Loading...
433 articles · page 4 of 8
Complete guide to Israel data privacy laws. Covers the Protection of Privacy Law 1981, Amendment 13 (effective August 14, 2025), PPA enforcement, EU adequacy renewal, DPO requirements, and compliance.
Italy enforces data privacy through the GDPR, the Privacy Code (D.Lgs. 196/2003), and the Garante. Covers Law 132/2025 AI law, criminal penalties, Enel EUR 79M fine, and 2025-2026 enforcement.
Complete guide to Jamaica's Data Protection Act 2020 -- the OIC, eight data protection standards, phased commencement, registration, data subject rights, breach notification, cross-border transfers, and penalties.
How Japan's APPI differs from GDPR: the Article 27 opt-out transfer regime, pseudonymization tiers, EU/UK Supplementary Rules, and the 2026 reform.
Japan's APPI governs personal data with mandatory breach reporting, cross-border transfer rules, and EU mutual adequacy. The January 2026 PPC reform policy introduces administrative fines for the first time, with implementation expected by 2028.
As of July 2026, the JBS beef and pork wage-fixing settlement fund is $202.8M and open. See who may be eligible, deadlines, and how filing works.
Kansas has no dedicated biometric privacy law. Learn what limited protections exist for fingerprint and facial recognition data under current Kansas statutes.
Kansas requires businesses to investigate breaches and notify residents without unreasonable delay under K.S.A. 50-7a01. Learn about PI definitions, safe harbors, and penalties.
Kansas data privacy laws explained. Covers breach notification under K.S.A. 50-7a01, consumer protections, student data privacy, identity theft penalties, and your rights.
KCDPA compliance (KRS 367.3611 to 367.3629): coverage, privacy notice, opt-in sensitive data, 45-day requests, assessments, processor contracts, 30-day cure.
Under the KCDPA (KRS 367.3615), Kentuckians can access, correct, delete, port, and opt out of data sales; controllers must respond within 45 days.
Keller Williams and RE/MAX face a $28.5M commission antitrust settlement. Status: open as of July 2026, with claims accepted through August 25, 2026.
Learn how Kentucky's KCDPA classifies biometric data as sensitive, requiring opt-in consent. Covers definitions, consumer rights, exemptions, and AG enforcement.
Learn Kentucky data breach notification requirements under KRS 365.732 and government rules under KRS 61.931-934, including timing, encryption safe harbor, and penalties.
Kentucky Consumer Data Protection Act took effect Jan. 1, 2026. Learn about consumer rights, business obligations, and penalties up to $7,500 per violation.
Kenya enforces data privacy through the Data Protection Act 2019 and the ODPC. Learn about the registration regime, data subject rights, 72-hour breach notification, cross-border transfer rules, and ODPC enforcement actions including KES 26M+ in fines through 2024.
The $35M Labcorp AMCA data breach settlement is open. Claim deadline is September 3, 2026. See who qualifies and how to file at the official site.
Lands' End data breach settlement claims are open through Oct 22, 2026. $60 flat payment, no proof needed, or up to $5,000 with documentation.
LastPass's July 2, 2026 claim deadline has passed. As of July 16, the court has not entered final approval and no payment date is set. Here's what's next.
Latvia data privacy laws explained: GDPR + Personal Data Processing Law, DVI enforcement (EUR 1.2M TET fine upheld 2024, EUR 300K ZZ Dats fine 2025), EU AI Act overlay, criminal penalties, and compliance steps.
The Lee University data breach settlement is open. Deadline is Aug 19, 2026. ~$100 no-proof payment, up to $5,000 with proof, and how to file free.
The Lemonade data breach settlement claim window is open. The deadline to file is September 8, 2026. See who's eligible and how to file for free.
Complete guide to Liechtenstein data protection: GDPR via EEA, the 2018 Data Protection Act (DSG), Datenschutzstelle enforcement, DPO rules, financial sector compliance, blockchain, AI Act, and 2024–2026 updates.
Lithuania implements GDPR through its 2018 Law on Legal Protection of Personal Data. Learn about the VDAI, the EUR 2.4M Vinted fine, constitutional basis, data subject rights, DPO requirements, cross-border transfers, the EU AI Act overlay, and 2024-2025 enforcement trends.
Louisiana has no standalone biometric privacy law but protects biometric data through breach notification rules. Learn the 60-day notice requirements and penalties.
Louisiana requires data breach notification within 60 days. Learn who must report, what data is protected, AG reporting rules, and penalties under La. R.S. 51:3071.
Louisiana passed the Data Privacy Act (SB 386) in 2026, effective Jan. 1, 2027. Learn breach notification rules, children's online protections, and federal privacy laws that apply now.
Luxembourg data privacy laws explained: GDPR implementation, Law of 1 August 2018, CNPD enforcement powers, the EUR 746M Amazon fine and its annulment on appeal, EU AI Act, financial sector rules, and 2024-2026 developments.
