Back to Module
1 of 5|Global Privacy Laws
video 20 min•International Frameworks
GDPR
The gold standard of privacy laws.
🎯 Learning Objectives
- ▸ Understand the scope and principles of GDPR
- ▸ Compare GDPR terminology with DPDPA
Key Features
The GDPR is built on strict principles: lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and accountability.
Unlike the DPDPA, which uses a fixed penalty structure, GDPR fines are percentage-based. For a large company, a 4% fine can be billions of dollars.
Terminology Differences
| Concept | GDPR | DPDPA |
|---|---|---|
| Individual | Data Subject | Data Principal |
| Company | Data Controller | Data Fiduciary |
| Vendor | Data Processor | Data Processor |
| Regulator | Supervisory Authority | Data Protection Board |
📖 Glossary
- GDPR
- General Data Protection Regulation, the EU's comprehensive data privacy law.
- Data Controller
- The GDPR term for an entity that determines the purpose and means of processing.
🔑 Key Takeaways
- GDPR applies to any company processing EU residents' data, regardless of location.
- It has 6 lawful bases (including legitimate interests).
- Penalties can reach 4% of global turnover.
📚 Further Reading
- GDPR Full Text — European Union (2016)
Course Author
Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...