Will my research or other work outside the U.S. subject me to the data privacy laws of another country?

The privacy laws of other countries can be more rigorous that in the United States, and researchers must take care to become familiar with the requirements of local jurisdictions when gathering information from local citizens.  The European Union, in particular, has developed extensive statutory protections for the personal information of its citizens that exceed the protections that the U.S. requires. Strict guidelines control when personal information can be gathered, what constitutes a legitimate purpose for collecting data, and whether personal information can be transferred to third parties.  A copy of the EU’s rules for protection of personal data is available.

For more detailed information on this topic, click here.  To get help with managing data privacy and security standards abroad, contact the Office of the General Counsel.