Correct answer: (c) The European Union
Explanation
- A
Australia
(a) Australia has privacy statutes (Privacy Act) but not the EU GDPR of April 2016 / May 2018. Not the key.
- B
Canada
(b) Canada has PIPEDA, not GDPR. Not the key.
- C
The European Union
(c) The European Union adopted the General Data Protection Regulation in April 2016 and began applying it from 25 May 2018. That is the official key.
- D
The United States of America
(d) The United States has sectoral federal privacy laws, not a GDPR analogue of that date. Not the key.
Summary. Official key is (c). GDPR is the EU’s general data-protection law, adopted 2016, applicable 25 May 2018, with extra-territorial reach to firms processing EU residents’ data. Australia, Canada and the US run different privacy models. Honour (c).
Same topic · past papers
UPSC has asked this before
These previous-year questions sit on the same topic. Open one to practise the earlier ask.