Contents Knowledge map

Before you read

This site is NOT legal advice, and using it creates no lawyer and client relationship. It is a set of findings, checked against published sources and dated, that may help software developers and other individuals. For a decision that matters, ask a qualified lawyer in the country concerned.

Knowledge map

Show
European Union and EEAEuropean Union and EEAEU cookie rulesEU cookie rulesEU AI ActEU AI ActUnited KingdomUnited KingdomSwitzerlandSwitzerlandBrazilBrazilChileChileUnited StatesUnited StatesCanadaCanadaAustraliaAustraliaIndiaIndiaChinaChinaJapanJapanSouth KoreaSouth KoreaBudapest ConventionBudapest ConventionConvention 108+Convention 108+InformationInformationAccessAccessCorrectionCorrectionDeletionDeletionRestrictionRestrictionPortabilityPortabilityObjectionObjectionAutomated decisionsAutomated decisionsComplaintComplaintCompensationCompensationWho the law applies toWho the law applies toLegal reasons and consentLegal reasons and consentChildrenChildrenBreachesBreachesSending data abroadSending data abroadFinesFinesCookiesCookiesArtificial intelligenceArtificial intelligenceEuropean Data Protection BoardEuropean Data Protection BoardUK Information CommissionerUK Information CommissionerFDPICFDPICANPDANPDData Protection Agency (Chile)Data Protection Agency (Chile)Federal Trade CommissionFederal Trade CommissionCalifornia Privacy Protection AgencyCalifornia Privacy Protection AgencyPrivacy Commissioner of CanadaPrivacy Commissioner of CanadaOAICOAICData Protection Board of IndiaData Protection Board of IndiaPersonal Information Protection Commission (Japan)Personal Information Protection Commission (Japan)Personal Information Protection Commission (Korea)Personal Information Protection Commission (Korea)Digital OmnibusDigital OmnibusRegulation (EU) 2026/1744Regulation (EU) 2026/1744Data (Use and Access) Act 2025Data (Use and Access) Act 2025Bill to postpone Law 21.719Bill to postpone Law 21.719Bill C-36Bill C-36Privacy reforms of 2024Privacy reforms of 2024Act No. 56 of 2026Act No. 56 of 20262026 penalty increase2026 penalty increaseCybersecurity Law amendmentsCybersecurity Law amendmentsSecond Additional ProtocolSecond Additional ProtocolPersonal dataPersonal dataData subjectData subjectProcessingProcessingControllerControllerProcessorProcessorConsentConsentPersonal data breachPersonal data breachRegulatorRegulatorAdequacy decisionAdequacy decisionAct on the Protection of Personal Information, official English translationAct on the Protection of Personal Informati…AI Act, Article 5: Prohibited AI practicesAI Act, Article 5: Prohibited AI practicesAI Act, Article 50: Transparency obligationsAI Act, Article 50: Transparency obligationsAI Act, Article 99(3): PenaltiesAI Act, Article 99(3): PenaltiesAI Act, Article 99(4): PenaltiesAI Act, Article 99(4): PenaltiesAI Act, Article 113: Entry into force and applicationAI Act, Article 113: Entry into force and a…ANPD, Resolution No. 32 of 26 January 2026ANPD, Resolution No. 32 of 26 January 2026APPI, Article 26: Report of leaksAPPI, Article 26: Report of leaksAPPI, Article 28: Third parties in foreign countriesAPPI, Article 28: Third parties in foreign…APPI, Article 33: DisclosureAPPI, Article 33: DisclosureAPPI, Article 34: CorrectionAPPI, Article 34: CorrectionAPPI, Article 35: Ceasing use or deletingAPPI, Article 35: Ceasing use or deletingAPPI, Article 171: Scope of applicationAPPI, Article 171: Scope of applicationAPPI, Article 178: Penal provisionsAPPI, Article 178: Penal provisionsAPPI, Article 184: Corporate finesAPPI, Article 184: Corporate finesAttorney-General's Department: PrivacyAttorney-General's Department: PrivacyCalifornia Assembly Bill 566 (2025)California Assembly Bill 566 (2025)California Attorney General: California Consumer Privacy ActCalifornia Attorney General: