Data Localization Laws by Country (2026)
Country-by-country guide to data localization and residency requirements: China CSL 2026 update, Russia, India DPDP Rules, Vietnam, Indonesia, Nigeria NDPA 2023, Saudi Arabia, Kazakhstan, EU, and more.
Loading...
Browse our full library of legal guides, state law breakdowns, and practical legal information.
11269 articles
Browse by Category →Country-by-country guide to data localization and residency requirements: China CSL 2026 update, Russia, India DPDP Rules, Vietnam, Indonesia, Nigeria NDPA 2023, Saudi Arabia, Kazakhstan, EU, and more.

GDPR fines explained: the two-tier Article 83 structure, EDPB fine-calculation methodology, the Deutsche Wohnen corporate-liability ruling, every major fine and its current appeal status, non-monetary consequences, and how to reduce your exposure.

Complete guide to the EU ePrivacy Directive cookie law: consent requirements, the strictly-necessary exemption, how it interacts with GDPR, the withdrawn ePrivacy Regulation, and the November 2025 Digital Omnibus cookie proposals.

What valid consent means under GDPR: the four elements of Article 4(11), Article 7 conditions, explicit consent for special-category data, children consent, cookie rules, consent-or-pay models, and 2025 enforcement.

Country-by-country guide to cookie consent requirements: the EU ePrivacy + GDPR opt-in model, the UK DUAA 2025 changes, the US state-law patchwork, and 30+ other jurisdictions including Brazil, China, India, and Australia.

The eight GDPR data subject rights under Chapter III: access, rectification, erasure, restriction, portability, objection, automated-decision rights, and the right to be informed. Timelines, exemptions, and 2026 enforcement.
Data retention law has two meanings: the GDPR storage-limitation principle (keep no longer than necessary) and mandatory telecom metadata laws. Compare rules across 14 countries including CJEU case law through 2024.
Complete guide to EU Standard Contractual Clauses: the 2021 modular SCCs, Transfer Impact Assessments, supplementary measures, the pending Article 3(2) SCCs, UK IDTA, and 2024-2026 enforcement.
Complete guide to EU adequacy decisions under GDPR Article 45: all 17 adequate countries, the UK December 2025 renewal, the Brazil 2026 decision, the January 2024 review of 11 pre-GDPR decisions, and DPF litigation risks.

Mississippi data breach notification law (Miss. Code 75-24-29) requires notice without unreasonable delay. No AG reporting required. Learn triggers, exemptions, and penalties.

Guide to Washington biometric privacy laws under RCW 19.375, including notice and consent rules, penalties up to $7,500 per violation, government biometric restrictions, and My Health My Data Act overlap.

Oregon biometric privacy laws under the OCPA require opt-in consent for biometric data. Portland bans facial recognition in public spaces with $1,000/day penalties.