{"id":1628,"date":"2021-08-03T16:34:21","date_gmt":"2021-08-03T15:34:21","guid":{"rendered":"https:\/\/www.calligo.io\/update-7-the-data-privacy-periodic-table\/"},"modified":"2023-09-12T09:35:57","modified_gmt":"2023-09-12T08:35:57","slug":"update-7-the-data-privacy-periodic-table","status":"publish","type":"post","link":"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/","title":{"rendered":"UPDATE 7: The Data Privacy Periodic Table"},"content":{"rendered":"<h2 style=\"font-size: 30px; text-align: center;\"><span style=\"color: #1a1d22;\">The Data Privacy Periodic Table \u2013 our most significant update yet<\/span><\/h2>\n<p>Since our <a style=\"text-decoration: none;\" href=\"https:\/\/www.calligo.io\/insights\/blog\/update-6-the-data-privacy-periodic-table\/\" target=\"_blank\" rel=\"noopener\">last update<\/a> in January, there has been an unprecedented amount of activity in the data privacy world. And yes, we probably do say that every time!<\/p>\n<p>New laws have passed in <a href=\"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-update-virginia-consumer-data-protection-act-vcdpa\/\" target=\"_blank\" rel=\"noopener\">Virginia<\/a> and Colorado. The <a href=\"#Brexit\" rel=\"noopener\">UK\u2019s post-Brexit EU adequacy<\/a> was confirmed. Plus of course, the EU\u2019s significant changes to <a href=\"#SCC\" rel=\"noopener\">Standard Contractual Clauses<\/a> and the reawakening of the debates over <a href=\"#IV\" rel=\"noopener\">Identity Verification<\/a>, especially in the context of social media.<\/p>\n<p>These industry landmarks and others, plus the way that data privacy has become \u2013 quite rightly \u2013 a fundamental part of topical conversations surrounding vaccinations and identity, all combine to require us to make the most substantial changes to the <a href=\"https:\/\/www.calligo.io\/insights\/blog\/the-data-privacy-periodic-table\/\" target=\"_blank\" rel=\"noopener\">Periodic Table of Data Privacy<\/a> yet.<\/p>\n<p><!--more--><\/p>\n<blockquote>\n<p style=\"text-align: center; font-weight: bold;\"><span style=\"font-size: 18px;\">See below what we have changed and what updates we have made. <\/span><\/p>\n<p style=\"text-align: center;\">\n<p style=\"text-align: center;\">Remember: this is an open project, contributed to by the entire industry. We encourage input from you all, and receive dozens of suggestions between each update.<\/p>\n<p style=\"text-align: center;\">\n<p style=\"text-align: center;\">If you have any comments or want to discuss in more detail, you can contact me here.<\/p>\n<\/blockquote>\n<p style=\"text-align: center;\">\n<h2 style=\"font-size: 30px; text-align: center;\"><strong>Restructuring the Core Legislation section<\/strong><img decoding=\"async\" style=\"width: 619px; margin-left: auto; margin-right: auto; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/CoreLegislation.png\" alt=\"CoreLegislation -Periodic Table of Data Privacy\" width=\"619\" \/><\/h2>\n<p>There are now too many laws being passed and bills being introduced to name them all individually in the 15-element Core Legislation section. We have therefore restructured this area to show the 15 categories of data privacy legislation, standards and case law that prescribe how data privacy rights are protected in practice.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" style=\"width: 106px; margin: 0px auto 16px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/HR.png\" alt=\"HR\" width=\"106\" \/><\/p>\n<h3><\/h3>\n<h3 style=\"font-size: 24px;\"><span style=\"color: #00beea;\">Human Rights Laws<\/span><\/h3>\n<p>The protection and sanctity of a person\u2019s complete privacy (i.e. not just in reference to their data) is enshrined in Article 12 of the UN\u2019s Universal Deceleration of Human Rights from 1948, from which most other human rights legal frameworks then derive.<\/p>\n<blockquote><p>No one shall be subjected to arbitrary interference with his privacy, family, home or correspondence, nor to attacks upon his honour and reputation. Everyone has the right to the protection of the law against such interference or attacks.<\/p>\n<p style=\"text-align: right;\"><strong>Article 12 of the UN\u2019s Universal Deceleration of Human Rights 1948<\/strong><\/p>\n<p>Everyone has the right to respect for his private and family life, his home and his correspondence.<\/p>\n<p style=\"text-align: right;\"><strong>Article 8 of the European Convention on Human Rights 1950<\/strong><\/p>\n<\/blockquote>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 16px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/PDU.png\" alt=\"PDU\" width=\"106\" \/><\/p>\n<h3 style=\"font-size: 24px;\"><span style=\"color: #00beea;\">Personal Data Use Laws<\/span><\/h3>\n<p>This is the category into which most data privacy laws fall. These are laws and regulations that govern how data subjects\u2019 data can be used by governments and organizations, such as the EU\u2019s <a href=\"https:\/\/www.calligo.io\/services\/gdpr\/\" target=\"_blank\" rel=\"noopener\">GDPR<\/a> and Brazil\u2019s LGPD\/GDPL.