Privacy laws around the world
You compare KVKK, US state laws (CCPA/CPRA), Brazil's LGPD, Canada's PIPEDA, China's PIPL, India's DPDP and others, and build a common privacy baseline for a multi-country organisation.
Level 301 · 17 lessons · 15 practice labs
Lessons
A method for comparison
- A framework for comparing laws
- Shared principles and where they differ
- Quick task: build a comparison grid
Regions
- The Türkiye example: KVKK, VERBIS and transfer rules
- The US: CCPA/CPRA, state laws and sector laws
- Brazil: LGPD
- Canada's PIPEDA and the UK GDPR
- China: PIPL and data localisation
- Asia-Pacific: India DPDP, Japan APPI, Singapore PDPA
- Middle East and Africa examples
- Quick task: breach notification deadlines by country
Multi-country compliance
- A common privacy baseline
- Localisation and cross-border transfers
- Handling requests across countries
- Quick task: country annexes for a privacy notice
Finish
- Governing a multi-country privacy programme
- Capstone: a privacy matrix for a company active in five countries
Practice labs
- Build a comparison grid: Fill in a grid with scope, lawful basis, rights, notification and sanctions rows for two laws.
- Separate shared principles from differences: From summaries of five laws, separate the principles common to all from rules found in only one.
- Add a new law to the grid: Read the summary of a country law you have not seen, fill in every row of the grid and write the three strictest differences.
- Match the concept to its law: Match ten concepts such as the controllers registry, the right to opt out of sale, data localisation and the data fiduciary to their law.
- Breach notification deadlines by country: Tabulate the notification threshold, deadline and authority for eight countries from the summaries given.
- Sector law or general law: For six US scenarios involving health, financial and children's data, identify which state and sector rules come into play.
- Is there a localisation rule: For ten country and data type pairs, mark whether data must stay in the country using the table provided.
- Decide the cross-border transfer route: For six flows out of Türkiye, Brazil and China, write the mechanism and approval needed.
- Fit the hosting design to the law: For a software service with customers in five countries, propose with a reasoned table which data is held in which region.
- Pick the strictest rule: For eight topics, pick the strictest requirement among five laws and write the common baseline row.
- Handle requests across countries: For six requests from four countries, set the applicable deadline, identity check and fee rule.
- Country annexes for a privacy notice: Write the country-specific sections to add to a common privacy notice for California, Brazil and Türkiye.
- Match the local role to its country: Match the data protection officer, local representative, contact person and grievance officer roles to example countries that require them.
- Split central and local responsibilities: Split twelve privacy tasks between the central team and country leads and justify the split.
- A privacy matrix for five countries: Bring together the registration, officer, notification, transfer and retention duties for the five countries where Turnalı Perakende operates.
About this course
You compare KVKK, US state laws (CCPA/CPRA), Brazil's LGPD, Canada's PIPEDA, China's PIPL, India's DPDP and others, and build a common privacy baseline for a multi-country organisation.
What you will learn
- A method for comparison
- Regions
- Multi-country compliance
- Finish
Prerequisites
You should be comfortable with the level 101 and 201 topics of the same path.
Lab environment
Lessons run in your own Kali Linux terminal that opens in the browser. Nothing to install; the lab starts clean in every lesson.
Frequently asked questions
- Is this course right for my level?
- The course is at level 301; it assumes you know the topics of the lower-level courses.
- Is there anything to install?
- No. Every lesson runs in your own lab environment that opens in the browser.
- How do lessons work?
- Each lesson has 8 to 10 steps and a short quiz. Early steps show the command to type, later steps give less help; if two attempts fail, the solution opens.
- Can I try it for free?
- Yes. The first three lessons of every course are free.