International Laws
120 articles · page 1 of 2
A
Argentina Data Privacy Laws: PDPL Compliance Guide (2026)
Argentina's Personal Data Protection Law (Ley 25.326) governs data privacy with EU adequacy status confirmed January 2024. Covers AAIP enforcement, habeas data, Ley Olimpia, pending GDPR reform, and 2024-2026 developments.
Australia Data Privacy Laws: Privacy Act, APPs & 2026 Reforms
Australia's Privacy Act 1988: the 13 APPs, OAIC penalties, the statutory privacy tort (in force June 2025), the NDB scheme and the 2024 to 2026 reforms. Verified September 2026.
Austria Data Privacy Laws: GDPR & DSG Guide (2026)
Austria enforces data privacy through the GDPR and DSG (Datenschutzgesetz). Learn about DSB enforcement, constitutional rights, AI Act rules, penalties, and breach rules.
B
Bahrain Data Privacy Laws: PDPL Law No. 30 of 2018 Complete Guide (2026)
Bahrain PDPL (Law No. 30 of 2018): the ten 2022 Ministry of Justice Orders, the 72-hour breach rule in Order 43, the transfer list that omits Qatar, and Article 58 penalties.
Bangladesh Data Privacy Laws: The Personal Data Protection Act 2026
Bangladesh's Personal Data Protection Act 2026 (Act 63 of 2026) replaced the 2025 ordinance on 10 April 2026. Consent, data subject rights, cross-border transfer and administrative fines.
Belgium Data Privacy Laws: GDPR Implementation Guide (2026)
Belgium enforces data privacy through GDPR, the Law of 30 July 2018, and Article 22 of the Constitution. APD/GBA fines, AI Act (BIPT), breach rules, and 2025-2026 decisions.
Bermuda Data Privacy Laws: PIPA Compliance Guide (2026)
Guide to Bermuda Personal Information Protection Act covering consent, data subject rights, Privacy Commissioner enforcement, and cross-border rules.
Brazil Data Privacy Laws: LGPD Compliance Guide (2026)
Complete guide to Brazil's LGPD data privacy law. Covers the 10 legal bases, ANPD enforcement, penalties up to BRL 50M, EU adequacy decision, and compliance requirements.
Bulgaria Data Privacy Laws: GDPR & PDPA Complete Guide (2026)
Bulgaria enforces GDPR through the ZZLD (amended Aug 2024), supervised by the CPDP. Covers EGN protection, NRA breach, EU AI Act, NIS2, Schengen SIS, and compliance steps.
C
Chile Data Privacy Laws: Ley 21.719 Reform, New Agency, and December 2026 Entry into Force
Complete guide to Chile data privacy laws: Ley 21.719 (2024) rewrites and renames Ley 19.628, creates the Agencia de Protección de Datos Personales, GDPR-aligned rights, penalties up to 20,000 UTM, and enforcement from December 2026.
China Cross-Border Data Transfer Rules: CAC Security Assessment, Standard Contract, and Certification
How China's PIPL cross-border transfer regime works: the three legal mechanisms, exact CAC Order 16 thresholds, and how to choose the right one.
China Data Privacy Laws: PIPL, CSL & DSL Compliance Guide (2026)
China's PIPL, amended Cybersecurity Law (Jan 2026), and Data Security Law: consent rules, cross-border transfers, PIPL fines up to CNY 50 million or 5% of revenue.
Colombia Data Privacy Laws: Law 1581 and Habeas Data Guide (2026)
Colombia protects personal data through constitutional habeas data rights and Ley 1581 of 2012. Covers SIC enforcement, RNBD, cross-border transfers, the Worldcoin shutdown, and the archived 2025 reform bills.
Cookie Consent Laws by Country: Complete Guide (2026)
Country-by-country guide to cookie consent requirements: the EU ePrivacy + GDPR opt-in model, the UK DUAA 2025 changes, the US state-law patchwork, and 30+ other jurisdictions including Brazil, China, India, and Australia.
