Global Privacy & AI Law Directory
A comprehensive database of 196+ privacy and AI laws from around the world.
Showing 167 of 167 privacy laws
Law | Region | Country | Year | Status | Max Penalty |
|---|---|---|---|---|---|
LPPD Algerian Law on Protection of Personal Data | Africa |  Algeria | 2018 | Active | DZD 2M |
PDPL Angolan Personal Data Protection Law | Africa |  Angola | 2022 | Active | 4% of revenue |
PDPL Argentine Personal Data Protection Law | South America |  Argentina | 2000 | Active | Up to 100,000 pesos |
Privacy Act Australian Privacy Act | Pacific |  Australia | 1988 | Active | AUD$2.22M |
DSG Austrian Data Protection Act | Europe |  Austria | 2018 | Active | €20M or 4% of global revenue |
LPD Azerbaijan Law on Personal Data | Asia |  Azerbaijan | 2010 | Active | AZN 50,000 |
DPA Bahamas Data Protection Act | Caribbean |  Bahamas | 2003 | Active | BSD 100,000 |
PDPL Bahrain Personal Data Protection Law | Middle East |  Bahrain | 2018 | Active | BD 20,000 |
DPA Bangladesh Data Protection Act | Asia |  Bangladesh | 2023 | Active | BDT 50M |
DPA Barbados Data Protection Act | Caribbean |  Barbados | 2019 | Active | BBD$500,000 |
PDPL Belarusian Law on Personal Data Protection | Europe |  Belarus | 2021 | Active | BYN 200,000 |
DPA Belgian Data Protection Act | Europe |  Belgium | 2018 | Active | €20M or 4% of global revenue |
DPL Benin Digital Code | Africa |  Benin | 2018 | Active | XOF 50M |
PIPA Bermuda Personal Information Protection Act | Caribbean |  Bermuda | 2016 | Active | BMD 250,000 |
PDPL Bolivian Personal Data Protection Law | South America |  Bolivia | 2024 | Pending | Up to 5% of revenue |
LGPD Brazilian General Data Protection Law | South America |  Brazil | 2020 | Active | 2% of revenue up to R$50M |
PDPO Brunei Personal Data Protection Order | Asia |  Brunei | 2016 | Active | BND 40,000 |
PDPA Bulgarian Personal Data Protection Act | Europe |  Bulgaria | 2019 | Active | €20M or 4% of global revenue |
PDPL Cambodian Personal Data Protection Law | Asia |  Cambodia | 2024 | Pending | To be determined |
LCSCC Cameroonian Law on Cyber Security and Cyber Crime | Africa |  Cameroon | 2010 | Active | XAF 100M |
Law 25 Quebec Act on Personal Information Protection | North America |  Canada | 2021 | Active | CAD$25M or 4% of global revenue |
PIPEDA Canadian Personal Information Protection and Electronic Documents Act | North America | Canada | 2000 | Active | CAD$100,000 per violation |
CPPA Canadian Consumer Privacy Protection Act | North America | Canada | 2024 | Pending | CAD$25M or 5% of global revenue |
PIPA Alberta Personal Information Protection Act | North America | Canada | 2004 | Active | CAD$100,000 |
PIPA British Columbia Personal Information Protection Act | North America | Canada | 2003 | Active | CAD$100,000 |
DPL Cayman Islands Data Protection Law | Caribbean |  Cayman Islands | 2017 | Active | KYD 100,000 |
Law 19.628 Chilean Personal Data Protection Law | South America |  Chile | 1999 | Active | UTM 50 |
PIPL Chinese Personal Information Protection Law | Asia |  China | 2021 | Active | ¥50M or 5% of annual revenue |
DSL Chinese Data Security Law | Asia | China | 2021 | Active | ¥10M |
CSL Chinese Cybersecurity Law | Asia | China | 2017 | Active | ¥1M |
Law 1581 Colombian Personal Data Protection Law | South America |  Colombia | 2012 | Active | 2000 legal minimum wages |
Law 8968 Costa Rican Protection of Personal Data Law | South America |  Costa Rica | 2011 | Active | Up to $15,000 |
DPA Croatian Data Protection Act | Europe |  Croatia | 2018 | Active | €20M or 4% of global revenue |
PDPA Czech Personal Data Processing Act | Europe |  Czech Republic | 2019 | Active | €20M or 4% of global revenue |
LPPD Ivorian Law on Protection of Personal Data | Africa |  Côte d'Ivoire | 2013 | Active | XOF 100M |
DPA Danish Data Protection Act | Europe |  Denmark | 2018 | Active | €20M or 4% of global revenue |
LOPD Dominican Republic Personal Data Protection Law | Caribbean |  Dominican Republic | 2022 | Active | DOP 20M |
LOPD Ecuadorian Organic Law on Data Protection | South America |  Ecuador | 2021 | Active | 1.7% of revenue |
DPL Egyptian Data Protection Law | Africa |  Egypt | 2020 | Active | EGP 5M |
PDPA Estonian Personal Data Protection Act | Europe |  Estonia | 2019 | Active | €20M or 4% of global revenue |
