International Development
A comprehensive overview of how privacy protection evolved through international instruments — from the UDHR to GDPR — and how these developments shaped the DPDPA.
🎯 Learning Objectives
- ▸ Track the development of privacy rights internationally
- ▸ Analyze key international instruments for privacy protection
- ▸ Understand the influence of international developments on Indian law
- ▸ Identify the core principles established by international frameworks
Universal Declaration of Human Rights (1948)
The Universal Declaration of Human Rights (UDHR), adopted by the United Nations General Assembly in 1948, recognised privacy as a fundamental human right. Article 12 states: "No one shall be subjected to arbitrary interference with his privacy, family, home or correspondence, nor to attacks upon his honour and reputation. Everyone has the right to the protection of the law against such interference or attacks."
The UDHR was not a binding treaty, but it established a global consensus that privacy is a fundamental right. This consensus has shaped subsequent international instruments and national constitutions, including the Indian Constitution.
Article 12 of the UDHR remains the foundational statement of privacy as a human right. Its influence is visible in the Puttaswamy judgment and the DPDPA.
💡 Example
The Puttaswamy judgment (2017) explicitly referenced the UDHR and the International Covenant on Civil and Political Rights (ICCPR) in affirming privacy as a fundamental right in India.
European Convention on Human Rights (1950)
The European Convention on Human Rights (ECHR), adopted in 1950, was the first binding international treaty to protect privacy. Article 8 states: "Everyone has the right to respect for his private and family life, his home and his correspondence."
The ECHR also recognised that privacy is not absolute. Article 8(2) permits restrictions that are "in accordance with the law" and "necessary in a democratic society" for specific purposes like national security, public safety, and the prevention of disorder or crime. This balancing approach influenced modern privacy law.
Influence on Modern Privacy Law
- • Established privacy as a legally enforceable right
- • Introduced the "necessary in a democratic society" test
- • Protected privacy of home, family life, and correspondence
- • Inspired the EU Charter of Fundamental Rights
- • Shaped data protection laws across Europe
OECD Guidelines (1980)
The OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data (1980) were the first international instrument to specifically address data protection. They established eight core principles (discussed in Lesson 5) that have shaped data protection laws worldwide.
The OECD Guidelines recognised that data protection is essential for both privacy and economic development. They sought to balance privacy protection with the free flow of information — a balance that remains central to data protection law today.
The OECD Guidelines' eight principles remain the foundation of modern data protection laws, including the DPDPA. Understanding them is essential for compliance professionals.
GDPR (2018) and Global Impact
The General Data Protection Regulation (GDPR), effective May 2018, is the most comprehensive data protection law in the world. It replaced the EU Data Protection Directive (1995) and set a new global standard for data protection.
Key Features of GDPR
- • Extraterritorial scope — applies to non-EU organisations targeting EU residents
- • Strong data subject rights — access, correction, erasure, portability
- • Explicit consent requirements
- • Data protection by design and default
- • Data Protection Impact Assessments (DPIAs)
- • Data Protection Officer (DPO) requirement
- • Significant fines — up to €20 million or 4% of global turnover
The GDPR's influence has been global. It inspired similar laws in Brazil (LGPD), California (CCPA), China (PIPL), and India (DPDPA). Despite differences, these laws share core principles established by the OECD Guidelines and the GDPR.
Influence on DPDPA
The DPDPA was influenced by the GDPR but adapted to Indian conditions. Like the GDPR, it establishes data subject rights, requires consent, and imposes significant penalties. However, it is simpler, has different terminology (Data Principal instead of Data Subject), and has a different enforcement structure.
The DPDPA is India's response to the global consensus on data protection — shaped by the UDHR, ECHR, OECD Guidelines, and GDPR, but adapted to Indian constitutional traditions and administrative structures.
📖 Glossary
- UDHR
- Universal Declaration of Human Rights, adopted by the UN in 1948, which recognised privacy as a fundamental right.
- ECHR
- European Convention on Human Rights, adopted in 1950, which provided the first binding international privacy protections.
- GDPR
- General Data Protection Regulation, the EU's comprehensive data protection law effective from 2018.
- ICCPR
- International Covenant on Civil and Political Rights, a UN treaty that protects privacy as a human right.
- Extraterritorial Scope
- The application of a law beyond the territory of the enacting state. GDPR and DPDPA both have extraterritorial elements.
🔑 Key Takeaways
- Privacy was recognised in the Universal Declaration of Human Rights (1948)
- The European Convention on Human Rights (1950) provided binding privacy protections
- The OECD Guidelines (1980) established foundational privacy principles
- The GDPR (2018) set a new global standard for data protection
- International developments influenced the DPDPA (2023)
📚 Further Reading
- Universal Declaration of Human Rights — United Nations (1948)
- European Convention on Human Rights — Council of Europe (1950)
- OECD Privacy Guidelines — OECD (1980 (updated 2013))
- General Data Protection Regulation — European Union (2016 (effective 2018))
Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...