Costa Rica Data Privacy Laws: Ley 8968 and PRODHAB Compliance Guide (2026)
Costa Rica data privacy law explained: Ley 8968, PRODHAB authority, constitutional basis, consent, data subject rights, database registration, cross-border transfers, penalties, and 2026 reform status.
Croatia Data Privacy Laws: GDPR, AZOP Enforcement & Compliance Guide (2026)
Croatia enforces GDPR through the Act on Implementation (NN 42/2018) and AZOP, which imposed EUR 6.7M in fines during 2025. Learn constitutional basis, OIB protections, cross-border transfer rules, EU AI Act overlay, and compliance steps.
Cyprus Data Privacy Laws: GDPR, Law 125(I)/2018 and OCPDP Guide (2026)
Cyprus data privacy law explained: GDPR + Law 125(I)/2018, OCPDP enforcement, constitutional basis, DPO rules, cross-border transfers, EU AI Act, and 2024-2026 fines.
Czech Republic Data Privacy Laws: GDPR, Act 110/2019 & ÚOOÚ Guide (2026)
Czech Republic data privacy laws: GDPR plus Act No. 110/2019 Coll., the UOOU, the Avast fine quashed and remitted in 2025, public body fine exemptions, EU AI Act status, and 2026 developments.
D
Data Breach Notification Deadlines by Country (2026 Comparison Table)
Verified data breach notification deadlines for 45+ countries: regulator vs. individual notice, split out, with the errors most trackers get wrong.
Data Localization Laws by Country (2026)
Data localization laws by country: China, Russia, India, Vietnam, Indonesia, Saudi Arabia, Nigeria and the EU, with 2024-2026 changes explained.
Data Protection Officer Requirements by Country (2026)
Complete guide to DPO requirements worldwide. Covers GDPR Articles 37-39 triggers, EDPB guidelines, and DPO-equivalent rules in Brazil, China, Singapore, Malaysia, India, South Korea, UAE, and more.
Data Retention Laws by Country (2026): GDPR, CJEU and Global Rules
Data retention law has two meanings: the GDPR storage-limitation principle (keep no longer than necessary) and mandatory telecom metadata laws. Compare rules across 14 countries including CJEU case law through 2024.
Denmark Data Privacy Laws: GDPR, Datatilsynet & AI Act Guide (2026)
Denmark GDPR guide: Datatilsynet cannot fine directly, so penalties go through the courts or section 42 fine notices. Age of consent 15, CPR rules, 2025 to 2026 cases.
Does GDPR Apply to US Companies? Article 3 Explained (2026)
GDPR applies to US companies that target or monitor people in the EU under Article 3(2). Learn the scope test, EU representative rule, and how to comply.
DPDP Act Implementation Status: What Is Actually Live (2026 Tracker)
Live tracker of India's DPDP Act commencement: what's in force now, what's coming in 2026-2027, the unstaffed Data Protection Board, and CERT-In overlap.
E
Ecuador Data Privacy Laws: LOPDP Compliance Guide (2026)
Ecuador's LOPDP: two-tier fines capped at 1% of turnover, the SPDP's four football sanctions, DPO triggers, breach notice to SPDP and ARCOTEL, transfers.
EDPB Smart Glasses Statement: GDPR Applies, Indicators Fall Short
The EDPB adopted Statement 1/2026 on smart glasses on 13 October 2026: the GDPR applies, and makers cannot push bystander transparency onto wearers.
Egypt Data Privacy Laws: PDPL Law 151/2020 and the 2025 Executive Regulations
Egypt's Personal Data Protection Law No. 151 of 2020 and Ministerial Decree 816/2025 (Executive Regulations): the PDPC licensing regime and fees, six data subject rights, cross-border transfer consent, breach notice in three working days, criminal penalties, and the 1 November 2026 compliance deadline.
Estonia Data Privacy Laws: GDPR, PDPA, and AKI Enforcement (2026)
Estonia enforces data privacy through the EU GDPR and the Personal Data Protection Act (2019). Learn about AKI enforcement, the EUR 3 million Apotheka fine, constitutional rights, e-Estonia context, and business compliance obligations.