DPP Ethiopian Data Protection Proclamation | Africa |  Ethiopia | 2024 | Pending | ETB 500,000 |
GDPR General Data Protection Regulation | Europe |  European Union | 2018 | Active | €20M or 4% of global revenue |
ePD EU ePrivacy Directive | Europe | European Union | 2002 | Active | Varies by member state |
ePR EU ePrivacy Regulation | Europe | European Union | 2024 | Pending | €20M or 4% of global revenue |
DPA Faroese Data Protection Act | Europe |  Faroe Islands | 2020 | Active | DKK 25M |
PB Fijian Privacy Bill | Pacific |  Fiji | 2023 | Pending | FJD 500,000 |
Tietosuojalaki Finnish Data Protection Act | Europe |  Finland | 2018 | Active | €20M or 4% of global revenue |
LIL French Data Protection Act | Europe |  France | 2018 | Active | €20M or 4% of global revenue |
HDS French Health Data Hosting Law | Europe | France | 2018 | Active | €300,000 |
LPPI French Polynesia Personal Information Protection Law | Pacific |  French Polynesia | 2019 | Active | XPF 8.95M |
BDSG German Federal Data Protection Act | Europe |  Germany | 2018 | Active | €20M or 4% of global revenue |
TTDSG German Telecommunications and Telemedia Data Protection Act | Europe | Germany | 2021 | Active | €300,000 |
HmbDSG Hamburg Data Protection Act | Europe | Germany | 2018 | Active | €20M or 4% of global revenue |
BlnDSG Berlin Data Protection Act | Europe | Germany | 2018 | Active | €20M or 4% of global revenue |
DPA Ghanaian Data Protection Act | Africa |  Ghana | 2012 | Active | GHS 250,000 |
DPA Greek Data Protection Law | Europe |  Greece | 2019 | Active | €20M or 4% of global revenue |
DPA Guyana Data Protection Act | South America |  Guyana | 2021 | Active | GYD 20M |
PDPO Hong Kong Personal Data Privacy Ordinance | Asia |  Hong Kong | 2012 | Active | HKD$1M and imprisonment |
Privacy Act Hungarian Privacy Act | Europe |  Hungary | 2018 | Active | €20M or 4% of global revenue |
DPA Icelandic Data Protection Act | Europe |  Iceland | 2018 | Active | €20M or 4% of global revenue |
DPDP Indian Digital Personal Data Protection Act | Asia |  India | 2023 | Active | ₹250 Crore |
PDP Indonesian Personal Data Protection Act | Asia |  Indonesia | 2022 | Active | 2% of annual revenue |
PDPL Iraqi Personal Data Protection Law | Middle East |  Iraq | 2023 | Active | IQD 50M |
DPA Irish Data Protection Act | Europe |  Ireland | 2018 | Active | €20M or 4% of global revenue |
PPL Israeli Protection of Privacy Law | Middle East |  Israel | 1981 | Active | ILS 3.2M |
Privacy Code Italian Personal Data Protection Code | Europe |  Italy | 2018 | Active | €20M or 4% of global revenue |
ECPL Italian Electronic Communications Privacy Law | Europe | Italy | 2018 | Active | €1.5M |
DPA Jamaica Data Protection Act | Caribbean |  Jamaica | 2020 | Active | JMD$10M |
APPI Japanese Act on Protection of Personal Information | Asia |  Japan | 2003 | Active | ¥100M or 1% of annual revenue |
MNA Japanese My Number Act | Asia | Japan | 2013 | Active | ¥50M |
PDPL Jordanian Personal Data Protection Law | Middle East |  Jordan | 2023 | Active | JOD 25,000 |
LPDP Kazakhstan Law on Personal Data Protection | Asia |  Kazakhstan | 2013 | Active | KZT 2M |
DPA Kenyan Data Protection Act | Africa |  Kenya | 2019 | Active | KES 5M or 1% of revenue |
DPL Kuwait Data Protection Law | Middle East |  Kuwait | 2023 | Active | KWD 500,000 |
LPI Kyrgyzstan Law on Personal Information | Asia |  Kyrgyzstan | 2008 | Active | KGS 100,000 |
LDP Laos Law on Data Protection | Asia |  Laos | 2022 | Active | LAK 100M |
PDPL Latvian Personal Data Processing Law | Europe |  Latvia | 2018 | Active | €20M or 4% of global revenue |
ETPDL Lebanese Electronic Transactions and Personal Data Law | Middle East |  Lebanon | 2018 | Active | LBP 100M |
DSG Liechtenstein Data Protection Act | Europe |  Liechtenstein | 2018 | Active | CHF 250,000 |
PDPA Lithuanian Law on Legal Protection of Personal Data | Europe |  Lithuania | 2018 | Active | €20M or 4% of global revenue |
DPA Luxembourg Law on Data Protection Commission | Europe |  Luxembourg | 2018 | Active | €20M or 4% of global revenue |
PDPA Macau Personal Data Protection Act | Asia |  Macau | 2005 | Active | MOP$80,000 |
LDP Malagasy Law on Data Protection | Africa |  Madagascar | 2014 | Active | MGA 100M |
