International Laws & Regulations

General Data Protection Regulation

The GDPR is the world's most comprehensive data privacy regulation, providing individuals with robust rights over their personal data, including the Right to Erasure (Article 17).

UK Data Protection Act 2018 & UK GDPR

Post Brexit, public and private bodies in the UK are obligated to comply with two data protection laws: Data Protection Act (DPA) 2018 and UK GDPR.

Bundesdatenschutzgesetz — Germany's Federal Data Protection Law

Germany's Federal Data Protection Act incorporates guidelines set forth by EU-GDPR and adds data protection regulations specific to the country.

French Data Protection Act (Loi Informatique et Libertés)

The French Data Protection Act complements the EU-GDPR and ensures that the processing of personal data of French residents is done with consideration to privacy and rights of individuals.

Switzerland's Federal Act on Data Protection

The latest Federal Act on Data Protection (nFADP) enforced in Sep 2023 aims to protect its citizens' privacy when their data is processed.

California Consumer Privacy Act / California Privacy Rights Act

The CCPA is a ground-breaking data privacy regulation providing new data privacy rights to California residents, enhanced by CPRA in 2023.

Health Insurance Portability and Accountability Act

HIPAA Security Rule mandates safeguards to protect the confidentiality, integrity, and availability of electronic protected health information (ePHI).

Gramm-Leach-Bliley Act

The US federal law regulates the handling of nonpublic personal information by financial institutions.

Sarbanes-Oxley Act

SOX is a federal law that regulates corporate governance and accountability across various aspects of corporate business practices and securities markets.

US Privacy Act of 1974

Regulates how federal agencies collect, maintain, use, and disseminate Personally Identifiable Information (PII) about individuals.

New York Privacy Act 2021

The proposed New York Privacy Act focuses on the protection of consumer privacy by obligating companies to obtain consumers' consent before processing their personal data.

Texas Data Privacy and Security Act

The Texas Data Privacy and Security Act (TDPSA) is one of the broadest comprehensive state privacy laws in the United States, notable for applying to businesses of nearly any size.

Virginia Consumer Data Protection Act

The Virginia Consumer Data Protection Act (VCDPA) was the second comprehensive consumer privacy law in the United States, giving Virginia residents meaningful rights over their personal data.

Washington: My Health My Data Act

Washington's My Health My Data Act (MHMDA) is the first law in the United States specifically designed to protect consumer health data that falls outside the scope of HIPAA.

Personal Information Protection & Electronic Documents Act

PIPEDA is a Canadian law that governs the collection, use, and disclosure of PII in commercial activities.

India's Digital Personal Data Protection Act 2023

India adopts the Digital Personal Data Protection Act, 2023 — a landmark privacy law for the world's largest democracy.

Japan's Act on Protection of Personal Information

Before the EU GDPR became a known international privacy law, Japan had passed a law to protect the personal information of Japanese Citizens.

China's Personal Information Protection Law

China PIPL protects Chinese residents' personal information inside the nation, regardless of where it is processed.

Philippines Data Privacy Act

Protects the fundamental human right of privacy of Filipinos, ensures the free flow of information, and promotes responsible data handling.

Australia's Privacy Act 1988

Outlines 13 Australian Privacy Principles (APPs) for government agencies and certain private sector organizations to protect individuals' personal information.

New Zealand Privacy Act 2020

Governs the protection of the privacy of individuals whose personal information is held and accessed by agencies in the public and private sectors.

Saudi Arabia's Personal Data Protection Law

Personal Data Protection Law (PDPL) is Saudi Arabia's new comprehensive Data Protection Law.

Protection of Personal Information Act

POPIA protects personal data and prevents sensitive information from getting compromised for businesses handling personal information in South Africa.

Brazil's General Data Protection Law (Lei Geral de Proteção de Dados)

Brazil enacted its first comprehensive data protection law in 2020 — LGPD ensures responsible handling of personal data.

Mexico's Federal Law on Personal Data Protection

Enacted on July 6, 2010, LFPDPPP regulates how private entities in Mexico process personal data.

Argentina Personal Data Protection Act

Argentina's Personal Data Protection Law — Ley 25.326 — was one of the earliest comprehensive data protection statutes in Latin America and remains the country's principal privacy framework today.

Peru Personal Data Protection Law

Peru's Personal Data Protection Law — Ley de Protección de Datos Personales, Ley No. 29733 — is the country's foundational data privacy statute, governing how public and private entities collect, process, and store personal data.