EU Adequacy Decisions: Full Country List and 2026 Updates
The 17 countries and bodies with EU adequacy, including Brazil (2026), the UK renewal to 2031, Korea's 2026 review and the Latombe appeal against the DPF.
EU AI Act and Data Privacy: GDPR Intersection Explained
EU AI Act bans social scoring, facial scraping, and workplace emotion recognition since Feb 2025. Layers onto GDPR, demands FRIAs, and carries EUR 35M fines.
EU Cookie Law (ePrivacy Directive) Explained (2026)
EU ePrivacy Directive cookie law: consent rules, the strictly-necessary exemption, the GDPR overlap, the withdrawn ePrivacy Regulation and Digital Omnibus plans.
EU Data Privacy Laws: GDPR, AI Act & the 2025-2026 Digital Reforms
Complete guide to EU data privacy law: the GDPR framework across 27 member states, the EU AI Act phased timeline, the ePrivacy Directive, the withdrawn ePrivacy Regulation, the 2025 GDPR Procedural Regulation, the November 2025 Digital Omnibus proposal, and the wider digital rulebook.
EU-US Data Privacy Framework: Complete Guide (2026)
EU-US Data Privacy Framework guide: self-certification, the Data Protection Review Court, the Latombe appeal (C-703/25 P), PCLOB litigation and the SCC fallback.
F
Finland Data Privacy Laws: GDPR, Finnish Data Protection Act & Enforcement (2026)
Finland data privacy guide: GDPR, Data Protection Act 1050/2018, workplace privacy, Act 1377/2025 AI supervision, DPO enforcement, 2024-2026 fines, and compliance tips.
France Data Privacy Laws: GDPR & CNIL Compliance Guide (2026)
France enforces data privacy through GDPR and the Loi Informatique et Libertés. Learn about CNIL fines, cookie rules, breach notification, AI Act, and penalties.
G
GDPR Compliance Checklist 2026: Step-by-Step Guide
GDPR compliance checklist: data mapping, lawful bases, notices, DPIAs, breaches, DPOs, AI Act duties, and the pending Omnibus IV and Digital Omnibus reforms.
GDPR Consent Requirements: What Counts as Valid Consent (2026)
What valid GDPR consent requires: the four Article 4(11) elements, Article 7 rules on proof and withdrawal, children's ages by country, cookies and consent-or-pay.
GDPR Data Breach Notification: 72-Hour Rule Explained (2026)
Complete guide to GDPR Articles 33 and 34 breach notification: the 72-hour rule, what counts as a personal data breach, processor duties, EDPB Guidelines 9/2022, enforcement cases, and how the clock starts.
GDPR Data Processing Agreement (DPA): Article 28 Explained (2026)
GDPR Article 28 requires a written DPA with every processor. Learn the 8 mandatory clauses, sub-processor rules, and consequences of non-compliance.
GDPR Data Subject Rights Explained: All Eight Rights (2026)
Eight GDPR data subject rights under Chapter III, from access and erasure to portability and automated decisions, with timelines, exemptions and 2026 enforcement.
GDPR DPIA: When Is a Data Protection Impact Assessment Required? (2026)
GDPR Article 35 requires a DPIA before high-risk processing. Learn when it is mandatory, what it must contain, and when to consult your supervisory authority.
GDPR DPO Requirements: Do You Need a Data Protection Officer? (2026)
GDPR Articles 37-39 explained: the 3 mandatory DPO triggers, tasks, independence rules, conflict-of-interest bar, and fines for non-compliance.
GDPR Fines and Penalties: Latest Enforcement Tracker (2026)
GDPR fines explained: the record EUR 1.2B Meta fine, 2026's EUR 825M Uber and EUR 403M Google fines, Article 83's two tiers, and how regulators set amounts.
GDPR for Small Businesses: Compliance Guide for SMEs (2026)
GDPR compliance for small businesses: what applies, the Article 30(5) records derogation, when a DPO is needed, the agreed Omnibus IV reform and low-cost steps.
GDPR International Data Transfers: SCCs & Adequacy (2026)
GDPR Chapter V bars EU data transfers abroad without a valid mechanism. Learn adequacy, SCCs, BCRs, derogations, and Schrems II in plain English.
