SCF Free Content

Data Privacy Management Principles

A comprehensive, unified set of privacy management principles mapped to over 30 leading privacy frameworks — providing a common language for cybersecurity and data privacy programs worldwide.

Mapped Frameworks

Privacy Principles

Organized Domains

Go To The SCF Download Page Explore Additional SCF Content

Overview

What Are the DPMP?

In support of the Cybersecurity & Data Privacy by Design (C|P) initiative, a volunteer effort created the SCF Data Privacy Management Principles (DPMP). When combined with the broader C|P initiative, these privacy management principles form an excellent foundation for building and maintaining secure systems, applications, and services that address cybersecurity and privacy considerations by default and by design.

Many cybersecurity and even privacy professionals struggle to identify what best practice looks like when selecting a set of privacy principles for an organization to align to. The DPMP was created by reviewing over a dozen of the most common privacy frameworks and establishing a unified set of simplified, yet comprehensive, privacy management principles.

Mapped to the SCF

Every principle is directly mapped to SCF controls, so organizations can leverage a single framework for both cybersecurity and privacy compliance.

Common Language

Eliminates the “apples to oranges” comparison between disparate privacy frameworks by providing a unified set of principles that simplify multi-requirement compliance.

Included in the SCF Download

The DPMP is available as a tab within the SCF download — all principles are mapped to the SCF for both cybersecurity and privacy needs.

Key Benefits

Why Use the DPMP?

🔗

Direct SCF Control Mapping

Every privacy principle is mapped directly to SCF controls, enabling organizations to leverage a single framework for both cybersecurity and data privacy compliance programs.

🌐

Common Language Across 31 Frameworks

Eliminates the “apples to oranges” comparison between disparate privacy frameworks by creating a unified, simplified set of privacy management principles.

🏗️

Privacy by Design Foundation

Combined with the Cybersecurity & Data Privacy by Design (C|P) initiative, the DPMP provides a strong foundation for building systems that address privacy by default.

📋

Framework Origin Tracking

Each principle shows its direct mapping to the leading privacy frameworks, so you can trace the origin and understand the regulatory basis of every included principle.

Framework Coverage

31 Mapped Privacy Frameworks

The DPMP identified the leading privacy frameworks globally and created a unified set of simplified, yet comprehensive, privacy management principles mapped to each.

1 · AICPA TSC 2017:2022 (SOC 2) 2 · APEC Privacy Framework 2015 3 · GAPP — Generally Accepted Privacy Principles 4 · ISO 27701:2025 5 · ISO 29100:2024 6 · NIST Privacy Framework 1.0 7 · NIST 800-53 R5 8 · NIST CSF 2.0 9 · OECD Privacy Principles 10 · US Federal — Data Privacy Framework (DPF) 11 · US Federal — FIPPs

12 · US Federal — HIPAA Admin. Simplification 2013 13 · US State — Alaska PIPA 14 · US State — California CCPA / CPRA Jan 2026 15 · US State — Colorado Privacy Act 16 · US State — Illinois BIPA 17 · US State — Illinois IPA 18 · US State — Illinois PIPA 19 · US State — Nevada SB220 20 · US State — Oregon SB 619 21 · US State — Tennessee Info Protection Act

22 · US State — Texas BC521 23 · US State — Virginia CDPA 2025 24 · US State — Vermont Act 171 of 2018 25 · EMEA — EU GDPR 26 · EMEA — Saudi Arabia PDPL 27 · APAC — Australia Privacy Act 28 · APAC — Australian Privacy Principles 29 · APAC — India DPDPA 2023 30 · APAC — New Zealand Privacy Act 2020 31 · Americas — Canada PIPEDA

Structure

11 Privacy Principles — 75 Sub-Principles

The seventy-five principles of the SCF Data Privacy Management Principles are organized into eleven principles covering the full spectrum of privacy management.

Privacy by Design

Data Subject Participation

Limited Collection & Use

Transparency

Data Lifecycle Mgmt

Data Subject Rights

Security by Design

Incident Response

Risk Management

Third-Party Mgmt

Business Environment

Get Started

Download the SCF Today

The DPMP is included as a tab within the free SCF download. No registration required.

Go To The SCF Download Page Explore Additional SCF Content

Licensed under Creative Commons. Volunteer-driven by the SCF Council. No registration required.