Why do we need an International Data Privacy Day?
Blog
share:

Why do we need an International Data Privacy Day?

Kate  Lewis

Kate Lewis

Chief Privacy Officer

Privacy matters every day…. 

So, why do we need an International Data Privacy Day? 

The idea was originally conceived to mark the first legally binding international data privacy treaty in 1981, with the catchy title: “The Convention for the Protection of Individuals with Regard to Automatic Processing of Personal Data”. (If you ever needed a reminder of why Privacy professionals are not in charge of marketing, that’s it).

Fast forward to 2025 and the day is now marked across the globe, as 137 countries now have national data privacy laws. In fact, Gartner estimates more than 75% of the world’s population is subject to some form of privacy law.  

Each law is different, reflecting each country’s cultural view on privacy and how the balance should be struck between protecting peoples’ right to privacy with enabling business and innovation.  

And the tide of change isn’t showing any signs of slowing. In the United States, every month new US State privacy laws are coming into force; in Europe there is a new EU AI Act; and in Australia, the Australian Office of the Information Commissioner is heavily focused on digital identity.   

Why does this matter at GBG? Well, data privacy is core to what we do. We see every day how our robust privacy compliance helps us build trust with our customers. Our team of specialist privacy experts across the globe keep their fingers on the pulse with ever changing sector requirements, and we get to see first-hand how our commitment to privacy is a clear differentiator.  

Here are the six privacy principles that every member our team, wherever they are in the business or the world, lives by: 

Our Privacy Principles: 

  1. Transparency - We tell customers how we use personal data so they can tell their consumers. 
  2. Individual Rights - We enable individuals to exercise their rights by fulfilling subject access & opt out requests. 
  3. Lawful Basis - We ensure we have a lawful basis to process personal data (e.g. legitimate interest or consent). 
  4. Supplier Due Diligence - We check suppliers will process personal data lawfully, safely & securely. 
  5. Data Minimisation - We only use data for the purpose the individual has been told about. We delete it when it is no longer needed. 
  6. Secure & Trusted - We protect with industry best practice safeguards. We anonymise where possible.  

 

Find out more about our robust approach to privacy and how we keep data safe: https://www.gbgplc.com/en/legal-and-regulatory/privacy-approach/  

Sign up for more expert insight

Hear from us when we launch new research, guides and reports.