CIPP/US Study Guide
Chapter 1: Introduction to Privacy

Sources of Privacy Protection

Privacy protection comes from four sources: markets, technology, law, and self-regulation/co-regulation. Law is the traditional approach but real protection also depends on the other three.

Four sources of privacy protection
SourceHow it protects
MarketsConsumer and brand pressure leads companies to adopt strong privacy practices
TechnologyTools like encryption protect data even where law or markets are weak
LawTraditional approach, but laws may be poorly drafted or enforced
Self-regulation / co-regulationPrivacy policies, industry codes, and associations supplement government law
Three questions for self-regulation

'Self-regulation' covers three components: legislation (who defines the rules), enforcement (who initiates action - DPAs, agencies, industry, individuals), and adjudication (who decides whether a rule was violated).

Key terms - quick answers

What is “Self-regulation”?
A complement to government law that can cover legislation (who defines rules), enforcement (who acts), and adjudication (who decides violations).
What is “Data protection authority (DPA)”?
A government body that may initiate enforcement of privacy rules; common in comprehensive (European) regimes.