119 articles · page 1 of 2
Argentina's Personal Data Protection Law (Ley 25.326) governs data privacy with EU adequacy status confirmed January 2024. Covers AAIP enforcement, habeas data, Ley Olimpia, pending GDPR reform, and 2024-2026 developments.
Australia's Privacy Act 1988: the 13 APPs, OAIC penalties, the statutory privacy tort (in force June 2025), the NDB scheme and the 2024 to 2026 reforms. Verified September 2026.
Austria enforces data privacy through the GDPR and DSG (Datenschutzgesetz). Learn about DSB enforcement, constitutional rights, AI Act rules, penalties, and breach rules.
Bahrain PDPL (Law No. 30 of 2018): the ten 2022 Ministry of Justice Orders, the 72-hour breach rule in Order 43, the transfer list that omits Qatar, and Article 58 penalties.
Bangladesh's Personal Data Protection Act 2026 (Act 63 of 2026) replaced the 2025 ordinance on 10 April 2026. Consent, data subject rights, cross-border transfer and administrative fines.
Belgium enforces data privacy through GDPR, the Law of 30 July 2018, and Article 22 of the Constitution. APD/GBA fines, AI Act (BIPT), breach rules, and 2025-2026 decisions.
Guide to Bermuda Personal Information Protection Act covering consent, data subject rights, Privacy Commissioner enforcement, and cross-border rules.
Complete guide to Brazil's LGPD data privacy law. Covers the 10 legal bases, ANPD enforcement, penalties up to BRL 50M, EU adequacy decision, and compliance requirements.
Bulgaria enforces GDPR through the ZZLD (amended Aug 2024), supervised by the CPDP. Covers EGN protection, NRA breach, EU AI Act, NIS2, Schengen SIS, and compliance steps.
Complete guide to Canada data privacy laws including PIPEDA, Quebec Law 25, Alberta and BC PIPA. Covers penalties up to $25M, breach notification rules, and 2026 reform status.
Complete guide to Chile data privacy laws: Ley 21.719 (2024) rewrites and renames Ley 19.628, creates the Agencia de Protección de Datos Personales, GDPR-aligned rights, penalties up to 20,000 UTM, and enforcement from December 2026.
How China's PIPL cross-border transfer regime works: the three legal mechanisms, exact CAC Order 16 thresholds, and how to choose the right one.
China's PIPL, amended Cybersecurity Law (Jan 2026), and Data Security Law form a strict data protection regime. Consent requirements, cross-border transfer rules, penalties up to CNY 10 million, compliance steps.
Colombia protects personal data through constitutional habeas data rights and Ley 1581 of 2012. Covers SIC enforcement, RNBD, cross-border transfers, the Worldcoin shutdown, and the archived 2025 reform bills.
Country-by-country guide to cookie consent requirements: the EU ePrivacy + GDPR opt-in model, the UK DUAA 2025 changes, the US state-law patchwork, and 30+ other jurisdictions including Brazil, China, India, and Australia.
Costa Rica data privacy law explained: Ley 8968, PRODHAB authority, constitutional basis, consent, data subject rights, database registration, cross-border transfers, penalties, and 2026 reform status.
Croatia enforces GDPR through the Act on Implementation (NN 42/2018) and AZOP, which imposed EUR 6.7M in fines during 2025. Learn constitutional basis, OIB protections, cross-border transfer rules, EU AI Act overlay, and compliance steps.
Cyprus data privacy law explained: GDPR + Law 125(I)/2018, OCPDP enforcement, constitutional basis, DPO rules, cross-border transfers, EU AI Act, and 2024-2026 fines.
Czech Republic data privacy laws: GDPR plus Act No. 110/2019 Coll., the UOOU, the Avast fine quashed and remitted in 2025, public body fine exemptions, EU AI Act status, and 2026 developments.
Verified data breach notification deadlines for 45+ countries: regulator vs. individual notice, split out, with the errors most trackers get wrong.