Maine bans government facial recognition and may soon protect biometric data under LD 1822. Learn what laws exist today and what is pending for 2026.
Maine requires data breach notification within 30 days. Learn who must comply, what triggers notification, encryption safe harbors, and penalties under state law.
Complete guide to Maine data privacy laws including the ISP privacy law (35-A MRSA 9301), breach notification requirements, the pending Consumer Data Privacy Act, and employee monitoring rules.
Malaysia enforces data privacy through the PDPA 2010 (Act 709) and its 2024 amendments. Learn about JPDP enforcement, 7 data protection principles, breach notification, and penalties up to RM 1 million.
How Malaysia's PDPA differs from the GDPR: the government exemption, narrower scope, the 2024 Amendment Act, and penalties through 2025.
Malta data privacy laws: GDPR, Cap. 586, and IDPC enforcement. Covers the age-13 digital consent rule, iGaming sector compliance, EU AI Act designation, and cross-border transfer rules.
Pending approval: Marlboro-Chesterfield Pathology data breach settlement. $10 no-proof payment or up to $1,000 for documented losses. File by Aug 21, 2026.
Learn how Maryland's MODPA protects biometric data like fingerprints and retina scans. Covers the strict necessity standard, sale ban, breach rules, and AG enforcement.
Maryland requires data breach notification within 45 days. Learn about AG-first reporting, protected personal information, encryption safe harbors, and penalties.
Maryland Online Data Privacy Act (MODPA) bans selling sensitive data, limits collection to what is necessary, and protects minors under 18.
Massachusetts has no standalone biometric privacy law, but 201 CMR 17.00, Chapter 93A treble damages, and the pending Data Privacy Act (S.2608) protect biometric data.
Learn Massachusetts data breach notification rules under Chapter 93H and 201 CMR 17.00, including WISP requirements, penalties, and credit monitoring obligations.
Massachusetts data privacy laws include 201 CMR 17.00 security regulations, Chapter 93H breach notification rules, and pending comprehensive privacy legislation.
MCDPA compliance (Mont. Code Ann. 30-14-2803): applicability at 25,000/15,000 thresholds, notice, opt-in, assessments. Cure period ended April 1, 2026.
Montana's MCDPA (Mont. Code Ann. 30-14-2808) gives access, correction, deletion, portability, and opt-out rights, with a 45-day response window.
Mexico replaced its 2010 data privacy law in March 2025. New LFPDPPP, INAI dissolved, SABG enforces. ARCO rights, penalties up to MXN 37.5M, AI provisions explained.
Washington MHMDA duties (ch. 19.373 RCW): separate privacy policy, consent, authorization to sell, geofencing ban, security, plus private-suit litigation risk.
Washington MHMDA (RCW 19.373.040) gives consumers rights to access, withdraw consent, and delete health data, plus a private right of action via the CPA.
Michigan protects biometric data through its Identity Theft Protection Act and Consumer Protection Act. Learn current rules, breach penalties, and pending 2026 legislation.
Michigan data breach notification law requires businesses to notify residents of security breaches involving personal information. Learn timelines, penalties, and safe harbors under MCL 445.72.
Michigan data privacy laws explained: breach notification rules, SSN protections, proposed Personal Data Privacy Act, and your rights under state and federal law.
Learn how Minnesota's MCDPA classifies biometric data as sensitive, requiring opt-in consent. Covers definitions, consumer rights, exemptions, and AG enforcement with $7,500 penalties.
Minnesota requires breach notification without unreasonable delay when names plus SSNs, driver's licenses, or financial accounts are exposed. No AG notice required.
Learn about Minnesota data privacy laws including the Consumer Data Privacy Act, breach notification rules, consumer rights, and penalties for violations.
A Minnesota MCDPA compliance checklist: thresholds, the required data inventory under 325M.18, sensitive-data opt-in, and profiling-answer duties.
Minnesota MCDPA consumer rights under Minn. Stat. 325M.14: access, delete, opt out, a third-party list, and a unique right to question profiling.
Mission Community Hospital data breach settlement claims are open through Aug 12, 2026. $100 payment plus monitoring, or up to $5,000 with proof.
Mississippi has no biometric privacy law. Learn how Miss. Code 75-24-29 falls short, failed BIPA-style bills, employer rules, and federal protections that apply.
Mississippi data breach notification law (Miss. Code 75-24-29) requires notice without unreasonable delay. No AG reporting required. Learn triggers, exemptions, and penalties.
Mississippi requires data breach notification under Miss. Code 75-24-29 but has no comprehensive consumer privacy law. Learn breach rules, penalties, and your rights.
Missouri has no biometric privacy law and excludes biometric data from breach notification rules. Learn current protections, pending legislation, and employer obligations.
Missouri data breach notification law (Mo. Rev. Stat. 407.1500) requires prompt notice to affected residents. Learn timelines, penalties up to $150K, and AG enforcement rules.