GDPR's key principles, including its definition of personal data, the idea of purpose limitation, implementation of security measures, all those can also be found in legislation from Canada, Brazil, India. There are, of course, nuances from country to country, but GDPR really started it all. Its impact can't really be overstated. Bill Fisher:.