Commonwealth of Nations. Comprehensive data protection. Model law

Commonwealth Model LawCommonwealth Model Provisions on Data Protection (2022), replacing the Model Bill on the Protection of Personal Information (2002) and Model Privacy Bill

In force
Partly verifiedMedium confidence. The text_url is the announcement page; I did not find a direct link to the model law text.

§1Summary

Synopsis

A non-binding template law that Commonwealth member states can adapt when drafting or amending data protection legislation. It includes optional provisions on consent, use limitation, breach investigation, compliance and cross-border transfers, and aims to harmonise rules across the 56 Commonwealth countries.

Key themes
  • model legislation
  • consent
  • breach handling
  • cross-border transfers
  • harmonisation
Unique features

Offers optional drafting alternatives to fit common-law systems at different development stages; it is aligned with recent international instruments.

SaaS relevance

Background only; influences national laws in smaller Commonwealth jurisdictions.

§2Obligations

Breach notification
Model provisions on breach investigation
Cross-border transfers
Model grounds for cross-border transfer
Maximum penalty
None (model)

§3Dates

Key dates
  • Adopted
  • In force
  • 2002 Model Bill on the Protection of Personal Information and Model Privacy Bill; replaced by the Model Provisions on Data Protection adopted by Commonwealth Law Ministers in Mauritius in November 2022

§4Text and authority

Text
Authority
Commonwealth Secretariat (Rule of Law)

§5Where it applies

Members of the body

Membership-based — check ratification status. Membership of Commonwealth of Nations does not mean a state has signed or ratified this instrument.

§6Sources and verification

Sources consulted
Verification

Medium confidence.

Partly verifiedMedium confidence. The text_url is the announcement page; I did not find a direct link to the model law text.