Which of the following adopted a law on data protection and privacy for its citizens known as 'General Data Protection Regulation' in April 2016 and started implementation of its from 25th May, 2018?

1. A

   Australia

   (a) Australia has privacy statutes (Privacy Act) but not the EU GDPR of April 2016 / May 2018. Not the key.

2. B

   Canada

   (b) Canada has PIPEDA, not GDPR. Not the key.

3. C

   The European Union

   (c) The European Union adopted the General Data Protection Regulation in April 2016 and began applying it from 25 May 2018. That is the official key.

4. D

   The United States of America

   (d) The United States has sectoral federal privacy laws, not a GDPR analogue of that date. Not the key.

Summary. Official key is (c). GDPR is the EU’s general data-protection law, adopted 2016, applicable 25 May 2018, with extra-territorial reach to firms processing EU residents’ data. Australia, Canada and the US run different privacy models. Honour (c).