Multilateral Regulations / Agreements and Institutions

Asia-Pacific Economic Cooperation (APEC)

APEC Privacy Framework
Digital Economy Steering Group

Council of Europe (CoE)

1981 Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS No. 108)
Amendments to the Convention for the Protection of Individuals with Regard to Automatic Processing of Personal Data (ETS No. 108) Allowing The European Communities To Accede
Additional Protocol to the Convention for the Protection of Individuals with Regard to Automatic Processing of Personal Data Regarding Supervisory Authorities and Transborder Data Flows (ETS No. 181)
Report and Guiding Principles on the Protection of Personal Data with Regard to Surveillance
Directorate General Human Rights and Rule of Law official site
Council of Europe Data Protection Commissioner official site

European Union (EU)

Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR)
Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (ePrivacy Directive)
Directive 2009/136/EC of the European Parliament and of the Council of 25 November 2009 amending Directive 2002/22/EC, Directive 2002/58/EC, and Regulation (EC) No. 2006/2004 (Telecoms Package)
Directive 2013/40/EU of the European Parliament and of the Council of August 12, 2013 on attacks against information systems

Replaces Council Framework Decision 2005/22/JHA

Directive 2006/24/EC of the European Parliament and of the Council of 15 March 2006 on the retention of data generated or processed in connection with provision of publicly available electronic communications services or of public communications networks
Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (ePrivacy Directive)
Directive 2009/136/EC of the European Parliament and of the Council of 25 November 2009 amending Directive 2002/22/EC, Directive 2002/58/EC, and Regulation (EC) No. 2006/2004 (Telecoms Package)
Adequacy decisions (europa.eu)
BCR Overview
Key Documents
Approved BCRs
Standard Contractual Clauses
The New Standard Contractual Clauses - Questions and Answers
European Commission
Directorate-General for Justice, Freedom and Security-Data Protection
Directorate-General for Employment, Social Affairs and Inclusion
Directorate-General for Communications Networks, Content and Technology
European Data Protection Board
National Supervisory Authorities
European Parliament
Council of the European Union
Court of Justice of the European Communities
European Data Protection Supervisor

Global Privacy Enforcement Network (GPEN)

GPEN Homepage

Organization for Economic Cooperation and Development (OECD)

Information Security and Privacy Homepage
2013 OECD Privacy Framework (Includes 1980 OECD Privacy Guidelines)
Privacy Expert Group Report on the Review of the 1980 OECD Privacy Guidelines
Review of the 2002 Security Guidelines
2002 Guidelines for the Security of Information Systems and Networks: Towards a Culture of Security
OECD Recommendation on the Protection of Critical Information Infrastructures (2008)
Digital Identity Management and Electronic Authentication
Consumer Policy Homepage
Consumer Policy Guidance on Mobile and Online Payments (2014)
OECD Guidelines for Consumer Protection in the Context of Electronic Commerce (1999)

United Nations (UN)

Human Rights Council
Human Rights Committee
1948 Universal Declaration of Human Rights (Article XII)
1966 International Covenant On Civil And Political Rights (Art. 17)
1990 Guidelines for the Regulation of Computerized Personal Data Files