Controls how your personal information is used by organisations (including health), businesses or the government. Complements the European Union’s General Data Protection Regulation (GDPR)