<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 16px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/DSc.png\" alt=\"DSc\" width=\"106\" \/><\/p>\n<h2 style=\"font-size: 24px;\"><span style=\"color: #00beea;\">Data Sharing Frameworks (Companies)<\/span><\/h2>\n<p>These are the mechanisms through which personal data can safely cross borders. These include international agreements \u2013 for example, the EU\u2019s adequacy agreements \u2013 that recognise each other\u2019s data privacy regimes as sufficiently robust such that no additional safeguards are legally required for relevant citizens\u2019 data to be shared.<\/p>\n<p>This element also covers Standard Contractual Clauses (SCCs) aka Model Clauses \u2013 the template legal clauses that the EU has provided for companies to include in their data sharing agreements with third parties and even between related corporate entities whenever EU personal data leaves the EU.<\/p>\n<p><strong>A note on the UK\u2019s Adequacy ruling<\/strong><\/p>\n<p>On 28<sup>th<\/sup> June 2021, the UK was awarded adequacy by the EU, approximately six months post-Brexit and just two days before the expiration of the \u2018interim period\u2019 that maintained the status quo until adequacy was awarded.<\/p>\n<p>This is record-breaking time (far surpassing Argentina\u2019s previous 18 months), but with speed came limitations. Of course, the UK\u2019s prior membership of the EU and enactment of the GDPR into law via the Data Protection Act 2018 helped secure adequacy. But regardless, there is an unprecedented \u2018sunset clause\u2019 that states the EU will monitor the data privacy situation in the UK until 2025, and can revoke adequacy at any time if the UK deviates from its current position.<\/p>\n<p>This will not be taken lightly by the UK. Its stated intention is to become a \u2018centre of excellence\u2019 for the development and use of AI in industry, especially in FinTech. And as is often mentioned, AI and data privacy are often in conflict. We have already seen that Brazil\u2019s laws on biometrics are diametrically opposed to France\u2019s. Meanwhile, UEFA and the UK Police are pro-facial recognition to prevent football hooliganism, while privacy advocates are not. The UK may have to become a leader not just in AI, but in <em>Ethical<\/em> AI in order to preserve its adequacy ruling.<\/p>\n<p style=\"font-weight: bold;\">A note on the recent Standard Contractual Clause (SCC) developments<\/p>\n<p>SCCs have come under extended attention recently as in June 2021, the EU released its new versions, made necessary after the <a href=\"https:\/\/www.calligo.io\/insights\/blog\/step-by-step-guide-to-schrems-ii-and-privacy-shields-invalidation\/\" target=\"_blank\" rel=\"noopener\">Schrems II judgement<\/a> made it clear that their previous format was not suitable \u2013 not least because they only covered data being moved from an EU Controller to non-EU entity, not from an EU Processor.<\/p>\n<p>The <a href=\"https:\/\/www.calligo.io\/insights\/blog\/frontline-privacy-observations-from-deploying-the-eus-new-sccs\/\" target=\"_blank\" rel=\"noopener\">new SCCs<\/a> cover all sources and directions of data movement, and also include a set of technological and organisational requirements that both parties must adhere to (such as requiring data encryption), ensuring they are less a legal tickbox exercise, and instead create actual practical privacy safeguards.<\/p>\n<p>It is worth noting that the old SCCs are not dead. Not only do they remain valid for new contracts until 27th September 2021, but companies also have until 27th December 2022 to replace them in any existing contracts. Plus, following Brexit, the new SCCs are not recognised in the UK, so contracts governing transfers out of the UK will require the old SCCs until the UK\u2019s Information Commissioner&#8217;s Office (ICO) releases its bespoke UK clauses, which are due in Summer 2021. You can read more about the new SCCs, <a href=\"https:\/\/www.calligo.io\/insights\/blog\/frontline-privacy-observations-from-deploying-the-eus-new-sccs\/\" target=\"_blank\" rel=\"noopener\">here<\/a>.<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 16px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/GU.png\" alt=\"GU\" width=\"106\" \/><\/p>\n<h3 style=\"font-size: 24px;\"><span style=\"color: #00beea;\">Guidance<\/span><\/h3>\n<p>Most data privacy laws are supplemented by formal guidance on how the law should be applied, to clarify subsequent ambiguity or even to close loopholes.