy shield?


  'safe harbour' scheme that allows personal data to be sent between european countires and the USA because of this protection scheme.
• Explain the importance of the EU-US privacy shield?


  Requires both companies engaged in data transaction to sign up to the scheme before personal data could be transferred. This provided protection to the European data in the US as UK data can be stored and processed in the US.
• Why the EU-US privacy shield stopped?


  Because in July 2020, the European court of justice argued that it did not effectively protect the personal data of Europeans from government access.
• What does UNCRPD stand for?

  United nations convention on the rights of persons with disabilities.
• What is the UNCRPD?


  International human rights that states that disabled people should be able to access information systems
• What is article 9 about in the UNCRPD?


  Disabled people having access to information systems including websites.
• What is article 21 about in the UNCRPD?


  Disabled people being able to use digital means to express their opinions
• How can holders comply with this legislation?


  Accessibility settings as the websites will allow users to change the font size and style or change the background colour to make text easier to read. Makes the structure easy to be navigated by a screen reader software. Can present information in different styles such as braille and audio. Include subtitles in videos. Using alt text on images so that text to speech software can describe the image for visually impaired users.
• Explain the features of data protection outside the UK?

  GDPR was introduced in all European union countries in 2018. This set of regulations ensures that personal data is protected and can be sent between EU countries. However, many other countries only have partially adequate data protection laws such as USA and Australia. This means that if countries do not have the same data security levels, data cannot be transferred. SO must ensure the compliance of GDPR whether data can be transferred or not.
• Explain the privacy act 1988 (AUSTRALIA)?

  The privacy act 1988 regulates the handling of personal information and the charity must comply with principles like data minimisation and security if handling Australian residents
• Explain the California consumer protection act (CNPR) = USA?

  Consumers should have the right to know what personal data is being collected about them. They must know the purpose of collection so that the charity are able to provide clear and accessible privacy policies. If the charity collects data from California/ USA residents, it must comply with these laws including to provide data access and deletion rights to users.