Our first lesson provides links to data privacy regulations in the United States, Europe, and South Africa. It also provides a link to the United States Agency for International Development (USAID) internal policy for protecting data and identifiable information.

When looking through these regulations, which can seem overwhelming, focus on the following:

1. Actions and sections relevant for your evaluation.
2. Principles for good practice.
3. Consider the rights articulated in the regulation for your region.
4. Contemplate the process of gathering your data and how you will keep the data confidential.
5. Familiarize yourself and your team with the dangers of data confidentiality breaches and the consequences, and processes to protect data.

To access the relevant regional and USAID links, read below:

• USA: Foundations for Evidence-Based Policymaking Act (Evidence Act) (Enacted: January 2018)
• USAID: Data will adhere to Automated Directives System (ADS)-508 Privacy Program, which details USAID’s internal policies and procedures for protecting programmatic data, and specifically personally identifiable information (PII)
• Europe:  General Data Protection Regulation (GDPR) 
• OECD Development Assistance Committee (DAC)
• South Africa: Protection of Personal Information Act (POPI) (No. 4 of 2013 and promulgated on July 1, 2020)