<\/p>\n<p>As a forerunner in data privacy, the GDPR arguably has the most notable library of guidance, covering topics as diverse as how to determine territorial scope, <a href=\"https:\/\/www.calligo.io\/insights\/blog\/does-your-dpo-have-a-conflict-of-interest\/\" target=\"_blank\" rel=\"noopener\">DPO conflicts of interest<\/a>, and the use of cookies.<\/p>\n<p><img decoding=\"async\" style=\"width: 295px; margin: 0px auto; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/infographic-cover-does-your-dpo-have-a-conflict-of-interest.png\" alt=\"infographic-cover-does-your-dpo-have-a-conflict-of-interest\" width=\"295\" \/><\/p>\n<h4 style=\"font-size: 20px; text-align: center;\">Does your DPO have a Conflict of Interest?<\/h4>\n<p style=\"text-align: center;\">Your DPO should be knowledgeable, experienced and qualified, but not everyone is suitable for the role<\/p>\n<p><a href=\"https:\/\/www.calligo.io\/insights\/blog\/does-your-dpo-have-a-conflict-of-interest\/\" rel=\" noopener\">Read more<\/a> <img decoding=\"async\" style=\"width: 106px; margin: 0px auto 16px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/DSs.png\" alt=\"DSs\" width=\"106\" \/><\/p>\n<h3><span style=\"font-size: 24px; color: #00beea;\">Data Sharing Frameworks (States)<\/span><\/h3>\n<p>In contrast to the above, the laws that this element describes are less about how a company may or may not <em>use<\/em> personal data, but are specifically about whether and how they may <em>share<\/em> it.<\/p>\n<p>Examples notably include California\u2019s CPRA \u2013 the amended version of the <a href=\"https:\/\/www.calligo.io\/insights\/blog\/what-is-california-consumer-privacy-act-ccpa\/\" target=\"_blank\" rel=\"noopener\">CCPA<\/a> \u2013 that was specifically created to regulate inter-company data sharing<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 16px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/J.png\" alt=\"J\" width=\"106\" \/><\/p>\n<h2 style=\"font-size: 24px;\"><span style=\"color: #00beea;\">Judgements<\/span><\/h2>\n<p>This is essentially case law \u2013 the legal principle that past legal decisions that applied statutory law to specific scenarios serve as an indicative (though not binding) precedent for future similar situations. Judgements may also publicly call into question the suitability of particular laws or mechanisms, and trigger significant change.<\/p>\n<p>One of the most powerful recent judgements in data privacy was <a href=\"https:\/\/www.calligo.io\/insights\/blog\/step-by-step-guide-to-schrems-ii-and-privacy-shields-invalidation\/\" target=\"_blank\" rel=\"noopener\">Schrems II<\/a> which, as mentioned above, put SCCs at risk, resulting in <a href=\"#SCC\" rel=\"noopener\">their reconstruction<\/a>.<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 5px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/MD.png\" alt=\"MD\" width=\"106\" \/><\/p>\n<h2 style=\"font-size: 24px;\"><span style=\"color: #00beea;\">Medical Data Laws<\/span><\/h2>\n<p>Rather than relying on generic data privacy laws, the way in which some nations intend or need to use patients\u2019 healthcare data requires additional specific data privacy protection and protocols. The most well-known examples are the US\u2019 HIIPA and HITECH.<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 5px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/Untitled-1.png\" alt=\"Untitled-1\" width=\"106\" \/><\/p>\n<h2 style=\"font-size: 24px;\"><span style=\"color: #00beea;\">ePrivacy Laws<\/span><\/h2>\n<p>A fast-growing area of legislation that is trying to keep up with balancing the desires and advanced capabilities of the advertiser with the privacy and interests of the data subject, e.g. CASL and the EU\u2019s ePrivacy Directive (until the much-debated ePrivacy Regulation repeals it).<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 16px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/SLs.png\" alt=\"SLs\" width=\"106\" \/><\/p>\n<h2 style=\"font-size: 24px;\"><span style=\"color: #00beea;\">State Surveillance Laws<\/span><\/h2>\n<p>Seemingly the antithesis of data privacy, these laws articulate precisely when \u2013 and only when \u2013 an individual\u2019s right to privacy may be overridden by national security and interest.<\/p>\n<p>Examples include the UK\u2019s Investigative Powers Act, and the US PATRIOT Act and CLOUD Act. Many of these also appear in the Periodic Table\u2019s bottom section &#8211; <em>Legislation and practices whose powers and requirements can conflict with data privacy.<\/em><\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 5px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/SLc.png\" alt=\"SLc\" width=\"106\" \/><a id=\"AI\" data-hs-anchor=\"true\"><\/a><\/p>\n<h2 style=\"font-size: 24px;\"><span style=\"color: #00beea;\">Company Surveillance Laws<\/span><\/h2>\n<p>Companies and even individuals are required to preserve individuals\u2019 rights to data privacy when performing any form of surveillance or recording, including telephone recording or the use of CCTV, even domestically.