International Laws
120 articles · page 2 of 2
I
Indian Man Arrested for AI Deepfake Images of Ex-Girlfriend
Man arrested in Assam, India for using AI tools to create explicit deepfake images of his ex-girlfriend and selling access online. Indian deepfake laws explained.
Indonesia Data Privacy Laws: Complete UU PDP Compliance Guide (2026)
Indonesia's UU PDP (Law 27/2022): Lembaga PDP status, Government Regulation 33/2026, data subject rights, 72-hour breach notice, transfers and penalties.
Indonesia's PDP Law vs GDPR: What's Actually In Force (2026)
Indonesia's UU PDP vs GDPR: what is in force, PP 33/2026 (effective January 2027), the missing PDP agency, transfers, breach rules and penalties.
Ireland Data Privacy Laws: GDPR, DPC Enforcement & Your Rights (2026)
Ireland's data protection law: the DPC, the Data Protection Act 2018, record GDPR fines including Meta and Google, AI Act duties and your rights.
Israel Data Privacy Laws: Complete Guide to the PPL and Amendment 13 (2026)
Complete guide to Israel data privacy laws. Covers the Protection of Privacy Law 1981, Amendment 13 (effective August 14, 2025), PPA enforcement, EU adequacy renewal, DPO requirements, and compliance.
Italy Data Privacy Laws: GDPR, Privacy Code & Garante Guide (2026)
Italy enforces data privacy through the GDPR, the Privacy Code (D.Lgs. 196/2003), and the Garante. Covers Law 132/2025 AI law, criminal penalties, Enel EUR 79M fine, and 2025-2026 enforcement.
J
Jamaica Data Privacy Laws: Data Protection Act 2020 Complete Guide (2026)
Complete guide to Jamaica's Data Protection Act 2020 -- the OIC, eight data protection standards, phased commencement, registration, data subject rights, breach notification, cross-border transfers, and penalties.
Japan APPI vs GDPR: Key Differences Compared (2026)
How Japan's APPI differs from GDPR: the Article 27 opt-out transfer regime, pseudonymization tiers, EU/UK Supplementary Rules, and the 2026 reform.
Japan Data Privacy Laws: Complete APPI Guide (2026)
Japan's APPI governs personal data with mandatory breach reporting, cross-border transfer rules, and EU mutual adequacy. The January 2026 PPC reform policy introduces administrative fines for the first time, with implementation expected by 2028.
K
Kenya Data Privacy Laws: DPA 2019, ODPC Enforcement, and 2026 Compliance Guide
Kenya enforces data privacy through the Data Protection Act 2019 and the ODPC. Learn about the registration regime, data subject rights, 72-hour breach notification, cross-border transfer rules, and ODPC enforcement actions including KES 26M+ in fines through 2024.
L
Latvia Data Privacy Laws: GDPR, DVI Enforcement & Compliance Guide (2026)
Latvia data privacy laws explained: GDPR + Personal Data Processing Law, DVI enforcement (EUR 1.2M TET fine upheld 2024, EUR 300K ZZ Dats fine 2025), EU AI Act overlay, criminal penalties, and compliance steps.
Liechtenstein Data Privacy Laws: GDPR via EEA, DSG & Datenschutzstelle (2026)
Complete guide to Liechtenstein data protection: GDPR via EEA, the 2018 Data Protection Act (DSG), Datenschutzstelle enforcement, DPO rules, financial sector compliance, blockchain, AI Act, and 2024–2026 updates.
Lithuania Data Privacy Laws: GDPR, VDAI Enforcement & Compliance Guide (2026)
Lithuania implements GDPR through its 2018 Law on Legal Protection of Personal Data. Learn about the VDAI, the EUR 2.4M Vinted fine, constitutional basis, data subject rights, DPO requirements, cross-border transfers, the EU AI Act overlay, and 2024-2025 enforcement trends.
Luxembourg Data Privacy Laws: GDPR, CNPD & the Amazon Fine (2026)
Luxembourg data privacy laws explained: GDPR implementation, Law of 1 August 2018, CNPD enforcement powers, the EUR 746M Amazon fine and its annulment on appeal, EU AI Act, financial sector rules, and 2024-2026 developments.
M
Malaysia Data Privacy Laws: PDPA 2010 Compliance Guide (2026)
Malaysia's PDPA 2010 (Act 709) and 2024 amendments: JPDP enforcement, 7 data protection principles, breach notification, DPOs and penalties up to RM 1 million.
