The laws, and what they mean in practice

Privacy, AI and cybersecurity laws that shape digital trust work, from the GDPR to every US state privacy law. Each entry says who it applies to, who enforces it and when, in plain words, with the sources. Free for everyone.

Regulatory Watch follows new rules, enforcement and court decisions as they happen.

All 75 European Union 12 United Kingdom 1 US federal 12 US states 40 Rest of world 10

Privacy AI Health Children Biometrics Cybersecurity Breach notification Data brokers Marketing Financial International transfers

In force Coming into force Challenged or stayed

US states 4

In force · California

Delete Act

Lets a California resident ask every registered data broker to delete their data with one request, which brokers must check and process on a fixed schedule.

Since 1 Jan 2024 In force · Vermont

Vermont data broker law

The first state data broker registry, with security program and disclosure requirements.

Since 1 Jan 2019 In force · Texas

Texas data broker law

Registration, website notices and a security program for data brokers.

Since 1 Sep 2023 In force · Oregon

Oregon data broker registry

Annual registration for data brokers.

Since 1 Jan 2024

This library explains laws for practitioners. It is not legal advice, and laws change: check the sources on each page and take advice from counsel before acting.