<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 5px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/AI.png\" alt=\"AI\" width=\"106\" \/><\/p>\n<h2 style=\"font-size: 24px;\"><span style=\"color: #00beea;\">Artificial Intelligence Laws<\/span><\/h2>\n<p>As recently as only three months ago, this may not have been a category. In April 2021, the EU published its AI Regulation. It creates obligations for the responsible use of AI, including the maintenance and oversight of data privacy.<\/p>\n<p>On release, it was described as \u201cthe first-ever legal framework on AI\u201d and it certainly won\u2019t be the last regulation or law in this category.<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 5px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/CP.png\" alt=\"CP\" width=\"106\" \/><\/p>\n<h2 style=\"font-size: 24px;\"><span style=\"color: #00beea;\">Child Protection Laws<\/span><\/h2>\n<p>A category dedicated to those laws that protect the privacy and safety and children and their data (COPPA for example).<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 5px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/Wb.png\" alt=\"Wb\" width=\"106\" \/><\/p>\n<h2 style=\"font-size: 24px;\"><span style=\"color: #00beea;\">Whistleblowing Laws<\/span><\/h2>\n<p>These laws protect the privacy of those that expose corruption and crime, even in the face of judicial proceedings. These exist as both international laws, such as the African Union, and also nationally, with 59 countries having enacted their own.<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 5px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/CoC.png\" alt=\"CoC\" width=\"106\" \/><\/p>\n<h2 style=\"font-size: 24px;\"><span style=\"color: #00beea;\">Professional Codes of Conduct<\/span><\/h2>\n<p>The way in which some industries operate and the data they rely on and routinely process places additional obligations on their management of it. Industries such as financial services and gaming, and many others, have strict requirements around data management, responsibility and use \u2013 all of which directly or indirectly impact data privacy.<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 5px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/SC.png\" alt=\"SC\" width=\"106\" \/><\/p>\n<h2 style=\"font-size: 24px;\"><span style=\"color: #00beea;\">Standards and Certifications<\/span><\/h2>\n<p>There are many standards and certifications that attest to an organization\u2019s determination to protect data privacy, whether in specific circumstances or industries (PCI:DSS for example, or the IAB Consent Framework), and also more sector-agnostically (ISO 27701). While voluntarily applied for and maintained, these standards often serve as bare minimum requirements for organizations\u2019 supply chains, or membership of industry bodies.<\/p>\n<h2 style=\"font-size: 30px; text-align: center;\"><\/h2>\n<h2 style=\"font-size: 30px; text-align: center;\"><strong>Restructuring the Future Developments section<\/strong><img decoding=\"async\" style=\"width: 619px; margin-left: auto; margin-right: auto; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/FutureDevelopments.png\" alt=\"FutureDevelopments\" width=\"619\" \/><\/h2>\n<p>The degree of change over the last few months, plus the restructure of the Core Legislation section, meant that we also had to make substantial changes to the Future Developments section. Brexit is complete and the UK\u2019s adequacy was confirmed so quickly, it simply drops into the new <a href=\"#DSs\" rel=\"noopener\">State Data Sharing frameworks<\/a> element above. The \u2018EU-US transfer mechanisms\u2019 that we were tracking after Schrems II drop into <a href=\"#DSc\" rel=\"noopener\">Company Data Sharing frameworks<\/a>. And of course, AI and its need for regulation to prevent conflict with data privacy is no longer a likely Future Development, and is <a href=\"#AI\" rel=\"noopener\">well and truly here<\/a>.<\/p>\n<p>Some pre-existing Future Development elements remain, such as India\u2019s privacy bill and the various US bills and enactments. Meanwhile, new concerns and debates have arisen, around the issues of public safety and identity.<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 5px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/USb.png\" alt=\"USb\" width=\"106\" \/><\/p>\n<h2 style=\"font-size: 24px;\"><span style=\"color: #00beea;\">United States Data Privacy Bills<\/span><\/h2>\n<p>Here we will track the various US state data privacy bills, and create new elements for bills that pass into law, keeping them in <em>Future Developments<\/em> until their effective dates. The two that we are tracking most closely at the moment are Washington State and New York.