Which of the following adopted a law on data protection and privacy for its citizens known as 'General Data Protection Regulation' in April 2016 and started implementation of it from 25th May, 2018?

The correct answer is C, The European Union. The General Data Protection Regulation (GDPR) is the European Union's data protection law, adopted in April 2016 and applied from 25 May 2018. It replaced the EU's 1995 Data Protection Directive and gives people rights over their personal data, including the right to access it, correct it, have it erased (the 'right to be forgotten') and move it to another service. Organisations must have a lawful basis, such as consent, to process data, must report serious breaches within 72 hours, and can be fined up to 20 million euros or 4 per cent of global annual turnover. It applies to any company anywhere that handles the data of people in the EU, and it shaped later laws, including India's Digital Personal Data Protection Act, 2023. Option A is wrong because Australia's main law is its Privacy Act, 1988. Option B is wrong because Canada uses PIPEDA. Option D is wrong because the United States has no single national data protection law of this kind. Exam tip: GDPR — European Union, adopted April 2016, in force 25 May 2018; India's counterpart is the DPDP Act, 2023.