Data protection laws provide a legal framework on how to obtain, use and store data of natural persons. The various laws around the world describe the right of natural persons to control who is using its data. This includes usually the right to get details on which data is stored, for what purpose and to request the deletion in case the purpose is not given anymore. Digital personal data protection act, is an act to provide for the processing of digital personal data in a manner that recognizes both the right of individuals to protect their personal data and the need to process such data for lawful purposes and for matters connected therewith or incidental thereto. Most personal data protection bills aims to provide for protection of the privacy of individuals relating to their personal data, specify the flow and usage of personal data, create a relationship of trust between persons and entities processing the personal data, protect the fundamental rights of individuals whose personal data are processed.
A privacy policy should specify any personally identifiable information that is gathered, such as name, address and credit card number, as well as other information like order history, browsing habit, upload and downloads. The policy should also explain if data can be left on a user's computer, such as cookies. The policy should disclose if data can be shared with or sold to third parties and if so, what the purpose is.