South Africa Data Privacy Laws: The POPIA Guide (2026)
South Africa's POPIA vs the GDPR: correct commencement dates, the eight conditions, juristic person coverage, and real 2026 Information Regulator enforcement.
10 min read
Data Privacy Laws
468 articles · page 7 of 8
South Carolina Biometric Privacy Laws: Collection, Consent & Penalties (2026)
South Carolina has no standalone biometric privacy law. Learn about breach notification under SC Code 39-1-90, the Insurance Data Security Act, and pending legislation.
9 min read
South Carolina Data Breach Notification Laws: Reporting Rules & Timelines (2026)
South Carolina requires data breach notification without unreasonable delay under S.C. Code 39-1-90. Learn about the private right of action, $1,000 per-resident fines, and CRA reporting at 1,000+.
8 min read
South Carolina Data Privacy Laws: Breach Notification & Consumer Rights (2026)
South Carolina data privacy laws explained. Covers the breach notification statute (S.C. Code 39-1-90), Insurance Data Security Act, FIFITPA, and federal protections.
21 min read
South Dakota Biometric Privacy Laws: Collection, Consent & Penalties (2026)
South Dakota has no dedicated biometric privacy law. Learn how the breach notification statute SDCL 22-40-19 protects biometric data and what gaps remain.
7 min read
South Dakota Data Breach Notification Laws: Reporting Rules & Timelines (2026)
South Dakota requires data breach notification within 60 days. Learn about the AG reporting threshold of 250 residents, $10,000/day penalties, and protected information coverage.
7 min read
South Dakota Data Privacy Laws: Breach Notification & Consumer Rights (2026)
South Dakota requires 60-day breach notification under SDCL 22-40-19. No comprehensive privacy law yet. Learn about penalties, consumer rights, and 2026 legislative updates.
11 min read
South Dakota's Genetic Data Privacy Act (SB 49) Takes Effect July 1, 2026
South Dakota's Genetic Data Privacy Act, SB 49, took effect July 1, 2026, requiring consent and privacy notices from DTC genetic testing companies.
7 min read
South Korea Data Privacy Laws: PIPA Compliance Guide (2026)
South Korea's PIPA is among the world's strictest data privacy laws. Learn about the March 2026 amendment, 10% turnover penalties, CEO accountability, PIPC enforcement, data subject rights, and cross-border transfer rules.
19 min read
South Korea PIPA vs GDPR: Criminal Penalties, RRN Rules, and Cross-Border Transfer Powers Compared (2026)
Compare South Korea's PIPA and the EU GDPR on criminal penalties, RRN rules, PIPC transfer-suspension power, and the 2026 penalty ceiling change.
19 min read
Spain Data Privacy Laws: GDPR, LOPDGDD & AEPD Enforcement Guide (2026)
Spain enforces data privacy through the GDPR, the LOPDGDD (Organic Law 3/2018), and the highly active AEPD. Covers digital rights, AESIA/AI Act, biometric enforcement, penalties up to 20M euros, and 2025-2026 developments.
19 min read
Sprouts FACTA Settlement: Claim Window Closed, Nov 19 Hearing
The $5M Sprouts FACTA receipt claim window closed August 5, 2026. A final approval hearing is set for November 19, 2026; the court and Atticus post status updates.
8 min read
Sri Lanka Data Privacy Laws: PDPA No. 9 of 2022 Complete Guide (2026)
Complete guide to Sri Lanka data privacy laws. Covers the PDPA No. 9 of 2022, Amendment Act No. 22 of 2025, the Data Protection Authority, enforcement timeline, data subject rights, penalties, and cross-border transfers.
20 min read
Standard Contractual Clauses (SCCs) Explained (2026)
Complete guide to EU Standard Contractual Clauses: the 2021 modular SCCs, Transfer Impact Assessments, supplementary measures, the pending Article 3(2) SCCs, UK IDTA, and 2024-2026 enforcement.