Country-by-country guide to data localization and residency requirements: China CSL 2026 update, Russia, India DPDP Rules, Vietnam, Indonesia, Nigeria NDPA 2023, Saudi Arabia, Kazakhstan, EU, and more.
Complete guide to DPO requirements worldwide. Covers GDPR Articles 37-39 triggers, EDPB guidelines, and DPO-equivalent rules in Brazil, China, Singapore, Malaysia, India, South Korea, UAE, and more.
Data retention law has two meanings: the GDPR storage-limitation principle (keep no longer than necessary) and mandatory telecom metadata laws. Compare rules across 14 countries including CJEU case law through 2024.
Denmark GDPR guide: Datatilsynet cannot fine directly, so penalties go through the courts or section 42 fine notices. Age of consent 15, CPR rules, 2025 to 2026 cases.
GDPR applies to US companies that target or monitor people in the EU under Article 3(2). Learn the scope test, EU representative rule, and how to comply.
Live tracker of India's DPDP Act commencement: what's in force now, what's coming in 2026-2027, the unstaffed Data Protection Board, and CERT-In overlap.
Ecuador's LOPDP: two-tier fines capped at 1% of turnover, the SPDP's four football sanctions, DPO triggers, breach notice to SPDP and ARCOTEL, transfers.
Egypt's Personal Data Protection Law No. 151 of 2020 and Ministerial Decree 816/2025 (Executive Regulations): the PDPC licensing regime and fees, six data subject rights, cross-border transfer consent, breach notice in three working days, criminal penalties, and the 1 November 2026 compliance deadline.
Estonia enforces data privacy through the EU GDPR and the Personal Data Protection Act (2019). Learn about AKI enforcement, the EUR 3 million Apotheka fine, constitutional rights, e-Estonia context, and business compliance obligations.
Complete guide to EU adequacy decisions under GDPR Article 45: all 17 adequate countries, the UK December 2025 renewal, the Brazil 2026 decision, the January 2024 review of 11 pre-GDPR decisions, and DPF litigation risks.
EU AI Act bans social scoring, facial scraping, and workplace emotion recognition since Feb 2025. Layers onto GDPR, demands FRIAs, and carries EUR 35M fines.
Complete guide to the EU ePrivacy Directive cookie law: consent requirements, the strictly-necessary exemption, how it interacts with GDPR, the withdrawn ePrivacy Regulation, and the November 2025 Digital Omnibus cookie proposals.
Complete guide to EU data privacy law: the GDPR framework across 27 member states, the EU AI Act phased timeline, the ePrivacy Directive, the withdrawn ePrivacy Regulation, the 2025 GDPR Procedural Regulation, the November 2025 Digital Omnibus proposal, and the wider digital rulebook.
Complete guide to the EU-US Data Privacy Framework: history, self-certification, the Data Protection Review Court, the Latombe case (dismissed September 2025, appealed to CJEU as C-703/25 P), PCLOB disruption, and what happens if the DPF falls.
Finland data privacy guide: GDPR, Data Protection Act 1050/2018, workplace privacy, Act 1377/2025 AI supervision, DPO enforcement, 2024-2026 fines, and compliance tips.
France enforces data privacy through GDPR and the Loi Informatique et Libertés. Learn about CNIL fines, cookie rules, breach notification, AI Act, and penalties.
Step-by-step GDPR compliance checklist: data mapping, lawful bases, privacy notices, DPIAs, breach procedures, DPO, AI Act obligations, and the proposed Digital Omnibus and Omnibus IV changes.
What valid consent means under GDPR: the four elements of Article 4(11), Article 7 conditions, explicit consent for special-category data, children consent, cookie rules, consent-or-pay models, and 2025 enforcement.
Complete guide to GDPR Articles 33 and 34 breach notification: the 72-hour rule, what counts as a personal data breach, processor duties, EDPB Guidelines 9/2022, enforcement cases, and how the clock starts.