Malaysia PDPA vs GDPR: Government Exemption, Scope & 2025 Amendments
How Malaysia's PDPA differs from the GDPR: the government exemption, narrower scope, the 2024 Amendment Act, and penalties through 2025.
Malta Data Privacy Laws: Cap. 586 and GDPR Guide (2026)
Malta data privacy laws: GDPR, Cap. 586, and IDPC enforcement. Covers the age-13 digital consent rule, iGaming sector compliance, EU AI Act designation, and cross-border transfer rules.
Mexico Data Privacy Laws: 2025 LFPDPPP Complete Guide
Mexico replaced its 2010 data privacy law in March 2025: new LFPDPPP, INAI dissolved, SABG enforces. ARCO rights, fines up to MXN 37.5M, transfers explained.
Morocco Data Privacy Laws: Law 09-08, CNDP & Compliance Guide (2026)
Morocco data protection under Law 09-08: CNDP registration rules, constitutional basis, legal bases, data subject rights, cross-border transfers, penalties, and 2025-2026 developments.
N
Netherlands Data Privacy Laws: GDPR, UAVG & AP Guide (2026)
Netherlands data privacy law: GDPR, the UAVG as amended in 2026, AP enforcement including Uber's EUR 825M fine, breach rules, DPOs and the EU AI Act.
New Zealand Data Privacy Laws: Privacy Act 2020 Complete Guide (2026)
New Zealand Privacy Act 2020: 13 IPPs, IPP 3A indirect-collection rule (May 2026), Biometric Code 2025, breach notification, IPP 12 cross-border transfer, and enforcement powers.
Nigeria Data Privacy Laws: NDPA 2023 and GAID 2025 Compliance Guide
Complete guide to Nigeria data privacy laws: the NDPA 2023, GAID 2025, NDPC enforcement, DCPMI registration, data subject rights, breach notification, penalties up to 2% annual revenue.
Norway Data Privacy Laws: GDPR via the EEA, Personal Data Act, and Datatilsynet (2026)
Norway applies the full GDPR through the EEA Agreement. The Personal Data Act 2018 supplements it with national rules. Datatilsynet enforces with fines up to EUR 20 million. Updated 2026.
P
Pakistan Data Privacy Laws: PECA and Personal Data Protection Bill Guide (2026)
Pakistan has no enacted data protection law as of 2026. PECA 2016 (amended January 2025) and sector rules apply. Full guide to the pending Personal Data Protection Bill.
Panama Data Privacy Laws: Law 81 and Executive Decree 285 Compliance Guide
Panama's Law 81 of 2019 and Executive Decree 285 of 2021 govern personal data protection. Learn about ANTAI oversight, ARCO rights, consent rules, cross-border transfers, sectoral rules, penalties, and 2025 updates.
Peru Data Privacy Laws: Law 29733, DS 016-2024-JUS & 2025 Regulation Guide
Peru data privacy law explained: Law 29733, DS 016-2024-JUS (March 2025), DPO requirements, 48-hour breach notification, ARCO-PD rights, penalties up to 100 UIT. Updated May 2026.
Philippines Data Privacy Act of 2012 (RA 10173): Complete Guide (2026)
The Philippines Data Privacy Act of 2012 (RA 10173) explained: NPC registration and enforcement, data subject rights, breach notification and the IRR.
Philippines DPA vs GDPR: Key Differences Compared (2026)
How the Philippines' Data Privacy Act differs from GDPR: criminal imprisonment for 8 offenses, mandatory NPC registration, and BPO extraterritorial reach.
PIPEDA and Canada's Data Privacy Laws: 2026 Guide
PIPEDA, Canada's federal privacy law, explained alongside Quebec Law 25 and the Alberta and BC PIPAs: who each covers, breach reporting, penalties and the Bill C-36 reform.
Poland Data Privacy Laws: GDPR, UODO & 2026 Guide
Complete guide to Poland data privacy laws: EU GDPR, the Polish Personal Data Protection Act 2018, UODO enforcement record, constitutional basis, penalties, breach notification, and 2024-2026 developments.
Portugal Data Privacy Laws: GDPR, Lei 58/2019, and CNPD Enforcement Guide (2026)
Portugal data privacy law explained: GDPR implementation via Lei 58/2019, the CNPD supervisory authority, constitutional basis in Article 35, the 2019 deliberation disapplying national provisions, penalties up to €20M, and 2024–2026 enforcement.