17 min read
STIIIZY Data Breach Settlement: Claims Due Sept. 10
The $2.95M STIIIZY data breach settlement is open. Claims are due September 10, 2026. See who is covered and what a realistic payout looks like.
8 min read
Sun Pharma/Taro $200M Generic Drug Settlement
The Sun Pharma/Taro $200M generic-drug price-fixing settlement is approved and open; the claim deadline is November 9, 2026.
8 min read
SunTrust Overdraft Settlement: $240M, Claims Open
SunTrust's $240M overdraft fee settlement won final court approval in May 2026. Georgia customers can file a claim through September 14, 2026.
9 min read
Supreme Court Overrules Humphrey's Executor, Lets the President Fire FTC Commissioners at Will
On June 29, 2026, the Supreme Court held 6 to 3 in Trump v. Slaughter that FTC commissioners can be removed at will, overruling Humphrey's Executor (1935) and unsettling agency independence.
9 min read
Sweden Data Privacy Laws: GDPR, the Swedish Data Protection Act, and IMY (2026)
Sweden enforces GDPR through the Data Protection Act (2018:218) and IMY. Covers constitutional exemptions, offentlighetsprincipen, enforcement cases, penalties, AI Act overlay, and compliance requirements.
22 min read
Switzerland Data Privacy Laws: Federal Act on Data Protection (nFADP) Compliance Guide
Complete guide to Switzerland's revised Federal Act on Data Protection (nFADP/revDSG), in force September 1, 2023. Covers FDPIC enforcement, CHF 250,000 individual criminal penalties, cross-border transfers, Swiss-US DPF, and 2025-2026 developments.
23 min read
T-Mobile Data Breach Settlement: Payment Status 2026
T-Mobile's $350M breach settlement mostly paid out by May 2025, but a second residual distribution from leftover funds is still pending in 2026.
9 min read
Taiwan Data Privacy Laws: PDPA in Force, PDPC Still Pending
Taiwan PDPA guide: the rules in force today, and why the November 2025 amendments and the Personal Data Protection Commission are still pending.
14 min read
Tanzania Data Privacy Laws: PDPA 2022 Guide (2026)
Tanzania's Personal Data Protection Act 2022 is actively enforced, with PDPC on-site inspections since August 2026. Guide to registration, DPO duties, statutory penalties, Zanzibar rules, and cross-border transfers.
21 min read
TDPSA Compliance Checklist for Businesses (2026)
Ten-step TDPSA compliance checklist: SBA applicability self-test, entity and data exemptions, sensitive data opt-in consent, mandatory verbatim sale notices, data protection assessments, processor contracts, universal opt-out, and Texas AG enforcement.
16 min read
TDPSA Consumer Rights: Your Texas Data Privacy Rights
Texas residents have 6 TDPSA rights: access, correct, delete, portability, opt-out, and appeal. Learn how to submit requests, use GPC, and file a TX AG complaint.
12 min read
Tennessee Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Tennessee biometric privacy law guide covering TIPA sensitive data consent rules, consumer rights, AG enforcement penalties, and the pending biometric data protection act.
10 min read
Tennessee Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Tennessee requires data breach notification within 45 days under Tenn. Code 47-18-2107. Learn about the private right of action, FIPS 140-2 encryption safe harbor, and CRA reporting at 1,000+.
7 min read
Tennessee Data Privacy Laws: TIPA Consumer Rights Guide (2026)
Tennessee Information Protection Act (TIPA) gives consumers opt-out rights for data sales and targeted ads. Learn about TIPA thresholds, penalties up to $7,500, the NIST defense, and breach notification rules.
17 min read
Teva QVAR Inhaler Antitrust Settlement: Approved, Not Yet Paid
The $35M Teva QVAR inhaler antitrust settlement won final approval on August 5, 2026. Claims closed July 31, 2026 and no payment date has been announced.
