The World Geospatial Industry Council (‘WGIC’) released, on 9 March 2020, its report on geospatial information and privacy (‘the Report’). In particular, the Report addresses, among other things, data protection laws and their scopes of application, privacy and data protection requirements per jurisdictions, their impact on the geospatial industry, as well as best practices for compliance and accountability. In addition, the Report highlights that organisations should work on developing privacy policies, governance principles, and accountability, as well as demonstrate of compliance through appropriate measures, and take into account the privacy requirements underlying data transfers, third-party data processing, Privacy by Design and by Default, as well as monitoring and enforcing policies. Lastly, the Reports notes the importance of creating awareness within an organisation with regard to data protection legislation, and to seek ways through which to create such awareness among employees.
You can read the Report here.