Data collection and protection policies

Under the UPU Acts, member countries are required to undertake a number of activities associated with essential or mandatory data exchanges, notably in relation to the provision of basic, supplementary and optional postal services, customs control, postal security and processing of inquiries. The data exchanged in the course of such activities increasingly includes personal data, such as the names and physical addresses of senders and recipients.

The increasing demand for the collection, processing and exchange of personal data to meet evolving market expectations and postal stakeholder requirements underline the need for UPU member countries to continuously monitor the changing data environment and to identify the appropriate policy and regulatory framework for meeting different requirements.

In this context, the UPU International Bureau (IB) conducted a survey on the regulatory frameworks of UPU member countries and the current practices of designated operators (DOs) concerning data collection and protection. Member countries were invited to provide the IB with all relevant information by completing the survey below.

The UPU members’ country files and the consolidated database were created to provide an overview of the current regulatory landscape on data protection and privacy applicable to specific UPU member countries. This database outlines the data protection laws and regulations each country is subject to, the fundamental principles underpinning these laws, and the rights afforded to individuals regarding their personal data.