Q
Qatar Data Privacy Laws: PDPPL Law No. 13 of 2016 and QFC Regulations Guide (2026)
Complete guide to Qatar data privacy laws: Law No. 13 of 2016 (PDPPL), the NCSA/CDP supervisory authority, the QFC Data Protection Regulations 2021, data subject rights, breach notification, cross-border transfers, and penalties up to QAR 5 million.
R
Romania Data Privacy Laws: GDPR, Law 190/2018 and ANSPDCP Guide (2026)
Complete guide to Romania data privacy laws: GDPR implementation via Law 190/2018, ANSPDCP enforcement, public authority fine caps, employee monitoring rules, biometric data restrictions, EU AI Act overlap, and 2024–2025 enforcement actions.
Russia Data Privacy Laws: Federal Law 152-FZ, Penalties & 2025 Changes
Complete guide to Russia's data privacy laws: Federal Law 152-FZ, Roskomnadzor enforcement, data localization (242-FZ), the 2025 fine increases under 420-FZ (up to 500M rubles), new criminal liability under 421-FZ (up to 10 years), breach notification, and SORM surveillance.
S
Saudi Arabia Data Privacy Laws: PDPL Compliance Guide (2026)
Saudi Arabia's PDPL (Royal Decrees M/19 and M/148): SDAIA enforcement, data subject rights, 72-hour breach notice, fines up to SAR 5M and cross-border transfers.
Saudi Arabia Data Transfers and Localization: The PDPL Transfer Process
How Saudi Arabia's PDPL Data Transfer Regulation governs outbound data: the localization myth, SCCs, risk assessments, and penalties.
Saudi PDPL vs. GDPR: Registration, Transfers, and Penalties Compared
Compare Saudi Arabia's PDPL to the GDPR: controller registration, the missing adequacy list, rights gaps, and criminal penalties.
Singapore Data Privacy Laws: Complete PDPA Compliance Guide (2026)
Singapore PDPA: the 11 data protection obligations, mandatory DPO, breach notification, penalties up to 10% of turnover, and data portability status in 2026.
Slovakia Data Privacy Laws: GDPR Implementation Guide (2026)
Slovakia enforces data privacy through GDPR and Act No. 18/2018, overseen by the UOOU. Learn about birth number protections, enforcement, the EU AI Act overlay, and NIS2 compliance.
Slovenia Data Privacy Laws: GDPR, ZVOP-2, and the Information Commissioner (2026)
Slovenia was the last EU member state to adopt a GDPR implementing law. Learn how ZVOP-2 (in force January 2023), the Information Commissioner, Article 38 constitutional protection, biometric restrictions, processing logs, and the EU AI Act shape compliance in Slovenia.
South Africa Data Privacy Laws: The POPIA Guide (2026)
South Africa's POPIA vs the GDPR: correct commencement dates, the eight conditions, juristic person coverage, and real 2026 Information Regulator enforcement.
South Korea Data Privacy Laws: PIPA Compliance Guide (2026)
South Korea's PIPA: the 2026 amendment's 10% penalty tier, CEO accountability, PIPC enforcement, data subject rights and cross-border transfer rules.
South Korea PIPA vs GDPR: Criminal Penalties, RRN Rules, and Cross-Border Transfer Powers Compared (2026)
Compare South Korea's PIPA and the EU GDPR on criminal penalties, RRN rules, PIPC transfer-suspension power, and the 2026 penalty ceiling change.
Spain Data Privacy Laws: GDPR, LOPDGDD & AEPD Enforcement Guide (2026)
Spain enforces data privacy through the GDPR, the LOPDGDD (Organic Law 3/2018), and the highly active AEPD. Covers digital rights, AESIA/AI Act, biometric enforcement, penalties up to 20M euros, and 2025-2026 developments.
Sri Lanka Data Privacy Laws: PDPA No. 9 of 2022 Complete Guide (2026)
Complete guide to Sri Lanka data privacy laws. Covers the PDPA No. 9 of 2022, Amendment Act No. 22 of 2025, the Data Protection Authority, enforcement timeline, data subject rights, penalties, and cross-border transfers.
