Personal Data Security in Comparative Perspective: Legal Frameworks and Protections
Abstract
The paper presents the general concept of personal data protection, its legal approaches in the European Union, the United States, Japan and Georgia and its main purpose is to study different legal frameworks and approaches that underlie the formation and development of general data protection policies. The present study examines the primary legislative instruments, including the GDPR and the CCPA, which are discussed below, as well as Japanese and Georgian legal regulations. The study's objective is to assess the legal standards of these states with a particular focus on the extent to which they balance and protect the confidentiality of individuals' personal data, while considering commercial interests and state needs. The study utilizes doctrinal and comparative legal methodologies to illuminate the primary regulatory mechanisms governing personal data, restrictions and the individual's right to access personal information. The conclusions presented herein underscore the challenges inherent in the establishment of a unified approach to personal data in the future. The study underscores that the foundation for effective personal data governance in the digital age is a hybrid approach, integrating flexible legal regulations that readily adapt to technological advancements. The document synthesizes fundamental information and methodologies concerning personal data, which are likely to be of interest to both personal data protection policymakers and legal professionals in general, as well as individuals with non-legal educational backgrounds. The protection of personal information and confidentiality is a matter of concern for each individual.
Downloads
PlumX Statistics
References
2. Chloe. A, (2024). Artificial intelligence: Privacy concerns. CSULB College of Business. https://www.csulb.edu/college-of-business/legal-resource-center/article/artificial-intelligence-privacy-concerns
3. Council of Europe. (2018). Modernised Convention 108 for the protection of individuals with regard to the processing of personal data. https://rm.coe.int/16808b36da
4. Council of Europe. (2018, May 18). Convention for the protection of individuals with regard to the processing of personal data (Convention 108). 128th Session of the Committee of Ministers, Elsinore. https://www.coe.int/en/web/conventions/full-list/-/conventions/treaty/108
5. Council of Europe. (2019, January 30). New guidelines on artificial intelligence and data protection. https://www.coe.int/en/web/data-protection/-/new-guidelines-on-artificial-intelligence-and-personal-data-protection
6. De Hert, P., & Gutwirth, S. (2009). Data protection in the case law of Strasbourg and Luxemburg: Constitutionalisation in action. Springer. https://works.bepress.com/serge_gutwirth/10/
7. European Convention on Human Rights, European Court of Human Rights Council of Europe 67075 Strasbourg cedex France www.echr.coe.int
8. European Union. (2000). Charter of Fundamental Rights of the European Union (2000/C 364/01). Official Journal of the European Communities. https://shorturl.at/chhtP
9. European Union. (2016). Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation). Official Journal of the European Union, L 119, 1–88. https://eurlex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679
10. European Union Agency for Fundamental Rights & Council of Europe. (2018). Handbook on European data protection law. https://fra.europa.eu/en/publication/2018/handbook-european-data-protection-law
11. Fujikouge, T. (2025). Data protection laws of the world: Japan – Data protection laws of the world [Web page]. DLA Piper. p.: 2-10 https://www.dlapiperdataprotection.com/?c=US&t=law
12. Gilani, S., Al-Matrooshi, A., & Khan, M. (2023). Right of privacy and the growing scope of artificial intelligence. Current Trends in Law and Society, 3, 1–11.
13. Hendrickx et al. (2021): Hendrickx, I., van Waterschoot, J., Khan, A., ten Bosch, L., Cucchiarini, C., & Strik, H. (2021). Take Back Control: User Privacy and Transparency Concerns in Personalized Conversational Agents. In Joint Proceedings of the ACM IUI 2021 Workshops (Vol. 2903, pp. 6-11). CEUR-WS.org. https://ceur-ws.org/Vol-2903/IUI21WS-CUIIUI-6.PDF
14. Hustinx, P. (2014, September 15). EU data protection law: The review of Directive 95/46/EC and the proposed General Data Protection Regulation. Eurაopean Data Protection Supervisor. https://edps.europa.eu/data-protection/our-work/publications/speeches-articles/eu-data-protection-law-review-directive_en
15. Lucente, K., Serwin, A., & Kashatus, J. M. (2025). Data protection laws of the world: United States – Data protection laws of the world [Web page]. DLA Piper. P.2-10 https://www.dlapiperdataprotection.com/?c=US&t=law
16. Marper v. the United Kingdom, 2008 ECHR 3 (2008). European Court of Human Rights. https://hudoc.echr.coe.int/eng#{%22fulltext%22:[%22Marper%22]}
17. Ngong, I., Kadhe, S. R., Wang, H., Murugesan, K., Weisz, J., Dhurandhar, A., & Ramamurthy, K. N. (2025). Protecting users from themselves: Safeguarding contextual privacy in interactions with conversational agents. arXiv. 10 https://arxiv.org/abs/2502.18509
18. Panagopoulou, F. (2024). Privacy in the age of artificial intelligence. Biomedical Journal of Scientific & Technical Research, 55(5), 47429–47434. https://doi.org/10.26717/BJSTR.2024.55.008761
19. Solove, D. J. (2006). A taxonomy of privacy. University of Pennsylvania Law Review, 154(3), 477–564. https://scholarship.law.upenn.edu/penn_law_review/vol154/iss3/1
20. Solove, D. J. (2025). Artificial intelligence and privacy. Florida Law Review, 77(1), 1–11. https://doi.org/10.2139/ssrn.4713111
21. Tchkuaseli, R., Kvartskhava, K. (2025). Data protection laws of the world: Georgia – Data protection laws of the world [Web page]. DLA Piper. P.2-10 https://www.dlapiperdataprotection.com/?c=US&t=law
22. Warren, S. D., & Brandeis, L. D. (1890). The right to privacy. Harvard Law Review, 4(5), 193–220. https://groups.csail.mit.edu/mac/classes/6.805/articles/privacy/Privacy_brand_warr2.html
23. Westin, A. F. (1968). Privacy and freedom. Washington and Lee Law Review, 25(1), 166–182. https://scholarlycommons.law.wlu.edu/wlulr/vol25/iss1/20
Copyright (c) 2026 Mariam Zarkua
This work is licensed under a Creative Commons Attribution 4.0 International License.
