A/79/173 • International Standards on the Protection of Personal Data and Privacy: Joint Proposal for a Draft of International Standards on the Protection of Privacy with regard to the Processing of Personal Data (Madrid Resolution), 2009 • Recommendation of the OECD Council concerning Guidelines Governing the Protection of Privacy and Transborder Flows of Personal Data, 2013 • Regulation (European Union) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) • Standards for Personal Data Protection for Ibero-American States, 28 adopted in 2017 • Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (Convention 108+), Council of Europe, 2018 • Updated Principles on Privacy and Personal Data Protection, Organization of American States (OAS), 2021 29 • Resolution entitled “Achieving global data protection standards: Principles to ensure high levels of data protection and privacy worldwide”, GPA, 2023 30 37. The main results of the comparative analysis are set out below. First: as indicated in the table below, in its resolution 45/95 the General Assembly does not mention the following principles relating to the processing of personal data: legitimacy, transparency, demonstrated responsibility and confidentiality. __________________ 28 29 30 24-13146 Document adopted at the fifteenth Ibero-American Data Protection Meeting of the IberoAmerican Data Protection Network, held in Santiago on 22 June 2017. The Principles were adopted by the Inter-American Juridical Committee and approved by the General Assembly of the Organization of American States in 2021. See footnote 9. 13/23

Select target paragraph3