Jurisdictions
One record per jurisdiction: the instrument in force, the supervisory authority, penalties, the official source and the last verification date. 168 regimes in force, 24 still at bill stage.
The 73 jurisdictions the authority engine decides on are re-verified every cycle. The rest are indicative coverage: sourced and useful, but no decision is staked on them.
Lire en français·Sources verified between 2025-01-31 and 2026-07-12
North America (26)
- ABAlbertaPIPA Alberta
- BCBritish ColumbiaPIPA BC
- CACaliforniaCCPA/CPRA
- Canada (Federal)PIPEDA
- COColoradoCPA
- CTConnecticutCTDPA
- DEDelawareDPDPA
- ILIllinoisBIPA
- INIndianaINCDPA
- IAIowaICDPA
- KYKentuckyKCDPA
- MDMarylandMODPA
- MexicoLFPDPPP
- MNMinnesotaMCDPA (Minnesota)
- MTMontanaMCDPA
- NENebraskaNDPA
- NHNew HampshireNHPA
- NJNew JerseyNJDPA
- OROregonOCPA
- QCQuebecLoi 25
- RIRhode IslandRIDTPPA
- TNTennesseeTIPA
- TXTexasTDPSA
- United States (Federal)Lois sectorielles
- UTUtahUCPA
- VAVirginiaVCDPA
Central America (12)
South America (10)
Europe (48)
- AlbaniaLaw 9887/2008
- AndorraLQPD
- AustriaRGPD + DSG
- BelarusLaw on Personal Data
- BelgiumRGPD + Loi 2018
- Bosnia and HerzegovinaZZLP
- BulgariaRGPD + LPDP
- CroatiaRGPD + ZIPOZOU
- CyprusRGPD + Law 125(I)/2018
- Czech RepublicRGPD + Act 110/2019
- DenmarkRGPD + Databeskyttelsesloven
- EstoniaRGPD + IKS
- European UnionRGPD
- FinlandRGPD + Tietosuojalaki
- FranceRGPD + LIL
- GermanyRGPD + BDSG
- GreeceRGPD + Law 4624/2019
- HungaryRGPD + Act CXII/2011
- IcelandRGPD (EEE)
- IrelandRGPD + DPA 2018
- ItalyRGPD + Codice Privacy
- KosovoLaw 06/L-082
- LatviaRGPD + PDPL
- LiechtensteinRGPD (EEE)
- LithuaniaRGPD + Law IX-1296
- LuxembourgRGPD + Law 2018
- MaltaRGPD + DPA
- MoldovaLaw 133/2011 (révisée 2024)
- MonacoLoi 1.565
- MontenegroZZLP
- NetherlandsRGPD + UAVG
- North MacedoniaLZLP
- NorwayRGPD (EEE)
- PolandRGPD + UODO
- PortugalRGPD + Lei 58/2019
- RomaniaRGPD + Law 190/2018
- RussiaFZ-152
- San MarinoLaw 171/2018
- SerbiaZZPL
- SlovakiaRGPD + Act 18/2018
- SloveniaRGPD + ZVOP-2
- SpainRGPD + LOPDGDD
- SwedenRGPD + DPA
- SwitzerlandnLPD
- TurkeyKVKK
- UkraineLaw 2297-VI
- United KingdomUK GDPR + DPA 2018 + DUAA 2025
- Vatican CityLoi 2024
Asia-Pacific (25)
- ArmeniaLaw on Personal Data
- AustraliaPrivacy Act 1988 (amendé 2024)
- AzerbaijanLaw on Personal Data
- CambodiaE-Commerce Law 2019
- ChinaPIPL
- GeorgiaLaw on Personal Data
- Hong KongPDPO
- IndiaDPDP Act 2023 + Rules 2025
- IndonesiaUU PDP
- JapanAPPI
- KazakhstanLaw on Personal Data
- LaosLaw on Electronic Data Protection
- MacauLaw 8/2005
- MalaysiaPDPA 2010 (amendé 2024)
- MongoliaLaw on Personal Secrecy
- NepalPrivacy Act 2018
- New ZealandPrivacy Act 2020
- PhilippinesDPA 2012
- SingaporePDPA
- South KoreaPIPA
- Sri LankaPDPA 2022
- TaiwanPDPA
- ThailandPDPA
- UzbekistanLaw on Personal Data
- VietnamPDPL 2025
Middle East (11)
Africa (35)
- AlgeriaLaw 18-07
- AngolaLaw 22/11
- BeninLoi 2009-09
- BotswanaDPA 2018 (amendé 2024)
- Burkina FasoLoi 010-2004
- CameroonLoi 2024
- Cape VerdeLaw 133/V/2001
- Congo (Brazzaville)Loi 29-2019
- DR CongoCode du numérique 2023
- EgyptLaw 151/2020
- EswatiniDPA 2022
- EthiopiaProclamation 1321/2024
- GabonLoi 001/2011
- GhanaDPA 2012
- GuineaLoi L/2016/037
- Ivory CoastLoi 2013-450
- KenyaDPA 2019
- LesothoDPA 2011
- MadagascarLoi 2014-038
- MalawiDPA 2024
- MaliLoi 2013-015
- MauritaniaLoi 2017-020
- MauritiusDPA 2017
- MoroccoLoi 09-08
- NigeriaNDPA 2023
- RwandaLaw 058/2021
- SenegalLoi 2008-12
- SeychellesDPA 2023
- South AfricaPOPIA
- TanzaniaPDPA 2022
- TogoLoi 2019-014
- TunisiaLoi 2004-63
- UgandaDPA 2019
- ZambiaDPA 2021
- ZimbabweDPPA 2021
Oceania (1)
Regimes still forming
These jurisdictions have a bill, not an instrument in force. They get no record page: a regime that does not exist yet does not fill a page, and knowing one is coming is still useful signal.
- Bangladesh
- Belize
- Brunei
- Burundi
- Chad
- Iran
- Iraq
- Jordan
- Kuwait
- Libya
- Mozambique
- Myanmar
- Namibia
- Niger
- Pakistan
- Palestine
- Papua New Guinea
- Samoa
- Sudan
- Suriname
- Tonga
- Vanuatu
- Venezuela
- Yemen
These records state the sources, they are not legal advice. Each carries its verification date and a link to the official instrument.