[Reference: https://www.coe.int/en/web/data-protection/convention108/background, Convention 108, also known as the “Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data” was adopted by the Council of Europe in 1981. It was the first legally binding international instrument on data protection and required signatories to take steps in their domestic legislation to apply the principles it lays down in order to ensure respect in their territory for the fundamental human rights of all individuals with regard to processing of personal data1. The Convention covers both the public and private sectors, and applies to any type of data processing, whether automated or not. The Convention also provides for the establishment of independent supervisory authorities and the facilitation of transborder data flows2., The other options are incorrect because:, B. The General Data Protection Regulation (GDPR) is a regulation of the European Union that came into force in 2018. It is not the first legally binding international instrument on data protection, but rather a successor of the EU Directive 95/46/EC, which was adopted in 1995 and implemented by the EU member states in their national laws3., C. The Universal Declaration of Human Rights (UDHR) is a resolution of the United Nations General Assembly that was adopted in 1948. It is not a legally binding international instrument, but rather a declaration of common principles and values that guide the development of human rights law. The UDHR does not explicitly mention data protection, but rather recognizes the right to privacy as a fundamental human right in Article 124., D. The EU Directive on Privacy and Electronic Communications (e-Privacy Directive) is a directive of the European Union that was adopted in 2002 and amended in 2009. It is not the first legally binding international instrument on data protection, but rather a specific instrument that complements the EU Directive 95/46/EC and the GDPR by providing additional rules for the protection of personal data in the context of electronic communications services5., References: 5 Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) | EUR-Lex53 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) | EUR-Lex34 Universal Declaration of Human Rights | United Nations42 Convention 108 and Protocols - Data Protection - The Council of Europe21 What is Convention 108? - Privacy Proficient1., ]