8 min read
Texas Attorney General Opens Data-Breach Investigation Into Carnival, Issues Civil Investigative Demand (2026)
Texas AG Paxton opened a data-breach investigation into Carnival and issued a Civil Investigative Demand on June 23, 2026. An investigation, not a finding.
8 min read
Texas Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Texas CUBI law requires consent before capturing fingerprints, face scans, or voiceprints. Penalties up to $25,000 per violation. The AG has secured over $2.7 billion in settlements.
10 min read
Texas Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Texas requires breach notification within 60 days to individuals and 30 days to the AG. Penalties reach $50,000 per violation under the DTPA.
10 min read
Texas Data Privacy Laws: TDPSA & Consumer Rights Guide (2026)
Learn about Texas data privacy laws including the TDPSA, biometric identifier protections, data breach notification rules, and your consumer rights under Texas law.
16 min read
Thailand Data Privacy Laws: PDPA Compliance Guide (2026)
Thailand's PDPA governs personal data collection, use, and transfer. Updated 2026 guide: PDPC enforcement record, the 2024 first fine and 2025 wave, the Emergency Decree on Technology Crimes, BCR framework, data subject rights, DPO requirements, and penalties.
18 min read
The 13 Australian Privacy Principles (APPs) Explained
The 13 Australian Privacy Principles in Schedule 1 of the Privacy Act 1988 (Cth): who they bind, the five Parts, and a table of every APP, per the OAIC.
8 min read
Third Circuit Affirms Dismissal of Tower Health Pixel Suit
The Third Circuit affirmed dismissal in Santoro v. Tower Health. Patients had Article III standing for Meta Pixel claims, but the appeal failed on other grounds.
13 min read
Thompson Coburn Data Breach Settlement: Claim Window Closed
The Thompson Coburn LLP breach settlement closed claims July 23, 2026 and is awaiting a ruling after its August 27, 2026 hearing. No payout date is set.
9 min read
Ticketmaster Data Breach Settlement: No Fund Yet (2026)
As of September 2026, there is no Ticketmaster data breach settlement, fund, or claim form. The MDL is in active motion practice with no class certified.
8 min read
Tinder Age-Based Pricing Settlement: Approved, Not Yet Paid
The $60.5M Tinder age-based pricing settlement won final approval June 4, 2026. The August 18, 2026 payment-election deadline has passed and no payout date is set.
8 min read
TIPA Compliance Checklist: Tennessee Privacy Law
TIPA compliance steps under Tenn. Code Ann. 47-18-3201 et seq.: NIST written privacy program (affirmative defense), $25M threshold, opt-in sensitive data.
7 min read
TIPA Consumer Rights: Tennessee Data Privacy Rights
Tennessee's TIPA (47-18-3203) gives access, correction, deletion, portability, and opt-out rights. Controllers must respond within 45 days; AG enforces.
7 min read
Toyota Airbag Control Unit Settlement: $78.5M, Open to 2028
The Toyota Airbag Control Unit settlement's $78.5M fund is open, with a claim deadline of December 11, 2028. See who may be eligible and how to file.
8 min read
Tunisia Data Privacy Laws: Organic Law 2004-63 and the 2025 Reform
Complete guide to Tunisia data protection law: Organic Law 2004-63, the INPDP authority, registration and authorization rules, Convention 108+, cross-border transfers, penalties, and the 2025 GDPR-alignment reform bill.
18 min read
Turkey Data Privacy Laws: KVKK, Law 7499 & 2024 Cross-Border Transfer Reform
Turkey's KVKK (Law No. 6698) governs personal data protection. Law No. 7499 (June 2024) overhauled cross-border transfers and special-category rules. Learn about SCCs, adequacy decisions, VERBIS, 2026 fines up to 17M TRY, and KVKK Board enforcement.
19 min read
UAE Data Privacy Laws: Federal PDPL, DIFC & ADGM Guide (2026)
Complete guide to UAE data privacy laws: federal PDPL (Decree-Law 45/2021), DIFC Data Protection Law 2020, ADGM Regulations 2021, penalties, cross-border transfers, and 2025-2026 developments.
