Contents Knowledge map

Before you read

This site is NOT legal advice, and using it creates no lawyer and client relationship. It is a set of findings, checked against published sources and dated, that may help software developers and other individuals. For a decision that matters, ask a qualified lawyer in the country concerned.

References

Open in Knowledge map

Every source cited on this site, once, with the pages that cite it. Official texts first where they exist.

  1. Act on the Protection of Personal Information, official English translationCited on: Japan
  2. AI Act, Article 5: Prohibited AI practicesCited on: EU AI Act
  3. AI Act, Article 50: Transparency obligationsCited on: EU AI Act
  4. AI Act, Article 99(3): PenaltiesCited on: EU AI Act
  5. AI Act, Article 99(4): PenaltiesCited on: EU AI Act
  6. AI Act, Article 113: Entry into force and applicationCited on: EU AI Act
  7. ANPD, Resolution No. 32 of 26 January 2026Cited on: Brazil
  8. APPI, Article 26: Report of leaksCited on: Japan
  9. APPI, Article 28: Third parties in foreign countriesCited on: Japan
  10. APPI, Article 33: DisclosureCited on: Japan
  11. APPI, Article 34: CorrectionCited on: Japan
  12. APPI, Article 35: Ceasing use or deletingCited on: Japan
  13. APPI, Article 171: Scope of applicationCited on: Japan
  14. APPI, Article 178: Penal provisionsCited on: Japan
  15. APPI, Article 184: Corporate finesCited on: Japan
  16. Attorney-General's Department: PrivacyCited on: Australia
  17. California Assembly Bill 566 (2025)Cited on: United States
  18. California Attorney General: California Consumer Privacy ActCited on: United States
  19. California Civil Code, section 1798.135: opt-out methodsCited on: United States
  20. California Civil Code, section 1798.155: administrative enforcementCited on: United States
  21. Code of Federal Regulations, title 16, part 312: the COPPA RuleCited on: United States
  22. Convention 108+, Article 1: Object and purposeCited on: Convention 108+
  23. Convention 108+, Article 9: Rights of the data subjectCited on: Convention 108+
  24. Convention on Cybercrime, Article 15: Conditions and safeguardsCited on: Budapest Convention on Cybercrime
  25. Convention on Cybercrime, Article 16: Expedited preservationCited on: Budapest Convention on Cybercrime
  26. Convention on Cybercrime, Article 18: Production orderCited on: Budapest Convention on Cybercrime
  27. Council of Europe, Consultative Committee, October 2025: work programme 2026 to 2029Cited on: Convention 108+
  28. Council of Europe, July 2026: Joining the Convention on Cybercrime, benefitsCited on: Budapest Convention on Cybercrime
  29. Council of Europe: news on ratifications of the Second Additional ProtocolCited on: Budapest Convention on Cybercrime
  30. Council of the EU, document 14756/26: mandate for negotiations with the European Parliament, 22 October 2026Cited on: European Union and EEA
  31. Council of the EU, press release, 21 October 2026: Council agrees position to simplify data protection, privacy and cyber reporting rulesCited on: European Union and EEA
  32. Data Protection Act 2018, section 157: Maximum amount of penaltyCited on: United Kingdom
  33. Digital Personal Data Protection Act 2023, section 1: CommencementCited on: India
  34. Directive 2002/58/EC (consolidated), Article 5(3)Cited on: EU cookie rules (ePrivacy)
  35. DPDP Act 2023, Schedule: PenaltiesCited on: India
  36. DPDP Act 2023, section 2(f): ChildCited on: India
  37. DPDP Act 2023, section 3: ApplicationCited on: India
  38. DPDP Act 2023, section 6: ConsentCited on: India
  39. DPDP Act 2023, section 8(6): Personal data breachCited on: India
  40. DPDP Act 2023, section 9: Children's dataCited on: India
  41. DPDP Act 2023, section 11: Right to accessCited on: India
  42. DPDP Act 2023, section 12: Right to correction and erasureCited on: India
  43. DPDP Act 2023, section 13: Grievance redressalCited on: India