<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 5px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/VCDPA.png\" alt=\"VCDPA\" width=\"106\" \/><\/p>\n<h2 style=\"font-size: 24px;\"><span style=\"color: #00beea;\">Virginia Consumer Data Protection Act<\/span><\/h2>\n<p>In April 2021, Virginia passed its own privacy law. You can read more about our thoughts on the Virginia Consumer Data Protection Act <a href=\"https:\/\/www.calligo.io\/insights\/blog\/data-privacy-update-virginia-consumer-data-protection-act-vcdpa\/\" target=\"_blank\" rel=\"noopener\">here<\/a>.<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 5px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/CPA.png\" alt=\"CPA\" width=\"106\" \/><\/p>\n<h3 style=\"font-size: 24px;\"><span style=\"color: #00beea;\"><strong>Colorado<\/strong> <strong>Privacy Act<\/strong><\/span><\/h3>\n<p>And then in June 2021, Colorado was the third US state to pass its own data privacy bill \u2013 the Colorado Privacy Act. Between now and it coming into effect in July 2023, it seems there is the possibility of California-esque amendments and additions. There are already debates over its suitability, mainly regarding the fact consumers have no right to sue (similar to the new Virginia law), the nuances of the opt-out requirements, and the 17 \u2018blanket exceptions\u2019 that rule data collected by airlines, utilities, healthcare providers and various federal and state organizations out of scope.<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 5px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/Av.png\" alt=\"Av\" width=\"106\" \/><\/p>\n<h3 style=\"font-size: 24px;\"><span style=\"color: #00beea;\"><strong>Age Verification<\/strong><\/span><\/h3>\n<p>There is increased demand among companies for better age verification processes. In many industries \u2013 especially online \u2013 the scrutiny, risk of penalties and risk of brand damage for mistakenly providing unsuitable services to minors is growing constantly as more and more <a href=\"#CPL\" rel=\"noopener\">Child Protection laws<\/a> are enacted or proposed.<\/p>\n<p>However, while companies want the ability to verify customers\u2019 ages, they do not want the burden of doing it themselves, as this means knowingly processing more minors\u2019 data to do so, creating additional data privacy obligations. It is a question that urgently requires solving, but also requires someone to take responsibility for it.<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 5px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/Iv.png\" alt=\"Iv\" width=\"106\" \/><\/p>\n<h3 style=\"font-size: 24px;\"><span style=\"color: #00beea;\"><strong>Identity Verification<\/strong><\/span><\/h3>\n<p>The rise in the improper and abusive use of social media has flown up the news agenda since our last update. Celebrity complaints and even tragedies caused by anonymous social media users, plus concerns relating to terrorism, cybercrime and exploitation of children and women have all led to loud calls for users to be required to verify their identity before being able to use social media accounts.<\/p>\n<p>However, such requirements may violate an individual\u2019s right to privacy, or other related ethical concerns. Centralised identity verification would be a solution to this and Age Verification (above), and perhaps Vaccinations (below) \u2013 and many more live issues far beyond social media \u2013 but it is a solution riddled with moral, legal and practical difficulty. The debate however will not disappear, is likely to be frequently re-awoken, and data privacy principles and laws will be at the heart of it.<\/p>\n<p><img decoding=\"async\" style=\"width: 106px; margin: 0px auto 5px; display: block;\" src=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/V.png\" alt=\"V\" width=\"106\" \/><\/p>\n<h3 style=\"font-size: 24px;\"><span style=\"color: #00beea;\"><strong>Vaccinations<\/strong><\/span><\/h3>\n<p>The desire for governments and employers to understand who has been vaccinated from COVID-19 and who has not, versus the citizen\/employee\u2019s right to privacy will be an ongoing issue.<\/p>\n<p>Similar to the issues employers notoriously found themselves in tracking employees who tested positive for the virus, and also similar to state surveillance laws above, the question is whether protecting wider public safety is sufficient justification to override the individual\u2019s right to privacy. And if so, how that data is collected, treated and even shared will be an issue for months to come.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Since our last update in January 2021, there has been an unprecedented amount of activity in the data privacy world.