The laws, and what they mean in practice
Privacy, AI and cybersecurity laws that shape digital trust work, from the GDPR to every US state privacy law. Each entry says who it applies to, who enforces it and when, in plain words, with the sources. Free for everyone.
Regulatory Watch follows new rules, enforcement and court decisions as they happen.
US states 5
OCDPA
Enacted in 2026 and not yet in force. Largely Virginia-style, with its own thresholds and cure period.
From 1 Jan 2027 Enacted, not yet in force · LouisianaLDPA
Enacted in 2026 and not yet in force. Largely Virginia-style, with its own thresholds and cure period.
From 1 Jan 2027 Enacted, not yet in force · AlabamaAPDPA
Enacted in 2026 and not yet in force. Largely Virginia-style, with its own thresholds and cure period.
From 1 May 2027 Enacted, not yet in force · VermontVDPOSA
Enacted in 2026 and not yet in force. Largely Virginia-style, with its own thresholds and cure period.
From 1 Jan 2028 Enacted, not yet in force · New YorkSAFE for Kids Act
Limits addictive algorithmic feeds and overnight notifications for minors without parental consent.
See detailsRest of world 1
This library explains laws for practitioners. It is not legal advice, and laws change: check the sources on each page and take advice from counsel before acting.