Editing Right to privacy (section)

=== European Union ===
[[File:Wikimania first day 7 Aug 2024-06.jpg|thumb|Lanyards of Wikimania Katowice 2024: the lanyard worn is blue when the person gives permission to be photographed, red when the person does not give permission]]
The right to privacy is protected in the EU by [[European Convention on Human Rights]] Article 8:
{{Blockquote
|text=1. Everyone has the right to respect for his private and family life, his home and his correspondence.
2. There shall be no interference by a public authority with the exercise of this right except such as is in accordance with the law and is necessary in a democratic society in the interests of national security, public safety or the economic well-being of the country, for the prevention of disorder or crime, for the protection of health or morals, or for the protection of the rights and freedoms of others.
|multiline=yes
|source=[https://www.echr.coe.int/documents/d/echr/convention_ENG European Convention on Human Rights]
}}

Compared to the United States, the European Union (EU) has more extensive data protection laws.<ref name=":0">{{Cite journal|last1=Hoofnagle|first1=Chris Jay|last2=Sloot|first2=Bart van der|last3=Borgesius|first3=Frederik Zuiderveen|date=2 January 2019|title=The European Union general data protection regulation: what it is and what it means|journal=Information & Communications Technology Law|volume=28|issue=1|pages=65–98|doi=10.1080/13600834.2019.1573501|issn=1360-0834|hdl=11245.1/8a9b1909-1ce8-478f-b3fc-be5126911846|s2cid=86416362|url=https://dare.uva.nl/personal/pure/en/publications/the-european-union-general-data-protection-regulation-what-it-is-and-what-it-means(8a9b1909-1ce8-478f-b3fc-be5126911846).html |hdl-access=free}}</ref>

The [[General Data Protection Regulation]] (GDPR) is an important component of EU [[privacy law]] and of [[human rights law]], in particular Article 8(1) of the [[Charter of Fundamental Rights of the European Union]].

Under GDPR, data about citizens may only be gathered or processed under specific cases, and with certain conditions. Requirements of data controller parties under the GDPR include keeping records of their processing activities, adopting data protection policies, transparency with data subjects, appointing a Data Protection Officer, and implementing technical safeguards to mitigate security risks.{{Citation needed|date=June 2024}}