California Con…California Civil Code, section 1798.135: opt-out methodsCalifornia Civil Code, section 1798.135: op…California Civil Code, section 1798.155: administrative enforcementCalifornia Civil Code, section 1798.155: ad…Code of Federal Regulations, title 16, part 312: the COPPA RuleCode of Federal Regulations, title 16, part…Convention 108+, Article 1: Object and purposeConvention 108+, Article 1: Object and purp…Convention 108+, Article 9: Rights of the data subjectConvention 108+, Article 9: Rights of the d…Convention on Cybercrime, Article 15: Conditions and safeguardsConvention on Cybercrime, Article 15: Condi…Convention on Cybercrime, Article 16: Expedited preservationConvention on Cybercrime, Article 16: Exped…Convention on Cybercrime, Article 18: Production orderConvention on Cybercrime, Article 18: Produ…Council of Europe, Consultative Committee, October 2025: work programme 2026 to 2029Council of Europe, Consultative Committee,…Council of Europe, July 2026: Joining the Convention on Cybercrime, benefitsCouncil of Europe, July 2026: Joining the C…Council of Europe: news on ratifications of the Second Additional ProtocolCouncil of Europe: news on ratifications of…Council of the EU, document 14756/26: mandate for negotiations with the European Parliament, 22 October 2026Council of the EU, document 14756/26: manda…Council of the EU, press release, 21 October 2026: Council agrees position to simplify data protection, privacy and cyber reporting rulesCouncil of the EU, press release, 21 Octobe…Data Protection Act 2018, section 157: Maximum amount of penaltyData Protection Act 2018, section 157: Maxi…Digital Personal Data Protection Act 2023, section 1: CommencementDigital Personal Data Protection Act 2023,…Directive 2002/58/EC (consolidated), Article 5(3)Directive 2002/58/EC (consolidated), Articl…DPDP Act 2023, Schedule: PenaltiesDPDP Act 2023, Schedule: PenaltiesDPDP Act 2023, section 2(f): ChildDPDP Act 2023, section 2(f): ChildDPDP Act 2023, section 3: ApplicationDPDP Act 2023, section 3: ApplicationDPDP Act 2023, section 6: ConsentDPDP Act 2023, section 6: ConsentDPDP Act 2023, section 8(6): Personal data breachDPDP Act 2023, section 8(6): Personal data…DPDP Act 2023, section 9: Children's dataDPDP Act 2023, section 9: Children's dataDPDP Act 2023, section 11: Right to accessDPDP Act 2023, section 11: Right to accessDPDP Act 2023, section 12: Right to correction and erasureDPDP Act 2023, section 12: Right to correct…DPDP Act 2023, section 13: Grievance redressalDPDP Act 2023, section 13: Grievance redres…DPDP Act 2023, section 14: Right to nominateDPDP Act 2023, section 14: Right to nominateDPDP Act 2023, section 16: Processing outside IndiaDPDP Act 2023, section 16: Processing outsi…European Commission, Implementing Decision (EU) 2026/179 on Brazil, which describes the LGPD article by articleEuropean Commission, Implementing Decision…European Commission: Data protection adequacy for non-EU countriesEuropean Commission: Data protection adequa…European Data Protection Board: Our membersEuropean Data Protection Board: Our membersEuropean Parliament Legislative Observatory: procedure 2025/0360(COD)European Parliament Legislative Observatory…FADP, Article 3: Territorial scopeFADP, Article 3: Territorial scopeFADP, Article 6: PrinciplesFADP, Article 6: PrinciplesFADP, Article 14: RepresentativeFADP, Article 14: RepresentativeFADP, Article 16: Principles for cross-border disclosureFADP, Article 16: Principles for cross-bord…FADP, Article 19: Duty to provide informationFADP, Article 19: Duty to provide informati…FADP, Article 21: Automated individual decisionsFADP, Article 21: Automated individual deci…FADP, Article 24: Notifications of data security breachesFADP, Article 24: Notifications of data sec…FADP, Article 25: Right to informationFADP, Article 25: Right to