Loading...
433 articles · page 6 of 8
Panama's Law 81 of 2019 and Executive Decree 285 of 2021 govern personal data protection. Learn about ANTAI oversight, ARCO rights, consent rules, cross-border transfers, sectoral rules, penalties, and 2025 updates.
Pennsylvania lacks a standalone biometric privacy law. Learn how BPINA, the UTPCPL, and pending bills like HB 78 and HB 596 affect biometric data rights.
Pennsylvania requires breach notification without unreasonable delay. The 2024 BPINA amendment adds AG notice at 500+, 12-month credit monitoring, and health insurance data coverage.
Guide to Pennsylvania data privacy laws including breach notification under BPINA, the all-party consent Wiretap Act, pending HB 78 consumer privacy bill, and AG enforcement.
Peru data privacy law explained: Law 29733, DS 016-2024-JUS (March 2025), DPO requirements, 48-hour breach notification, ARCO-PD rights, penalties up to 100 UIT. Updated May 2026.
Complete guide to Philippine data privacy law under the Data Privacy Act of 2012 (RA 10173). Covers constitutional basis, NPC enforcement, administrative fines, data subject rights, breach notification, cross-border transfers, DPO requirements, and 2024-2026 NPC developments.
How the Philippines' Data Privacy Act differs from GDPR: criminal imprisonment for 8 offenses, mandatory NPC registration, and BPO extraterritorial reach.
Complete guide to Poland data privacy laws: EU GDPR, the Polish Personal Data Protection Act 2018, UODO enforcement record, constitutional basis, penalties, breach notification, and 2024-2026 developments.
Portugal data privacy law explained: GDPR implementation via Lei 58/2019, the CNPD supervisory authority, constitutional basis in Article 35, the 2019 deliberation disapplying national provisions, penalties up to €20M, and 2024–2026 enforcement.
PowerSchool's $17.25M Naviance settlement claim deadline is July 27, 2026. Not the 2024 PowerSchool breach. See who's eligible and how pro rata pay works.
What US and international laws require in a privacy policy. Covers CCPA, GDPR, CalOPPA, COPPA, mandatory disclosures, penalties, and update frequency.
Complete guide to Qatar data privacy laws: Law No. 13 of 2016 (PDPPL), the NCSA/CDP supervisory authority, the QFC Data Protection Regulations 2021, data subject rights, breach notification, cross-border transfers, and penalties up to QAR 5 million.
Rhode Island biometric privacy laws under the RIDTPPA require opt-in consent for fingerprint and biometric data collection, with AG-enforced penalties up to $10,000 per violation.
Rhode Island requires data breach notification within 45 days (30 for government). Learn about the 128-bit encryption safe harbor, AG reporting at 500+, and per-record penalties.
Guide to Rhode Island data privacy laws and the RIDTPPA effective January 1, 2026. Consumer rights, business obligations, penalties, and breach rules.
RIDTPPA (R.I. Gen. Laws 6-48.1) compliance: coverage at 35,000 customers, the 6-48.1-3 third-party disclosure, opt-in sensitive data, and AG-only enforcement.
Rhode Island's RIDTPPA (6-48.1-5) gives access, correction, deletion, portability, and opt-out rights; controllers must answer within 45 days. AG enforces.
Complete guide to Romania data privacy laws: GDPR implementation via Law 190/2018, ANSPDCP enforcement, public authority fine caps, employee monitoring rules, biometric data restrictions, EU AI Act overlap, and 2024–2025 enforcement actions.
Complete guide to Russia's data privacy laws: Federal Law 152-FZ, Roskomnadzor enforcement, data localization (242-FZ), the 2025 fine increases under 420-FZ (up to 500M rubles), new criminal liability under 421-FZ (up to 10 years), breach notification, and SORM surveillance.
Complete guide to Saudi Arabia's Personal Data Protection Law (PDPL), Royal Decrees M/19 and M/148, SDAIA enforcement, data subject rights, breach notification, penalties up to SAR 5M, cross-border transfer rules, and 2025–2026 regulatory updates.
How Saudi Arabia's PDPL Data Transfer Regulation governs outbound data: the localization myth, SCCs, risk assessments, and penalties.
Compare Saudi Arabia's PDPL to the GDPR: controller registration, the missing adequacy list, rights gaps, and criminal penalties.
Serviceaide's $1.8M data breach settlement is open. Catholic Health patients notified of the breach can file for a payout through September 1, 2026.
Singapore PDPA: the 11 data protection obligations, mandatory DPO, breach notification, penalties up to 10% of turnover, and data portability status in 2026.
Slovakia enforces data privacy through GDPR and Act No. 18/2018, overseen by the UOOU. Learn about birth number protections, enforcement, the EU AI Act overlay, and NIS2 compliance.
Slovenia was the last EU member state to adopt a GDPR implementing law. Learn how ZVOP-2 (in force January 2023), the Information Commissioner, Article 38 constitutional protection, biometric restrictions, processing logs, and the EU AI Act shape compliance in Slovenia.
South Africa's POPIA vs the GDPR: correct commencement dates, the eight conditions, juristic person coverage, and real 2026 Information Regulator enforcement.
South Carolina has no standalone biometric privacy law. Learn about breach notification under SC Code 39-1-90, the Insurance Data Security Act, and pending legislation.
South Carolina requires data breach notification without unreasonable delay under S.C. Code 39-1-90. Learn about the private right of action, $1,000 per-resident fines, and CRA reporting at 1,000+.