  44. DPDP Act 2023, section 14: Right to nominateCited on: India
  45. DPDP Act 2023, section 16: Processing outside IndiaCited on: India
  46. European Commission, Implementing Decision (EU) 2026/179 on Brazil, which describes the LGPD article by articleCited on: Brazil
  47. European Commission: Data protection adequacy for non-EU countriesCited on: European Union and EEA
  48. European Data Protection Board: Our membersCited on: European Union and EEA
  49. European Parliament Legislative Observatory: procedure 2025/0360(COD))Cited on: European Union and EEA
  50. FADP, Article 3: Territorial scopeCited on: Switzerland
  51. FADP, Article 6: PrinciplesCited on: Switzerland
  52. FADP, Article 14: RepresentativeCited on: Switzerland
  53. FADP, Article 16: Principles for cross-border disclosureCited on: Switzerland
  54. FADP, Article 19: Duty to provide informationCited on: Switzerland
  55. FADP, Article 21: Automated individual decisionsCited on: Switzerland
  56. FADP, Article 24: Notifications of data security breachesCited on: Switzerland
  57. FADP, Article 25: Right to informationCited on: Switzerland
  58. FADP, Article 28: Right to data portabilityCited on: Switzerland
  59. FADP, Article 32: Legal rightsCited on: Switzerland
  60. FADP, Article 49: Investigation by the FDPICCited on: Switzerland
  61. FADP, Article 60: Violation of the duty to provide informationCited on: Switzerland
  62. FADP, Article 61: Violation of duties of careCited on: Switzerland
  63. FADP, Article 63: Disregard of decisionsCited on: Switzerland
  64. FADP, Article 64: Corporate criminal liabilityCited on: Switzerland
  65. FADP, Article 74: Referendum and commencementCited on: Switzerland
  66. Federal Trade Commission: Complying with COPPA, frequently asked questionsCited on: United States
  67. Garrigues (law firm), report on the Senate's approval (secondary source, in Spanish)Cited on: Chile
  68. GDPR, Article 2(2)(c): Material scopeCited on: European Union and EEA
  69. GDPR, Article 3: Territorial scopeCited on: European Union and EEA, European Union, for developers
  70. GDPR, Article 4(1): DefinitionsCited on: European Union and EEA
  71. GDPR, Article 4(11): DefinitionsCited on: European Union and EEA
  72. GDPR, Article 5: Principles relating to processing of personal dataCited on: European Union and EEA
  73. GDPR, Article 6(1): Lawfulness of processingCited on: European Union and EEA, European Union, for developers
  74. GDPR, Article 7(3): Conditions for consentCited on: European Union and EEA
  75. GDPR, Article 8(1): Conditions applicable to child's consentCited on: European Union and EEA
  76. GDPR, Article 9: Processing of special categories of personal dataCited on: European Union and EEA
  77. GDPR, Article 12(3) and (5): Transparent information and modalitiesCited on: European Union and EEA, European Union, for developers
  78. GDPR, Article 15: Right of accessCited on: European Union and EEA
  79. GDPR, Article 16: Right to rectificationCited on: European Union and EEA
  80. GDPR, Article 17: Right to erasureCited on: European Union and EEA
  81. GDPR, Article 18: Right to restriction of processingCited on: European Union and EEA
  82. GDPR, Article 20: Right to data portabilityCited on: European Union and EEA
  83. GDPR, Article 21: Right to objectCited on: European Union and EEA
  84. GDPR, Article 22: Automated individual decision-makingCited on: European Union and EEA
  85. GDPR, Article 25: Data protection by design and by defaultCited on: European Union, for developers
  86. GDPR, Article 27: Representatives of controllers or processorsCited on: European Union, for developers
  87. GDPR, Article 28: ProcessorCited on: European Union, for developers
  88. GDPR, Article 30(5): Records of processing activitiesCited on: European Union, for developers
  89. GDPR, Article 32: Security of processingCited on: European Union, for developers