22 min read
UAE PDPL vs. GDPR: Federal Law, DIFC, and ADGM Compared
The UAE has three data protection regimes, not one. Compare GDPR against the federal PDPL, DIFC law, and ADGM Regulations side by side.
16 min read
UCPA Compliance Checklist for Businesses (Utah 2026)
A step-by-step UCPA compliance checklist: applicability ($25M+), privacy notice, sensitive-data opt-out, processor contracts, 45-day requests, $7,500 penalties.
8 min read
UCPA Consumer Rights: Access, Delete & Opt Out (Utah)
Utah residents have 4 UCPA rights under Section 13-61-201: access, delete, portability, and opt out of sale and targeted ads. Controllers must respond in 45 days.
7 min read
UK Data Breach Reporting: The 72-Hour ICO Rule
How UK organisations report a personal data breach to the ICO within 72 hours under UK GDPR Article 33, notify individuals, and log every breach.
7 min read
UK Data Privacy Laws: UK GDPR, DPA 2018 & 2025 Reforms
Complete 2026 guide to UK data privacy laws: UK GDPR, Data Protection Act 2018, the Data Use and Access Act 2025 (DUAA) reforms, ICO enforcement, EU adequacy renewed to 2031, and PECR cookie changes.
20 min read
UK Right to Erasure (Right to Be Forgotten)
The UK right to erasure under UK GDPR Article 17: the grounds, the exceptions, the one-month deadline, search-engine delisting and ICO complaints.
6 min read
UK's Data (Use and Access) Act 2025 Rewrites UK GDPR Rules: What Changed and When
The Data (Use and Access) Act 2025 reshapes UK GDPR, the DPA 2018 and PECR. Royal Assent on 19 June 2025, with key privacy rules in force from 5 February 2026.
6 min read
Ukraine Data Privacy Laws: Personal Data Protection, Draft Law 8153, and the GDPR Reform (2026)
Complete guide to Ukraine's data privacy laws: the 2010 Law on Personal Data Protection, the Ombudsperson as supervisory authority, Draft Law 8153 and its GDPR-alignment status, EU accession obligations, cross-border transfer rules, martial-law context, and penalties.
16 min read
Union Bank MOVEit Settlement: Claims Closed, Awaiting Approval
The Union Bank and Trust MOVEit settlement closed claims July 21, 2026 and awaits a ruling after its August 6, 2026 hearing. See who was eligible and what is next.
8 min read
Uruguay Data Privacy Laws: Law 18.331, URCDP, and EU Adequacy (2026)
Complete guide to Uruguay data privacy laws: Law 18.331, Decree 414/009, DPO rules, 72-hour breach notification, EU adequacy reaffirmed 2024, Convention 108+, and URCDP enforcement.
19 min read
US Cookie Laws: State-by-State Guide (2026)
State-by-state guide to US cookie and online tracking laws covering California, Colorado, Connecticut, Virginia, and all states with cookie provisions.
11 min read
US Data Broker Registration Laws & the Delete Act
Four states (CA, TX, OR, VT) require data brokers to register as of 2026. California's Delete Act and DROP let consumers delete data from every broker at once.
13 min read
US State Privacy Laws Comparison Chart & Tracker (2026)
Side-by-side comparison and tracker of every US state comprehensive privacy law: rights, thresholds, enforcement, plus upcoming effective dates through 2028, verified current.
18 min read
Utah Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Utah's UCPA classifies biometric data as sensitive with opt-out rights. Learn about consumer rights, AG enforcement, and $7,500 per violation penalties.
7 min read
Utah Data Breach Notification Laws: Reporting Rules & Timelines (2026)
Utah requires data breach notification without unreasonable delay. Learn about the 2024 AG/Cyber Center reporting requirement at 500+, $2,500 per-consumer penalties, and investigation obligation.
7 min read