Back to Frameworks

OECD Privacy Guidelines (2013)

International (OECD Member countries)
vRecommendation of the Council, C(80)58/FINAL as amended on 11 July 2013 by C(2013)79; OECD/LEGAL/0188 (print 2021)
3 domains
12 controls

The OECD's eight privacy principles and its accountability duties for data controllers as revised in 2013: collection limitation, data quality, purpose specification, use limitation, security safeguards, openness, individual participation, accountability, the privacy management programme, breach notice and accountability across borders. Duties on Member countries are not built.

Verified

OECD Privacy Guidelines (2013) is a compliance framework from International (OECD Member countries) with 3 domains and 12 controls. The largest domains are Part Two: Basic principles of national application – OECD Privacy Guidelines (2013) (8 controls), Part Three: Implementing accountability – OECD Privacy Guidelines (2013) (3 controls), Part Four: Basic principles of international application – OECD Privacy Guidelines (2013) (1 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard Blokdyk

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (3)

Part Four: Basic principles of international application – OECD Privacy Guidelines (2013)

1 controls
Controls in the Part Four: Basic principles of international application – OECD Privacy Guidelines (2013) domain of OECD Privacy Guidelines (2013) — 1 controls
CodeTitle
oecd-privacy-guidelines-2013::16Para 16 Accountability regardless of data location

Part Three: Implementing accountability – OECD Privacy Guidelines (2013)

3 controls
Controls in the Part Three: Implementing accountability – OECD Privacy Guidelines (2013) domain of OECD Privacy Guidelines (2013) — 3 controls
CodeTitle
oecd-privacy-guidelines-2013::15aPara 15(a) Privacy management programme
oecd-privacy-guidelines-2013::15bPara 15(b) Readiness to demonstrate the programme
oecd-privacy-guidelines-2013::15cPara 15(c) Notice of significant security breaches

Part Two: Basic principles of national application – OECD Privacy Guidelines (2013)

8 controls
Controls in the Part Two: Basic principles of national application – OECD Privacy Guidelines (2013) domain of OECD Privacy Guidelines (2013) — 8 controls
CodeTitle
oecd-privacy-guidelines-2013::10Para 10 Use Limitation Principle
oecd-privacy-guidelines-2013::11Para 11 Security Safeguards Principle
oecd-privacy-guidelines-2013::12Para 12 Openness Principle
oecd-privacy-guidelines-2013::13Para 13 Individual Participation Principle
oecd-privacy-guidelines-2013::14Para 14 Accountability Principle
oecd-privacy-guidelines-2013::7Para 7 Collection Limitation Principle
oecd-privacy-guidelines-2013::8Para 8 Data Quality Principle
oecd-privacy-guidelines-2013::9Para 9 Purpose Specification Principle

What is OECD Privacy Guidelines (2013) and who does it apply to?

OECD Privacy Guidelines (2013) is a compliance framework from International (OECD Member countries) with 3 domains and 12 controls. The OECD's eight privacy principles and its accountability duties for data controllers as revised in 2013: collection limitation, data quality, purpose specification, use limitation, security safeguards, openness, individual participation, accountability, the privacy management programme, breach notice and accountability across borders. Duties on Member countries are not built. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does OECD Privacy Guidelines (2013) actually require?

OECD Privacy Guidelines (2013) has 12 controls organised across 3 domains. The largest domains are Part Two: Basic principles of national application – OECD Privacy Guidelines (2013) (8 controls), Part Three: Implementing accountability – OECD Privacy Guidelines (2013) (3 controls), Part Four: Basic principles of international application – OECD Privacy Guidelines (2013) (1 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of OECD Privacy Guidelines (2013) do I already cover?

OECD Privacy Guidelines (2013) does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.

How do I implement OECD Privacy Guidelines (2013)?

Start your OECD Privacy Guidelines (2013) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about OECD Privacy Guidelines (2013) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 12 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 894 frameworks.

Get Started Free →

Free forever — no credit card required