From entry data protection legislation in glossary Human Computer Interaction the Basics
Many countries have data protection legislation which ensures that data held about individuals does not infringe privacy and is accurate and true.
Typically a company and/or public body that holds data may be required to declare data held about you, correct it if wrong and remove it when you want. Data may also be required to be stored within the jurisdiction and the holder of the data may need to register with a central body.
The legislation usually only applies to identifiable personal information, so allows free use of data that has been anonymised or aggregated. While this reduces direct privacy violation it does not protect personal data sovereignty as data collected about you may still be used in ways for which you do not approve.
Used in Chap. 9: page 118