<\/p>\n","protected":false},"author":33,"featured_media":1653,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"post_format_type":[40],"class_list":["post-1628","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>UPDATE 7: The Data Privacy Periodic Table | Calligo<\/title>\n<meta name=\"description\" content=\"Since our last update in January 2021, there has been an unprecedented amount of activity in the data privacy world.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"UPDATE 7: The Data Privacy Periodic Table | Calligo\" \/>\n<meta property=\"og:description\" content=\"Since our last update in January 2021, there has been an unprecedented amount of activity in the data privacy world.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/\" \/>\n<meta property=\"og:site_name\" content=\"Calligo\" \/>\n<meta property=\"article:published_time\" content=\"2021-08-03T15:34:21+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-12T08:35:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/Data-Privacy-Periodic-Table-Calligo.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1347\" \/>\n\t<meta property=\"og:image:height\" content=\"821\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Brendan Walsh\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@calligocloud\" \/>\n<meta name=\"twitter:site\" content=\"@calligocloud\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Brendan Walsh\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"15 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/\"},\"author\":{\"name\":\"Brendan Walsh\",\"@id\":\"https:\/\/www.calligo.io\/#\/schema\/person\/e2e0283a3e6c3a237a10e012c081755f\"},\"headline\":\"UPDATE 7: The Data Privacy Periodic Table\",\"datePublished\":\"2021-08-03T15:34:21+00:00\",\"dateModified\":\"2023-09-12T08:35:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/\"},\"wordCount\":2255,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.calligo.io\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/Data-Privacy-Periodic-Table-Calligo.png\",\"articleSection\":[\"Blog\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/\",\"url\":\"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/\",\"name\":\"UPDATE 7: The Data Privacy Periodic Table | Calligo\",\"isPartOf\":{\"@id\":\"https:\/\/www.calligo.io\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/Data-Privacy-Periodic-Table-Calligo.png\",\"datePublished\":\"2021-08-03T15:34:21+00:00\",\"dateModified\":\"2023-09-12T08:35:57+00:00\",\"description\":\"Since our last update in January 2021, there has been an unprecedented amount of activity in the data privacy world.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/#primaryimage\",\"url\":\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/Data-Privacy-Periodic-Table-Calligo.png\",\"contentUrl\":\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/Data-Privacy-Periodic-Table-Calligo.png\",\"width\":1347,\"height\":821},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.calligo.io\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"UPDATE 7: The Data Privacy Periodic Table\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.calligo.io\/#website\",\"url\":\"https:\/\/www.calligo.io\/\",\"name\":\"Calligo\",\"description\":\"Building value through data\",\"publisher\":{\"@id\":\"https:\/\/www.calligo.io\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.calligo.io\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.calligo.io\/#organization\",\"name\":\"Calligo\",\"url\":\"https:\/\/www.calligo.io\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.calligo.io\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/calligo-og.jpg\",\"contentUrl\":\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/calligo-og.jpg\",\"width\":1200,\"height\":630,\"caption\":\"Calligo\"},\"image\":{\"@id\":\"https:\/\/www.calligo.io\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/calligocloud\",\"https:\/\/www.linkedin.com\/company\/calligo-limited\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.calligo.io\/#\/schema\/person\/e2e0283a3e6c3a237a10e012c081755f\",\"name\":\"Brendan Walsh\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.calligo.io\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/299d5b23f0682aabb1a2347ddf8b95df04b22cfec378aea17a8f7395c74b2bc8?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/299d5b23f0682aabb1a2347ddf8b95df04b22cfec378aea17a8f7395c74b2bc8?s=96&d=mm&r=g\",\"caption\":\"Brendan Walsh\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"UPDATE 7: The Data Privacy Periodic Table | Calligo","description":"Since our last update in January 2021, there has been an unprecedented amount of activity in the data privacy world.