DATA PROTECTION REPORT CARDS

In dozens of nations, policymakers are considering and enacting data privacy and data protection laws. Data moves globally and instantly, yet it is complex and difficult to establish a national (let alone a global) framework for data governance. The Data Catalyst Institute is working to support stakeholders and policymakers as they undertake this important effort: to build a data governance framework that works locally and globally – for consumers and data-focused enterprises.

To celebrate the success of good policy and identify challenges of many proposals, DCI Report Cards score proposals and laws on a 10-factor 100-point scale. The Report Cards highlight important and core tenets of data governance policy, including issues and options that we believe regulators must consider.

Proposals can and often will evolve — before and after enactment. To reflect those changes, DCI will monitor amendments, court cases, and other changes to proposals and adjust our analysis and scores. Our objective is not to criticize or condemn, but rather to support better, broader understanding among policymakers, the media, and stakeholders in general.

Please note that Report Cards are produced as independent research to start policy conversations and do not necessarily reflect the views of our sponsors or our advisory board.

Clear Terms Specific Harms Helpful Processes Not Retroactive Not Harmful Free Speech Simple Consents International Commerce Fair Enforcement Small Enterprises 5/10 2/10 5/10 5/10 2/10 3/10 3/10 2/10 5/10 3/10

India

India Draft National e-Commerce Policy (2019)
35
/100 score
Clear Terms Specific Harms Helpful Processes Not Retroactive Not Harmful Free Speech Simple Consents International Commerce Fair Enforcement Small Enterprises 9/10 9/10 8/10 9/10 10/10 10/10 9/10 9/10 10/10 9/10

United States

Washington Privacy Act, S. 5376 (2019)
92
/100 score
Clear Terms Specific Harms Helpful Processes Not Retroactive Not Harmful Free Speech Simple Consents International Commerce Fair Enforcement Small Enterprises 7/10 5/10 5/10 5/10 6/10 5/10 3/10 7/10 7/10 7/10

United States

American Data Dissemination Act of 2019
57
/100 score
Clear Terms Specific Harms Helpful Processes Not Retroactive Not Harmful Free Speech Simple Consents International Commerce Fair Enforcement Small Enterprises 8/10 8/10 8/10 9/10 8/10 8/10 8/10 8/10 8/10 8/10

E.U.

General Data Protection Regulation (GDPR)
81
/100 score
Clear Terms Specific Harms Helpful Processes Not Retroactive Not Harmful Free Speech Simple Consents International Commerce Fair Enforcement Small Enterprises 6/10 6/10 6/10 7/10 6/10 4/10 7/10 3/10 2/10 2/10

India

Draft Personal Data Protection Bill
49
/100 score
Clear Terms Specific Harms Helpful Processes Not Retroactive Not Harmful Free Speech Simple Consents International Commerce Fair Enforcement Small Enterprises 7/10 6/10 9/10 7/10 9/10 9/10 7/10 8/10 7/10 7/10

Chile

Legislation to Protect Personal Data and Create a Personal Data Protection Agency
76
/100 score
Clear Terms Specific Harms Helpful Processes Not Retroactive Not Harmful Free Speech Simple Consents International Commerce Fair Enforcement Small Enterprises 4/10 2/10 6/10 10/10 7/10 10/10 4/10 1/10 6/10 7/10

United States

APPS Act (H.R. 6547)
57
/100 score
Clear Terms Specific Harms Helpful Processes Not Retroactive Not Harmful Free Speech Simple Consents International Commerce Fair Enforcement Small Enterprises 4/10 2/10 4/10 6/10 1/10 1/10 6/10 6/10 7/10 4/10

United States

California Consumer Privacy Act of 2018, Cal. A.B. 375
41
/100 score