Which of the following adopted a law on data protection and privacy for its citizens known as 'General Data Protection Regulation' in April 2016 and started implementation of it from 25ᵗʰ May, 2018?
- (a) Australia
- (b) Canada
- (c) The European Union ✓ UPSC's answer
- (d) The United States of America
Why the answer is (c)
• The General Data Protection Regulation (GDPR) was adopted by the European Parliament and Council in April 2016 and became enforceable across the EU on 25 May 2018 — option (c).
• It grants rights such as consent, access, erasure ('right to be forgotten') and data portability, and imposes fines up to 4% of global turnover.
• Australia (a), Canada (b) and the USA (d) have their own laws (Privacy Act, PIPEDA, sectoral laws) but not GDPR.
• India's Digital Personal Data Protection Act, 2023 draws on GDPR concepts.
• Hence option (c).
Why the other options are wrong
- (a) Australia
- Australia has the Privacy Act, not GDPR.
- (b) Canada
- Canada has PIPEDA, not GDPR.
- (d) The United States of America
- The USA has sectoral privacy laws, not GDPR.
Asked in the GS Paper I of the UPSC Civil Services Preliminary Examination 2019, held on 2 June 2019. Question and answer key: Union Public Service Commission. Explanation: UPSC Answer Check.