Digital Trust PractitionersAssociation of Digital Trust Practitioners · TrustPractitioners.org
Join freeJoin

The laws, and what they mean in practice

Privacy, AI and cybersecurity laws that shape digital trust work, from the GDPR to every US state privacy law. Each entry says who it applies to, who enforces it and when, in plain words, with the sources. Free for everyone.

Regulatory Watch follows new rules, enforcement and court decisions as they happen.

All 75 European Union 12 United Kingdom 1 US federal 12 US states 40 Rest of world 10
Privacy AI Health Children Biometrics Cybersecurity Breach notification Data brokers Marketing Financial International transfers
In force Coming into force Challenged or stayed

US states 3

In force · Illinois

BIPA

Written notice and consent before collecting biometrics, a public retention schedule, and a private right of action that has produced some of the largest privacy settlements in the US.

Since 3 Oct 2008 · Guide in progress In force · Texas

CUBI

Notice and consent before capturing biometric identifiers, limits on sale and disclosure, and destruction within a set period. Enforced by the Attorney General, which has obtained large settlements.

Since 1 Sep 2009 In force · Washington

RCW 19.375

Notice and consent or an opt-out mechanism before enrolling biometric identifiers for a commercial purpose.

Since 23 Jul 2017

This library explains laws for practitioners. It is not legal advice, and laws change: check the sources on each page and take advice from counsel before acting.