GDPR Article 28 requires a written DPA with every processor. Learn the 8 mandatory clauses, sub-processor rules, and consequences of non-compliance.
The eight GDPR data subject rights under Chapter III: access, rectification, erasure, restriction, portability, objection, automated-decision rights, and the right to be informed. Timelines, exemptions, and 2026 enforcement.
GDPR Article 35 requires a DPIA before high-risk processing. Learn when it is mandatory, what it must contain, and when to consult your supervisory authority.
GDPR Articles 37-39 explained: the 3 mandatory DPO triggers, tasks, independence rules, conflict-of-interest bar, and fines for non-compliance.
GDPR fines tracked and verified current: the record EUR 1.2B and EUR 530M penalties, 2026's largest fines so far, the two-tier Article 83 structure, and how DPAs calculate amounts.
Practical GDPR compliance guide for small businesses: what applies, the Article 30(5) records derogation, when you need a DPO, the pending Omnibus IV reform of the records rule, sector examples, and low-cost steps.
GDPR Chapter V bars EU data transfers abroad without a valid mechanism. Learn adequacy, SCCs, BCRs, derogations, and Schrems II in plain English.
GDPR Article 17 gives you the right to demand erasure of personal data in 6 grounds. Learn the exceptions, Google Spain ruling, and how to make a request.
Learn how to respond to a GDPR DSAR under Article 15: the one-month deadline, what data to provide, fees, refusals, and a step-by-step response workflow.
Side-by-side comparison of GDPR and CCPA/CPRA: scope, consent models, consumer rights, sensitive data, penalties, CPPA enforcement, and the 2025 ADMT/cybersecurity regulations.
Side-by-side comparison of the EU GDPR and Brazil's LGPD: legal bases (6 vs 10), penalties, data subject rights, the ANPD vs EU DPAs, breach notification, and the January 2026 mutual adequacy decision.
Side-by-side comparison of GDPR and China's PIPL: scope, legal bases, individual rights, penalties, cross-border transfers, and 2025-2026 regulatory updates.
The EU GDPR and UK GDPR started identical after Brexit. The Data (Use and Access) Act 2025—in force February 2026—has introduced recognised legitimate interests, new ADM rules, SAR stop-the-clock, and cookie exemptions. The EU renewed UK adequacy through December 2031.
Germany enforces the EU GDPR through the BDSG, 17 supervisory authorities, and a constitutional right to informational self-determination. Full guide to compliance, DPO rules, employee data, AI Act overlay, and enforcement.
Complete guide to Ghana data privacy laws: the Data Protection Act 2012 (Act 843), the Data Protection Commission, mandatory registration, data subject rights, section 31 breach notification, penalties, and the draft Data Protection Bill 2025 that would modernize the framework.
Greece data privacy laws explained: GDPR implementation via Law 4624/2019, Hellenic Data Protection Authority enforcement, Clearview AI fine, Predatorgate, EU AI Act, cookies, and compliance tips.
Complete guide to Hong Kong's Personal Data (Privacy) Ordinance (PDPO, Cap. 486): six Data Protection Principles, 2021 anti-doxxing regime, breach handling, cross-border transfer rules, AI guidance, and 2026 reform proposals.
Hungary data privacy law explained: GDPR + Info Act CXII of 2011, NAIH enforcement, AI Act overlay, cross-border transfers, DPO rules, penalties up to EUR 20 million.
Iceland applies the GDPR through the EEA Agreement and Act No. 90/2018. Learn how Persónuvernd enforces data protection, what fines apply, and how businesses must comply.
India's Digital Personal Data Protection Act 2023 and the DPDP Rules notified November 2025 form the country's first comprehensive data protection regime. This guide covers consent, Data Principal rights, the Data Protection Board, penalties up to INR 250 crore, cross-border transfers, and the phased compliance timeline to May 2027.
India's DPDP Act is mostly not yet operative. Full commencement timeline, Consent Managers, rights gaps, and CERT-In vs DPDP breach rules vs GDPR.