GDPR Right to Be Forgotten: Article 17 Erasure (2026)
GDPR Article 17 gives you the right to demand erasure of personal data in 6 grounds. Learn the exceptions, Google Spain ruling, and how to make a request.
GDPR Subject Access Requests (DSAR): How to Respond (2026)
Learn how to respond to a GDPR DSAR under Article 15: the one-month deadline, what data to provide, fees, refusals, and a step-by-step response workflow.
GDPR vs CCPA: Key Differences Explained (2026)
GDPR vs CCPA/CPRA compared: scope, opt-in vs opt-out, consumer rights, penalties, breach deadlines, enforcement and the 2026 ADMT and risk-assessment rules.
GDPR vs LGPD: EU vs Brazil Privacy Law Comparison (2026)
GDPR vs Brazil's LGPD: 6 vs 10 legal bases, fines, data subject rights, ANPD vs EU DPAs, the 3-business-day breach rule and the 2026 EU-Brazil adequacy decision.
GDPR vs PIPL: EU and China Data Privacy Laws Compared (2026)
Side-by-side comparison of GDPR and China's PIPL: scope, legal bases, individual rights, penalties, cross-border transfers, and 2025-2026 regulatory updates.
GDPR vs UK GDPR: How the Data (Use and Access) Act 2025 Is Creating Real Divergence
The EU GDPR and UK GDPR started identical after Brexit. The Data (Use and Access) Act 2025, in force February 2026, has introduced recognised legitimate interests, new ADM rules, SAR stop-the-clock, and cookie exemptions. The EU renewed UK adequacy through December 2031.
Germany Data Privacy Laws: GDPR, BDSG & Enforcement Guide (2026)
Germany enforces the EU GDPR through the BDSG, 17 supervisory authorities, and a constitutional right to informational self-determination. Full guide to compliance, DPO rules, employee data, AI Act overlay, and enforcement.
Ghana Data Privacy Laws: Data Protection Act 2012 (Act 843) Complete Guide (2026)
Complete guide to Ghana data privacy laws: the Data Protection Act 2012 (Act 843), the Data Protection Commission, mandatory registration, data subject rights, section 31 breach notification, penalties, and the draft Data Protection Bill 2025 that would modernize the framework.
Greece Data Privacy Laws: GDPR, Law 4624/2019 & HDPA Guide (2026)
Greece data privacy laws explained: GDPR implementation via Law 4624/2019, Hellenic Data Protection Authority enforcement, Clearview AI fine, Predatorgate, EU AI Act, cookies, and compliance tips.
H
Hong Kong Data Privacy Laws: Complete PDPO Compliance Guide (2026)
Complete guide to Hong Kong's Personal Data (Privacy) Ordinance (PDPO, Cap. 486): six Data Protection Principles, 2021 anti-doxxing regime, breach handling, cross-border transfer rules, AI guidance, and 2026 reform proposals.
Hungary Data Privacy Laws: GDPR, NAIH Enforcement & Compliance Guide (2026)
Hungary data privacy law explained: GDPR + Info Act CXII of 2011, NAIH enforcement, AI Act overlay, cross-border transfers, DPO rules, penalties up to EUR 20 million.
I
Iceland Data Privacy Laws: GDPR via EEA, Act No. 90/2018, and Persónuvernd (2026 Guide)
Iceland applies the GDPR through the EEA Agreement and Act No. 90/2018. Learn how Persónuvernd enforces data protection, what fines apply, and how businesses must comply.
India Data Privacy Laws: DPDP Act 2023 and DPDP Rules 2025 Complete Guide
India's Digital Personal Data Protection Act 2023 and the DPDP Rules notified November 2025 form the country's first comprehensive data protection regime. This guide covers consent, Data Principal rights, the Data Protection Board, penalties up to INR 250 crore, cross-border transfers, and the phased compliance timeline to May 2027.
India DPDP Act vs GDPR: What Is Actually In Force (2026)
India's DPDP Act is mostly not yet operative. Full commencement timeline, Consent Managers, rights gaps, and CERT-In vs DPDP breach rules vs GDPR.