  90. GDPR, Article 33(1): Notification to the supervisory authorityCited on: European Union and EEA, European Union, for developers
  91. GDPR, Article 34(1): Communication to the data subjectCited on: European Union and EEA
  92. GDPR, Article 35(1): Data protection impact assessmentCited on: European Union, for developers
  93. GDPR, Article 37(1): Designation of the data protection officerCited on: European Union, for developers
  94. GDPR, Article 44: General principle for transfersCited on: European Union and EEA, European Union, for developers
  95. GDPR, Article 45: Transfers on the basis of an adequacy decisionCited on: European Union and EEA
  96. GDPR, Article 46: Transfers subject to appropriate safeguardsCited on: European Union and EEA
  97. GDPR, Article 49: Derogations for specific situationsCited on: European Union and EEA
  98. GDPR, Article 77: Right to lodge a complaintCited on: European Union and EEA
  99. GDPR, Article 79: Right to an effective judicial remedyCited on: European Union and EEA
  100. GDPR, Article 80: Representation of data subjectsCited on: European Union and EEA
  101. GDPR, Article 82: Right to compensation and liabilityCited on: European Union and EEA
  102. GDPR, Article 83(4) and (5): Administrative finesCited on: European Union and EEA
  103. GDPR, Article 99: Entry into force and applicationCited on: European Union and EEA
  104. GDPR, Articles 13 and 14: Information to be providedCited on: European Union and EEA, European Union, for developers
  105. House of Councillors: the amendment bill (in Japanese)Cited on: Japan
  106. Information Commissioner's Office: statement on the commencement of the 2025 ActCited on: United Kingdom
  107. Korea.kr, government policy news on the 10% penalty (in Korean)Cited on: South Korea
  108. Law 19.628 as replaced, Article 1 bis: Territorial scope (in Spanish)Cited on: Chile
  109. Law 19.628 as replaced, Article 2(u): Portability (in Spanish)Cited on: Chile
  110. Law 19.628 as replaced, Article 5: Right of access (in Spanish)Cited on: Chile
  111. Law 19.628 as replaced, Article 6: Right of rectification (in Spanish)Cited on: Chile
  112. Law 19.628 as replaced, Article 7: Right of erasure (in Spanish)Cited on: Chile
  113. Law 19.628 as replaced, Article 8 bis: Automated individual decisions (in Spanish)Cited on: Chile
  114. Law 19.628 as replaced, Article 8 ter: Right to block processing (in Spanish)Cited on: Chile
  115. Law 19.628 as replaced, Article 8: Right to object (in Spanish)Cited on: Chile
  116. Law 19.628 as replaced, Article 11: Procedure before the controller (in Spanish)Cited on: Chile
  117. Law 19.628 as replaced, Article 14 sexies: Reporting security breaches (in Spanish)Cited on: Chile
  118. Law 19.628 as replaced, Article 16 quáter: Children's and adolescents' data (in Spanish)Cited on: Chile
  119. Law 19.628 as replaced, Article 27: International transfers (in Spanish)Cited on: Chile
  120. Law 19.628 as replaced, Article 30: Data Protection Agency (in Spanish)Cited on: Chile
  121. Law 19.628 as replaced, Article 35: Sanctions (in Spanish)Cited on: Chile
  122. Law 21.719, Library of the National Congress of Chile (in Spanish)Cited on: Chile
  123. MultiState, 28 October 2026: Twenty-four states now have comprehensive consumer privacy laws (secondary source)Cited on: United States
  124. National People's Congress: China approves amendment to cybersecurity lawCited on: China
  125. OAIC, 29 November 2024: Passing of bill a significant step for Australia's privacy lawCited on: Australia
  126. OAIC: About the Notifiable Data Breaches schemeCited on: Australia
  127. OAIC: Access your personal informationCited on: Australia
  128. OAIC: Australian Privacy Principles quick referenceCited on: Australia
  129. OAIC: Children's Online Privacy CodeCited on: Australia
  130. Parliament of Canada, LEGISinfo: Bill C-36Cited on: Canada
