Privacy Laws > Privacy and other applicable laws

[prajectory]

Indicator 7 deals with adherence to laws. This indicator also shares some commonalities between 9A which also deals with digital solutions that particularly collect non PII data. There has been overwhelming number of follow up conversations between the DPGA review team and the submissions we receive from products to be vetted as a DPG on indicator 7. That led us to speak to legal experts at reputed private and multilateral organisations.

Here is a detailed case that enumerates the challenges and issues we needed address through consultations.

The outcome of the consultation led us on the following path: Indicator 7 - make it restricted to privacy

• Don’t say relevant and applicable both
• International and domestic laws shouldn’t be mentioned categorically - applicable means either domestic or international - we don’t know what supersedes what and let the project owner decide that
• Sticking to privacy laws

We then put this for community discussion and received feedback about there being laws beyond privacy that are applicable to digital solutions. Our internal team at the DPGA Secretariat put together research and collated the responses we have received from projects for questions related to indicator 7. It found mention of many laws beyond privacy.

Therefore, the current course of action would be to change the text to "privacy and other applicable laws".

[prajectory]

These changes have been catered to and closed. https://github.com/DPGAlliance/DPG-Standard/pull/117