informationFADP, Article 28: Right to data portabilityFADP, Article 28: Right to data portabilityFADP, Article 32: Legal rightsFADP, Article 32: Legal rightsFADP, Article 49: Investigation by the FDPICFADP, Article 49: Investigation by the FDPICFADP, Article 60: Violation of the duty to provide informationFADP, Article 60: Violation of the duty to…FADP, Article 61: Violation of duties of careFADP, Article 61: Violation of duties of ca…FADP, Article 63: Disregard of decisionsFADP, Article 63: Disregard of decisionsFADP, Article 64: Corporate criminal liabilityFADP, Article 64: Corporate criminal liabil…FADP, Article 74: Referendum and commencementFADP, Article 74: Referendum and commenceme…Federal Trade Commission: Complying with COPPA, frequently asked questionsFederal Trade Commission: Complying with CO…Garrigues (law firm), report on the Senate's approval (secondary source, in Spanish)Garrigues (law firm), report on the Senate'…GDPR, Article 2(2)(c): Material scopeGDPR, Article 2(2)(c): Material scopeGDPR, Article 3: Territorial scopeGDPR, Article 3: Territorial scopeGDPR, Article 4(1): DefinitionsGDPR, Article 4(1): DefinitionsGDPR, Article 4(11): DefinitionsGDPR, Article 4(11): DefinitionsGDPR, Article 5: Principles relating to processing of personal dataGDPR, Article 5: Principles relating to pro…GDPR, Article 6(1): Lawfulness of processingGDPR, Article 6(1): Lawfulness of processingGDPR, Article 7(3): Conditions for consentGDPR, Article 7(3): Conditions for consentGDPR, Article 8(1): Conditions applicable to child's consentGDPR, Article 8(1): Conditions applicable t…GDPR, Article 9: Processing of special categories of personal dataGDPR, Article 9: Processing of special cate…GDPR, Article 12(3) and (5): Transparent information and modalitiesGDPR, Article 12(3) and (5): Transparent in…GDPR, Article 15: Right of accessGDPR, Article 15: Right of accessGDPR, Article 16: Right to rectificationGDPR, Article 16: Right to rectificationGDPR, Article 17: Right to erasureGDPR, Article 17: Right to erasureGDPR, Article 18: Right to restriction of processingGDPR, Article 18: Right to restriction of p…GDPR, Article 20: Right to data portabilityGDPR, Article 20: Right to data portabilityGDPR, Article 21: Right to objectGDPR, Article 21: Right to objectGDPR, Article 22: Automated individual decision-makingGDPR, Article 22: Automated individual deci…GDPR, Article 25: Data protection by design and by defaultGDPR, Article 25: Data protection by design…GDPR, Article 27: Representatives of controllers or processorsGDPR, Article 27: Representatives of contro…GDPR, Article 28: ProcessorGDPR, Article 28: ProcessorGDPR, Article 30(5): Records of processing activitiesGDPR, Article 30(5): Records of processing…GDPR, Article 32: Security of processingGDPR, Article 32: Security of processingGDPR, Article 33(1): Notification to the supervisory authorityGDPR, Article 33(1): Notification to the su…GDPR, Article 34(1): Communication to the data subjectGDPR, Article 34(1): Communication to the d…GDPR, Article 35(1): Data protection impact assessmentGDPR, Article 35(1): Data protection impact…GDPR, Article 37(1): Designation of the data protection officerGDPR, Article 37(1): Designation of the dat…GDPR, Article 44: General principle for transfersGDPR, Article 44: General principle for tra…GDPR, Article 45: Transfers on the basis of an adequacy decisionGDPR, Article 45: Transfers on the basis of…GDPR, Article 46: Transfers subject to appropriate safeguardsGDPR, Article 46: Transfers subject to appr…GDPR, Article 49: Derogations for specific situationsGDPR, Article 49: Derogations for specific…GDPR, Article 77: Right to lodge a complaintGDPR, Article 77: Right to lodge a complaintGDPR, Article 79: Right to an effective judicial remedyGDPR, Article 79: Right to an effective jud…GDPR, Article 80: Representation