Trends

So in terms of trends, we see a great growth in legislation relating to information privacy. We have the Data Localization Law in Russia, Protection of Personalization, of Personal Information in South Africa. Australia and New Zealand both have privacy legislation created in 1998 and 1993 respectively, Hong Kong in 1995. APEC across the Pacific countries created a framework, privacy framework. This is a directive, it is not mandated across all of those countries. And in China, a non-binding focus on protecting, on protecting nation rather than necessarily the individual. In the US, we have the Privacy Shield, which seeks to meet the requirements of GDPR. And a lot of this has been spurred by cloud computing.

So we see the internet of things and smart devices and software-as-a-service driving some of this legislation. So we have a trend around increasing legislation covering data privacy generically. One of the biggest standards covering Europe is the General Data Protection Requirements, which replace the Data Protection Requirements. And this GDPR standard has granted equivalence ratings to Andorra, Argentina, Canada, Israel, Japan, Jersey, New Zealand, Switzerland, and Uruguay. So effectively, each of those countries in the third bullet point list have an equivalent set of protection to the GDPR. And there are partial equivalents granted to countries like the United States, where Privacy Shields, Privacy Shield is operated. And this grants European Union citizens protection under US law.

So during section 5, we have looked at standards that relate to identity and access management. And we’ve seen that they are becoming increasingly important. Privacy legislation and regulation is increasing, legislation like GDPR, but also regulation through standards like PCIDSS for financial transactions. Standards relating to secure identity and access management implementations are continuing to develop. We saw with the next generation biometrics, there is a need to do this. This is a rapidly-changing environment. Standards to allow interoperability are increasing and also necessary.