3.5 Data Protection and Privacy

The craft: the personal data's life (the collection → the processing → the storage → the sharing → the retention (each stage's law)); the principles (the consent's-and-the purpose-limitation (the minimisation (the accuracy (the security (the accountability)))) — the data-protection principles' craft (the GDPR's world the reference)); the privacy's constitutional face (the Constitution 2072's Article 28 (the privacy's right (the verified frame)) + the Individual Privacy Act 2074 (the privacy's codification (the interception's-and-the surveillance's conditions (the data's faces))); the DPA's absence (the dedicated data-protection statute's debate (the bill's journey (the Individual Privacy Act's-and-the ETA's piecemeal craft vs the GDPR-type comprehensive regime (the honest audit)))); the cross-border data's faces (the localisation's-and-the transfer's debates).