Typorithm · medium

GDPR & Privacy Laws

privacy-lawsecuritygdprprivacyccpa

Saved on this device

Full lesson · 8 learning steps Open any exercise for focused practice

Step 1 of 8 · intro card

Learn GDPR & Privacy Laws

Compliance & Privacy

GDPR protects the personal data of people in the EU: you need a lawful basis (such as consent or legitimate interest), must honor data-subject rights (access, erasure, portability), may need a DPO, and must report breaches within 72 hours. The CCPA is the California analog, and fines reach up to 4% of global revenue.

The GDPR governs the personal data of people in the EU, no matter where the processor is located. Every processing activity needs a lawful basis — consent and legitimate interest are the two most common of the six.

It grants data subjects rights: to access their data, to have it erased, and to receive a portable copy. Some organizations must appoint a Data Protection Officer (DPO) to oversee compliance, and a reportable breach must be notified to the supervisory authority within 72 hours.

California's CCPA is the closest US analog, giving residents similar rights over their personal information. GDPR fines are steep — up to 4% of global annual revenue or 20 million euros, whichever is higher.

GDPR needs a lawful basis (consent or legitimate interest).

Rights: access, erasure, portability; breaches reported in 72h.

CCPA is the California analog; fines up to 4% of global revenue.

gdpr:
  lawful_basis: consent-or-legitimate
  rights: access-erasure-portability
  dpo: data-protection-officer
  breach: notify-within-72h
  also: ccpa-in-california

Read the implementation

Connect each part of the code to the concept before you type.

1. Lawful basis

GDPR requires a lawful basis to process personal data — consent and legitimate interest are two of the six.

lawful_basis: consent-or-legitimate

2. Data-subject rights

Individuals can request access to, erasure of, and a portable copy of their personal data.

rights: access-erasure-portability

3. DPO

Some organizations must appoint a Data Protection Officer to oversee compliance.

dpo: data-protection-officer

4. Breach window

A reportable personal-data breach must be notified to the supervisory authority within 72 hours.

breach: notify-within-72h

5. CCPA

The CCPA is California's analogous privacy law governing residents' personal information.

also: ccpa-in-california

A complete learning loop

Understand

Read the concept map and follow the code breakdown.

Reconstruct

Type the implementation, repair mistakes and work through every recall exercise.

Verify

Use the final check without hints; revisit weak concepts in short practice sessions.