Privacy law

Privacy law is a broad category of statutes, constitutional principles, and common law precedents related to an individual's right to privacy and reasonable expectation of privacy. While the Universal Declaration of Human Rights and International Covenant on Civil and Political Rights assert that every person possesses the right to privacy, different countries have a wide range of approaches to regulating privacy, from the highly developed General Data Protection Regulation (GDPR) in the European Union to countries that have few or no explicitly-defined privacy laws.

Laws related to privacy may deal with information privacy, bodily or physical privacy (related to bodily integrity), privacy of the home and property, privacy of communications (secrecy of correspondence), and privacy of thought (related to intellectual freedom). Information privacy laws govern the collection, storage, and use of personal information by governments, companies, organizations, and individuals. These laws protect personal and confidential details, including names, addresses, and contact information, as well as sensitive data such as health records (medical privacy) and financial information.

Privacy laws have evolved to address emerging challenges, with significant milestones including the Privacy Act of 1974 in the U.S. and the European Union's Data Protection Directive of 1995. Today, international standards like the GDPR set global benchmarks, while sector-specific regulations like HIPAA and COPPA complement state-level laws in the U.S. In Canada, PIPEDA governs privacy, with recent case law shaping privacy rights. Digital platform challenges underscore the ongoing evolution and compliance complexities in privacy law.