of data subjectsGDPR, Article 80: Representation of data su…GDPR, Article 82: Right to compensation and liabilityGDPR, Article 82: Right to compensation and…GDPR, Article 83(4) and (5): Administrative finesGDPR, Article 83(4) and (5): Administrative…GDPR, Article 99: Entry into force and applicationGDPR, Article 99: Entry into force and appl…GDPR, Articles 13 and 14: Information to be providedGDPR, Articles 13 and 14: Information to be…House of Councillors: the amendment bill (in Japanese)House of Councillors: the amendment bill (i…Information Commissioner's Office: statement on the commencement of the 2025 ActInformation Commissioner's Office: statemen…Korea.kr, government policy news on the 10% penalty (in Korean)Korea.kr, government policy news on the 10%…Law 19.628 as replaced, Article 1 bis: Territorial scope (in Spanish)Law 19.628 as replaced, Article 1 bis: Terr…Law 19.628 as replaced, Article 2(u): Portability (in Spanish)Law 19.628 as replaced, Article 2(u): Porta…Law 19.628 as replaced, Article 5: Right of access (in Spanish)Law 19.628 as replaced, Article 5: Right of…Law 19.628 as replaced, Article 6: Right of rectification (in Spanish)Law 19.628 as replaced, Article 6: Right of…Law 19.628 as replaced, Article 7: Right of erasure (in Spanish)Law 19.628 as replaced, Article 7: Right of…Law 19.628 as replaced, Article 8 bis: Automated individual decisions (in Spanish)Law 19.628 as replaced, Article 8 bis: Auto…Law 19.628 as replaced, Article 8 ter: Right to block processing (in Spanish)Law 19.628 as replaced, Article 8 ter: Righ…Law 19.628 as replaced, Article 8: Right to object (in Spanish)Law 19.628 as replaced, Article 8: Right to…Law 19.628 as replaced, Article 11: Procedure before the controller (in Spanish)Law 19.628 as replaced, Article 11: Procedu…Law 19.628 as replaced, Article 14 sexies: Reporting security breaches (in Spanish)Law 19.628 as replaced, Article 14 sexies:…Law 19.628 as replaced, Article 16 quáter: Children's and adolescents' data (in Spanish)Law 19.628 as replaced, Article 16 quáter:…Law 19.628 as replaced, Article 27: International transfers (in Spanish)Law 19.628 as replaced, Article 27: Interna…Law 19.628 as replaced, Article 30: Data Protection Agency (in Spanish)Law 19.628 as replaced, Article 30: Data Pr…Law 19.628 as replaced, Article 35: Sanctions (in Spanish)Law 19.628 as replaced, Article 35: Sanctio…Law 21.719, Library of the National Congress of Chile (in Spanish)Law 21.719, Library of the National Congres…MultiState, 28 October 2026: Twenty-four states now have comprehensive consumer privacy laws (secondary source)MultiState, 28 October 2026: Twenty-four st…National People's Congress: China approves amendment to cybersecurity lawNational People's Congress: China approves…OAIC, 29 November 2024: Passing of bill a significant step for Australia's privacy lawOAIC, 29 November 2024: Passing of bill a s…OAIC: About the Notifiable Data Breaches schemeOAIC: About the Notifiable Data Breaches sc…OAIC: Access your personal informationOAIC: Access your personal informationOAIC: Australian Privacy Principles quick referenceOAIC: Australian Privacy Principles quick r…OAIC: Children's Online Privacy CodeOAIC: Children's Online Privacy CodeParliament of Canada, LEGISinfo: Bill C-36Parliament of Canada, LEGISinfo: Bill C-36PECR 2003, regulation 6: Storing information in terminal equipmentPECR 2003, regulation 6: Storing informatio…Personal Information Protection Act, English reference translation, Korea Legislation Research InstitutePersonal Information Protection Act, Englis…Personal Information Protection Commission: the amendment, July 2026 (in Japanese)Personal Information Protection Commission:…PIPA, Article 15: Collection and usePIPA, Article 15: Collection and usePIPA, Article 28-8: Cross-border transferPIPA, Article 28-8: Cross-border