The laws, and what they mean in practice
Privacy, AI and cybersecurity laws that shape digital trust work, from the GDPR to every US state privacy law. Each entry says who it applies to, who enforces it and when, in plain words, with the sources. Free for everyone.
Regulatory Watch follows new rules, enforcement and court decisions as they happen.
Rest of world 10
PIPEDA
Canada's federal private-sector privacy law, built on ten fair information principles.
Since 1 Jan 2001 In force · QCLaw 25
The strictest privacy law in Canada, with privacy impact assessments for transfers and GDPR-level fines.
Since 22 Sep 2022 In forceLGPD
Brazil's GDPR-inspired law, with ten legal bases and a national authority.
Since 18 Sep 2020 In forcePIPL
China's comprehensive privacy law, with strict rules on consent and cross-border transfers.
Since 1 Nov 2021 In forceAPPI
Japan's privacy law, recognized by the EU as adequate.
Since 1 Apr 2005 In forcePDPA (SG)
Consent-based privacy law with mandatory breach notification since 2021.
Since 2 Jul 2014 In forcePOPIA
South Africa's comprehensive privacy law, based on eight conditions for lawful processing.
Since 1 Jul 2021 In forcenFADP
Switzerland's revised law, closely aligned with the GDPR, with fines aimed at responsible individuals.
Since 1 Sep 2023 In forcePrivacy Act (AU)
Australia's privacy law, built on the thirteen Australian Privacy Principles, now in a period of reform.
Since 1 Jan 1989 Enacted, not yet in forceDPDP Act
India's comprehensive privacy law, consent-centered, with duties for significant data fiduciaries.
See detailsThis library explains laws for practitioners. It is not legal advice, and laws change: check the sources on each page and take advice from counsel before acting.