  131. PECR 2003, regulation 6: Storing information in terminal equipmentCited on: United Kingdom
  132. Personal Information Protection Act, English reference translation, Korea Legislation Research InstituteCited on: South Korea
  133. Personal Information Protection Commission: the amendment, July 2026 (in Japanese)Cited on: Japan
  134. PIPA, Article 15: Collection and useCited on: South Korea
  135. PIPA, Article 28-8: Cross-border transferCited on: South Korea
  136. PIPA, Article 34: Notification of divulgenceCited on: South Korea
  137. PIPA, Article 35: AccessCited on: South Korea
  138. PIPA, Article 36: Rectification or erasureCited on: South Korea
  139. PIPA, Article 37-2: Automated decisionsCited on: South Korea
  140. PIPA, Article 37: Suspension of processingCited on: South Korea
  141. PIPA, Article 39: Liability for damagesCited on: South Korea
  142. PIPA, Article 64-2: Penalty surchargesCited on: South Korea
  143. PIPEDA, Schedule 1, clause 4.3: ConsentCited on: Canada
  144. PIPEDA, Schedule 1, clause 4.9: Individual accessCited on: Canada
  145. PIPEDA, section 4: ApplicationCited on: Canada
  146. PIPEDA, section 8: Time limitCited on: Canada
  147. PIPEDA, section 10.1: Report to the CommissionerCited on: Canada
  148. PIPEDA, section 11: Filing of complaintsCited on: Canada
  149. PIPEDA, section 14: Hearing by CourtCited on: Canada
  150. PIPEDA, section 28: Offence and punishmentCited on: Canada
  151. PIPL, Article 3 (in Chinese)Cited on: China
  152. PIPL, Article 13 (in Chinese)Cited on: China
  153. PIPL, Article 15 (in Chinese)Cited on: China
  154. PIPL, Article 31 (in Chinese)Cited on: China
  155. PIPL, Article 38 (in Chinese)Cited on: China
  156. PIPL, Article 39 (in Chinese)Cited on: China
  157. PIPL, Article 44 (in Chinese)Cited on: China
  158. PIPL, Article 45 (in Chinese)Cited on: China
  159. PIPL, Article 46 (in Chinese)Cited on: China
  160. PIPL, Article 47 (in Chinese)Cited on: China
  161. PIPL, Article 57 (in Chinese)Cited on: China
  162. PIPL, Article 66 (in Chinese)Cited on: China
  163. PIPL, Article 74 (in Chinese)Cited on: China
  164. Press Information Bureau, Government of India: DPDP Rules, 2025 notifiedCited on: India
  165. Regulation (EU) 2016/679 (General Data Protection Regulation), full textCited on: European Union and EEA
  166. Regulation (EU) 2026/1744, which amends the AI Act's datesCited on: EU AI Act
  167. Second Additional Protocol, Article 7: Disclosure of subscriber informationCited on: Budapest Convention on Cybercrime
  168. Second Additional Protocol, Article 14: Protection of personal dataCited on: Budapest Convention on Cybercrime
  169. Second Additional Protocol, Article 16: Signature and entry into forceCited on: Budapest Convention on Cybercrime
  170. TDDDG, section 25: Protection of privacy in terminal equipment (in German)Cited on: EU cookie rules (ePrivacy)
  171. UK GDPR, Article 3: Territorial scopeCited on: United Kingdom
  172. UK GDPR, Article 8: Child's consentCited on: United Kingdom
  173. UK GDPR, Article 15: Right of accessCited on: United Kingdom
  174. UK GDPR, Article 17: Right to erasureCited on: United Kingdom
  175. UK GDPR, Article 18: Right to restriction of processingCited on: United Kingdom
  176. UK GDPR, Article 20: Right to data portabilityCited on: United Kingdom
  177. UK GDPR, Article 21: Right to objectCited on: United Kingdom
  178. UK GDPR, Article 22C: Safeguards for automated decision-makingCited on: United Kingdom
  179. UK GDPR, Article 33: Notification of a breachCited on: United Kingdom
  180. UK GDPR, Article 44A: General principles for transfersCited on: United Kingdom
  181. UK GDPR, Article 77: Right to lodge a complaintCited on: United Kingdom
  182. UK GDPR, Article 82: Right to compensationCited on: United Kingdom
  183. UK Government: Data (Use and Access) Act 2025, plans for commencementCited on: United Kingdom