South Carolina data privacy laws explained. Covers the breach notification statute (S.C. Code 39-1-90), Insurance Data Security Act, FIFITPA, and federal protections.
South Dakota has no dedicated biometric privacy law. Learn how the breach notification statute SDCL 22-40-19 protects biometric data and what gaps remain.
South Dakota requires data breach notification within 60 days. Learn about the AG reporting threshold of 250 residents, $10,000/day penalties, and protected information coverage.
South Dakota requires 60-day breach notification under SDCL 22-40-19. No comprehensive privacy law yet. Learn about penalties, consumer rights, and 2026 legislative updates.
South Dakota's Genetic Data Privacy Act, SB 49, took effect July 1, 2026, requiring consent and privacy notices from DTC genetic testing companies.
South Korea's PIPA is among the world's strictest data privacy laws. Learn about the March 2026 amendment, 10% turnover penalties, CEO accountability, PIPC enforcement, data subject rights, and cross-border transfer rules.
Compare South Korea's PIPA and the EU GDPR on criminal penalties, RRN rules, PIPC transfer-suspension power, and the 2026 penalty ceiling change.
Spain enforces data privacy through the GDPR, the LOPDGDD (Organic Law 3/2018), and the highly active AEPD. Covers digital rights, AESIA/AI Act, biometric enforcement, penalties up to 20M euros, and 2025-2026 developments.
Sprouts Farmers Market's $5M FACTA receipt settlement is open. Claims are due August 5, 2026. See who's eligible, what proof is needed, and how to file.
Complete guide to Sri Lanka data privacy laws. Covers the PDPA No. 9 of 2022, Amendment Act No. 22 of 2025, the Data Protection Authority, enforcement timeline, data subject rights, penalties, and cross-border transfers.
Complete guide to EU Standard Contractual Clauses: the 2021 modular SCCs, Transfer Impact Assessments, supplementary measures, the pending Article 3(2) SCCs, UK IDTA, and 2024-2026 enforcement.
The $2.95M STIIIZY data breach settlement is open. Claims are due September 10, 2026. See who is covered and what a realistic payout looks like.
The Sun Pharma/Taro $200M generic-drug price-fixing settlement is approved and open; the claim deadline is November 9, 2026.
SunTrust's $240M overdraft fee settlement won final court approval in May 2026. Georgia customers can file a claim through September 14, 2026.
On June 29, 2026, the Supreme Court held 6 to 3 in Trump v. Slaughter that FTC commissioners can be removed at will, overruling Humphrey's Executor (1935) and unsettling agency independence.
Sweden enforces GDPR through the Data Protection Act (2018:218) and IMY. Covers constitutional exemptions, offentlighetsprincipen, enforcement cases, penalties, AI Act overlay, and compliance requirements.
Complete guide to Switzerland's revised Federal Act on Data Protection (nFADP/revDSG), in force September 1, 2023. Covers FDPIC enforcement, CHF 250,000 individual criminal penalties, cross-border transfers, Swiss-US DPF, and 2025-2026 developments.
T-Mobile's $350M breach settlement mostly paid out by May 2025, but a second residual distribution from leftover funds is still pending in 2026.
Taiwan PDPA guide: the November 2025 amendments establish the Personal Data Protection Commission (PDPC), mandatory breach notification, strengthened fines, and new DPO requirements.
Tanzania's Personal Data Protection Act 2022 is now actively enforced. Full guide: PDPC, data subject rights, DPO requirements, Zanzibar rules, penalties up to TZS 5 billion, and compliance steps.
Ten-step TDPSA compliance checklist: SBA applicability self-test, entity and data exemptions, sensitive data opt-in consent, mandatory verbatim sale notices, data protection assessments, processor contracts, universal opt-out, and Texas AG enforcement.
Texas residents have 6 TDPSA rights: access, correct, delete, portability, opt-out, and appeal. Learn how to submit requests, use GPC, and file a TX AG complaint.
Tennessee biometric privacy law guide covering TIPA sensitive data consent rules, consumer rights, AG enforcement penalties, and the pending biometric data protection act.
Tennessee requires data breach notification within 45 days under Tenn. Code 47-18-2107. Learn about the private right of action, FIPS 140-2 encryption safe harbor, and CRA reporting at 1,000+.
Tennessee Information Protection Act (TIPA) gives consumers opt-out rights for data sales and targeted ads. Learn about TIPA thresholds, penalties up to $7,500, the NIST defense, and breach notification rules.
The Teva QVAR inhaler antitrust settlement's $35M fund has a claim deadline of July 31, 2026. See who may be eligible and how filing works.
Texas AG Paxton opened a data-breach investigation into Carnival and issued a Civil Investigative Demand on June 23, 2026. An investigation, not a finding.
Texas CUBI law requires consent before capturing fingerprints, face scans, or voiceprints. Penalties up to $25,000 per violation. The AG has secured over $2.7 billion in settlements.
Texas requires breach notification within 60 days to individuals and 30 days to the AG. Penalties reach $50,000 per violation under the DTPA.
Learn about Texas data privacy laws including the TDPSA, biometric identifier protections, data breach notification rules, and your consumer rights under Texas law.
Thailand's PDPA governs personal data collection, use, and transfer. Updated 2026 guide: PDPC enforcement record, the 2024 first fine and 2025 wave, the Emergency Decree on Technology Crimes, BCR framework, data subject rights, DPO requirements, and penalties.