Standard Contractual Clauses (SCCs) Explained (2026)
EU Standard Contractual Clauses explained: the four 2021 modules, transfer impact assessments, the planned Article 3(2) SCCs, the UK IDTA and recent enforcement.
Sweden Data Privacy Laws: GDPR, the Swedish Data Protection Act, and IMY (2026)
Sweden enforces GDPR through the Data Protection Act (2018:218) and IMY. Covers constitutional exemptions, offentlighetsprincipen, enforcement cases, penalties, AI Act overlay, and compliance requirements.
Switzerland Data Privacy Laws: Federal Act on Data Protection (nFADP) Compliance Guide
Complete guide to Switzerland's revised Federal Act on Data Protection (nFADP/revDSG), in force September 1, 2023. Covers FDPIC enforcement, CHF 250,000 individual criminal penalties, cross-border transfers, Swiss-US DPF, and 2025-2026 developments.
T
Taiwan Data Privacy Laws: PDPA in Force, PDPC Still Pending
Taiwan PDPA guide: the rules in force today, and why the November 2025 amendments and the Personal Data Protection Commission are still pending.
Tanzania Data Privacy Laws: PDPA 2022 Guide (2026)
Tanzania's Personal Data Protection Act 2022 is actively enforced, with PDPC on-site inspections since August 2026. Guide to registration, DPO duties, statutory penalties, Zanzibar rules, and cross-border transfers.
Thailand Data Privacy Laws: PDPA Compliance Guide (2026)
Thailand's PDPA governs personal data collection, use, and transfer. Updated 2026 guide: PDPC enforcement record, the 2024 first fine and 2025 wave, the Emergency Decree on Technology Crimes, BCR framework, data subject rights, DPO requirements, and penalties.
Tunisia Data Privacy Laws: Organic Law 2004-63 and the 2025 Reform
Complete guide to Tunisia data protection law: Organic Law 2004-63, the INPDP authority, registration and authorization rules, Convention 108+, cross-border transfers, penalties, and the 2025 GDPR-alignment reform bill.
Turkey Data Privacy Laws: KVKK, Law 7499 & 2024 Cross-Border Transfer Reform
Turkey's KVKK (Law No. 6698) governs personal data protection. Law No. 7499 (June 2024) overhauled cross-border transfers and special-category rules. Learn about SCCs, adequacy decisions, VERBIS, 2026 fines up to 17M TRY, and KVKK Board enforcement.
U
UAE Data Privacy Laws: Federal PDPL, DIFC & ADGM Guide (2026)
Complete guide to UAE data privacy laws: federal PDPL (Decree-Law 45/2021), DIFC Data Protection Law 2020, ADGM Regulations 2021, penalties, cross-border transfers, and 2025-2026 developments.
UAE PDPL vs. GDPR: Federal Law, DIFC, and ADGM Compared
The UAE has three data protection regimes, not one. Compare GDPR against the federal PDPL, DIFC law, and ADGM Regulations side by side.
UK Data Privacy Laws: UK GDPR, DPA 2018 & 2025 Reforms
Complete 2026 guide to UK data privacy laws: UK GDPR, Data Protection Act 2018, the Data Use and Access Act 2025 (DUAA) reforms, ICO enforcement, EU adequacy renewed to 2031, and PECR cookie changes.
Ukraine Data Privacy Laws: Personal Data Protection, Draft Law 8153, and the GDPR Reform (2026)
Complete guide to Ukraine's data privacy laws: the 2010 Law on Personal Data Protection, the Ombudsperson as supervisory authority, Draft Law 8153 and its GDPR-alignment status, EU accession obligations, cross-border transfer rules, martial-law context, and penalties.
Uruguay Data Privacy Laws: Law 18.331, URCDP, and EU Adequacy (2026)
Complete guide to Uruguay data privacy laws: Law 18.331, Decree 414/009, DPO rules, 72-hour breach notification, EU adequacy reaffirmed 2024, Convention 108+, and URCDP enforcement.
V
Vietnam Data Privacy Laws: Personal Data Protection Law 2025 Complete Guide
Complete guide to Vietnam data privacy laws. Covers Law No. 91/2025/QH15 (effective January 1, 2026), Decree 356, cross-border transfers, data subject rights, and penalties.
W
What Is GDPR? Complete Guide to EU Data Protection (2026)
GDPR is the EU data protection law. Learn the 7 principles, your data subject rights, who must comply, and fines up to EUR 20M or 4% of global turnover.