transferPIPA, Article 34: Notification of divulgencePIPA, Article 34: Notification of divulgencePIPA, Article 35: AccessPIPA, Article 35: AccessPIPA, Article 36: Rectification or erasurePIPA, Article 36: Rectification or erasurePIPA, Article 37-2: Automated decisionsPIPA, Article 37-2: Automated decisionsPIPA, Article 37: Suspension of processingPIPA, Article 37: Suspension of processingPIPA, Article 39: Liability for damagesPIPA, Article 39: Liability for damagesPIPA, Article 64-2: Penalty surchargesPIPA, Article 64-2: Penalty surchargesPIPEDA, Schedule 1, clause 4.3: ConsentPIPEDA, Schedule 1, clause 4.3: ConsentPIPEDA, Schedule 1, clause 4.9: Individual accessPIPEDA, Schedule 1, clause 4.9: Individual…PIPEDA, section 4: ApplicationPIPEDA, section 4: ApplicationPIPEDA, section 8: Time limitPIPEDA, section 8: Time limitPIPEDA, section 10.1: Report to the CommissionerPIPEDA, section 10.1: Report to the Commiss…PIPEDA, section 11: Filing of complaintsPIPEDA, section 11: Filing of complaintsPIPEDA, section 14: Hearing by CourtPIPEDA, section 14: Hearing by CourtPIPEDA, section 28: Offence and punishmentPIPEDA, section 28: Offence and punishmentPIPL, Article 3 (in Chinese)PIPL, Article 3 (in Chinese)PIPL, Article 13 (in Chinese)PIPL, Article 13 (in Chinese)PIPL, Article 15 (in Chinese)PIPL, Article 15 (in Chinese)PIPL, Article 31 (in Chinese)PIPL, Article 31 (in Chinese)PIPL, Article 38 (in Chinese)PIPL, Article 38 (in Chinese)PIPL, Article 39 (in Chinese)PIPL, Article 39 (in Chinese)PIPL, Article 44 (in Chinese)PIPL, Article 44 (in Chinese)PIPL, Article 45 (in Chinese)PIPL, Article 45 (in Chinese)PIPL, Article 46 (in Chinese)PIPL, Article 46 (in Chinese)PIPL, Article 47 (in Chinese)PIPL, Article 47 (in Chinese)PIPL, Article 57 (in Chinese)PIPL, Article 57 (in Chinese)PIPL, Article 66 (in Chinese)PIPL, Article 66 (in Chinese)PIPL, Article 74 (in Chinese)PIPL, Article 74 (in Chinese)Press Information Bureau, Government of India: DPDP Rules, 2025 notifiedPress Information Bureau, Government of Ind…Regulation (EU) 2016/679 (General Data Protection Regulation), full textRegulation (EU) 2016/679 (General Data Prot…Regulation (EU) 2026/1744, which amends the AI Act's datesRegulation (EU) 2026/1744, which amends the…Second Additional Protocol, Article 7: Disclosure of subscriber informationSecond Additional Protocol, Article 7: Disc…Second Additional Protocol, Article 14: Protection of personal dataSecond Additional Protocol, Article 14: Pro…Second Additional Protocol, Article 16: Signature and entry into forceSecond Additional Protocol, Article 16: Sig…TDDDG, section 25: Protection of privacy in terminal equipment (in German)TDDDG, section 25: Protection of privacy in…UK GDPR, Article 3: Territorial scopeUK GDPR, Article 3: Territorial scopeUK GDPR, Article 8: Child's consentUK GDPR, Article 8: Child's consentUK GDPR, Article 15: Right of accessUK GDPR, Article 15: Right of accessUK GDPR, Article 17: Right to erasureUK GDPR, Article 17: Right to erasureUK GDPR, Article 18: Right to restriction of processingUK GDPR, Article 18: Right to restriction o…UK GDPR, Article 20: Right to data portabilityUK GDPR, Article 20: Right to data portabil…UK GDPR, Article 21: Right to objectUK GDPR, Article 21: Right to objectUK GDPR, Article 22C: Safeguards for automated decision-makingUK GDPR, Article 22C: Safeguards for automa…UK GDPR, Article 33: Notification of a breachUK GDPR, Article 33: Notification of a brea…UK GDPR, Article 44A: General principles for transfersUK GDPR, Article 44A: General principles fo…UK GDPR, Article 77: Right to lodge a complaintUK GDPR, Article 77: Right to lodge a compl…UK GDPR, Article 82: Right to compensationUK GDPR, Article 82: Right to compensationUK Government: Data (Use and Access) Act 2025, plans for commencementUK Government: Data (Use and Access) Act 20…