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/","og_locale":"en_GB","og_type":"article","og_title":"UPDATE 7: The Data Privacy Periodic Table | Calligo","og_description":"Since our last update in January 2021, there has been an unprecedented amount of activity in the data privacy world.","og_url":"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/","og_site_name":"Calligo","article_published_time":"2021-08-03T15:34:21+00:00","article_modified_time":"2023-09-12T08:35:57+00:00","og_image":[{"width":1347,"height":821,"url":"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/Data-Privacy-Periodic-Table-Calligo.png","type":"image\/png"}],"author":"Brendan Walsh","twitter_card":"summary_large_image","twitter_creator":"@calligocloud","twitter_site":"@calligocloud","twitter_misc":{"Written by":"Brendan Walsh","Estimated reading time":"15 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/#article","isPartOf":{"@id":"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/"},"author":{"name":"Brendan Walsh","@id":"https:\/\/www.calligo.io\/#\/schema\/person\/e2e0283a3e6c3a237a10e012c081755f"},"headline":"UPDATE 7: The Data Privacy Periodic Table","datePublished":"2021-08-03T15:34:21+00:00","dateModified":"2023-09-12T08:35:57+00:00","mainEntityOfPage":{"@id":"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/"},"wordCount":2255,"commentCount":0,"publisher":{"@id":"https:\/\/www.calligo.io\/#organization"},"image":{"@id":"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/#primaryimage"},"thumbnailUrl":"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/Data-Privacy-Periodic-Table-Calligo.png","articleSection":["Blog"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/","url":"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/","name":"UPDATE 7: The Data Privacy Periodic Table | Calligo","isPartOf":{"@id":"https:\/\/www.calligo.io\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/#primaryimage"},"image":{"@id":"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/#primaryimage"},"thumbnailUrl":"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/Data-Privacy-Periodic-Table-Calligo.png","datePublished":"2021-08-03T15:34:21+00:00","dateModified":"2023-09-12T08:35:57+00:00","description":"Since our last update in January 2021, there has been an unprecedented amount of activity in the data privacy world.","breadcrumb":{"@id":"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/#primaryimage","url":"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/Data-Privacy-Periodic-Table-Calligo.png","contentUrl":"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/Data-Privacy-Periodic-Table-Calligo.png","width":1347,"height":821},{"@type":"BreadcrumbList","@id":"https:\/\/www.calligo.io\/insights\/blog\/update-7-the-data-privacy-periodic-table\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.calligo.io\/"},{"@type":"ListItem","position":2,"name":"UPDATE 7: The Data Privacy Periodic Table"}]},{"@type":"WebSite","@id":"https:\/\/www.calligo.io\/#website","url":"https:\/\/www.calligo.io\/","name":"Calligo","description":"Building value through data","publisher":{"@id":"https:\/\/www.calligo.io\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.calligo.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.calligo.io\/#organization","name":"Calligo","url":"https:\/\/www.calligo.io\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.calligo.io\/#\/schema\/logo\/image\/","url":"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/calligo-og.jpg","contentUrl":"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/calligo-og.jpg","width":1200,"height":630,"caption":"Calligo"},"image":{"@id":"https:\/\/www.calligo.io\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/calligocloud","https:\/\/www.linkedin.com\/company\/calligo-limited\/"]},{"@type":"Person","@id":"https:\/\/www.calligo.io\/#\/schema\/person\/e2e0283a3e6c3a237a10e012c081755f","name":"Brendan Walsh","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.calligo.io\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/299d5b23f0682aabb1a2347ddf8b95df04b22cfec378aea17a8f7395c74b2bc8?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/299d5b23f0682aabb1a2347ddf8b95df04b22cfec378aea17a8f7395c74b2bc8?s=96&d=mm&r=g","caption":"Brendan Walsh"}}]}},"_links":{"self":[{"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/posts\/1628","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/users\/33"}],"replies":[{"embeddable":true,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/comments?post=1628"}],"version-history":[{"count":0,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/posts\/1628\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/media\/1653"}],"wp:attachment":[{"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/media?parent=1628"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/categories?post=1628"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/tags?post=1628"},{"taxonomy":"post_format_type","embeddable":true,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/post_format_type?post=1628"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}