PDPA Malaysian Personal Data Protection Act | Asia |  Malaysia | 2010 | Active | MYR 500,000 |
DPA Maltese Data Protection Act | Europe |  Malta | 2018 | Active | €20M or 4% of global revenue |
DPA Mauritian Data Protection Act | Africa |  Mauritius | 2017 | Active | MUR 200,000 |
LFPDPPP Mexican Federal Law on Protection of Personal Data | North America |  Mexico | 2010 | Active | MXN 25.6M |
PDPL Moldovan Law on Personal Data Protection | Europe |  Moldova | 2011 | Active | MDL 500,000 |
LDP Monaco Law on Digital Protection | Europe |  Monaco | 2020 | Active | €300,000 |
Law 09-08 Moroccan Personal Data Protection Law | Africa |  Morocco | 2009 | Active | MAD 600,000 |
DPL Myanmar Data Protection Law | Asia |  Myanmar | 2022 | Active | MMK 100M |
PDPA Nepalese Personal Data Protection Act | Asia |  Nepal | 2023 | Active | NPR 500,000 |
UAVG Dutch Implementation Act General Data Protection Regulation | Europe |  Netherlands | 2018 | Active | €20M or 4% of global revenue |
PIPA New Caledonia Personal Information Protection Act | Pacific |  New Caledonia | 2019 | Active | XPF 8.95M |
Privacy Act New Zealand Privacy Act | Pacific |  New Zealand | 2020 | Active | NZD$10,000 |
NDPR Nigerian Data Protection Regulation | Africa |  Nigeria | 2019 | Active | 2% of annual gross revenue |
LPDP Law on Personal Data Protection | Europe | North Macedonia | 2020 | Active | 4% of annual income |
PDA Norwegian Personal Data Act | Europe |  Norway | 2018 | Active | €20M or 4% of global revenue |
PDPL Omani Personal Data Protection Law | Middle East |  Oman | 2022 | Active | OMR 500,000 |
Law 81 Panamanian Personal Data Protection Law | South America |  Panama | 2021 | Active | Up to $10,000 |
DPA Papua New Guinea Data Protection Act | Pacific |  Papua New Guinea | 2024 | Pending | PGK 500,000 |
PDP Paraguayan Personal Data Protection Law | South America |  Paraguay | 2021 | Active | 5000 daily wages |
LPDP Peruvian Personal Data Protection Law | South America |  Peru | 2011 | Active | Up to 100 UIT |
DPA Philippine Data Privacy Act | Asia |  Philippines | 2012 | Active | PHP 5M |
RODO Polish Personal Data Protection Act | Europe |  Poland | 2018 | Active | €20M or 4% of global revenue |
LGPD Portuguese Data Protection Law | Europe |  Portugal | 2019 | Active | €20M or 4% of global revenue |
DPL Qatar Personal Data Protection Law | Middle East |  Qatar | 2016 | Active | QAR 5M |
DPA Romanian Data Protection Act | Europe |  Romania | 2018 | Active | €20M or 4% of global revenue |
DPPL Rwandan Data Protection and Privacy Law | Africa |  Rwanda | 2021 | Active | RWF 5M |
DPA Saint Lucia Data Protection Act | Caribbean |  Saint Lucia | 2011 | Active | XCD 500,000 |
DPL San Marino Data Protection Law | Europe |  San Marino | 2018 | Active | €20M or 4% of global revenue |
PDPL Saudi Arabian Personal Data Protection Law | Middle East |  Saudi Arabia | 2023 | Active | SAR 5M |
PDPL Senegalese Personal Data Protection Law | Africa |  Senegal | 2016 | Active | XOF 100M |
PDPA Singapore Personal Data Protection Act | Asia |  Singapore | 2012 | Active | SGD$1M |
DPA Slovak Act on Protection of Personal Data | Europe |  Slovakia | 2018 | Active | €20M or 4% of global revenue |
ZVOP-2 Slovenian Personal Data Protection Act | Europe |  Slovenia | 2023 | Active | €20M or 4% of global revenue |
POPIA South African Protection of Personal Information Act | Africa |  South Africa | 2013 | Active | R10M or imprisonment |
PIPA South Korean Personal Information Protection Act | Asia |  South Korea | 2011 | Active | 3% of revenue |
ICNA South Korean Network Act | Asia | South Korea | 2001 | Active | 3% of revenue |
CIA South Korean Credit Information Act | Asia | South Korea | 1995 | Active | 3% of revenue |
LOPDGDD Spanish Organic Law on Data Protection and Digital Rights Guarantee | Europe |  Spain | 2018 | Active | €20M or 4% of global revenue |
PDPA Sri Lankan Personal Data Protection Act | Asia |  Sri Lanka | 2022 | Active | LKR 10M |
PDPL Suriname Personal Data Protection Law | South America |  Suriname | 2022 | Active | SRD 500,000 |
DPA Swedish Data Protection Act | Europe |  Sweden | 2018 | Active | €20M or 4% of global revenue |
FADP Swiss Federal Act on Data Protection | Europe |  Switzerland | 2023 | Active | CHF 250,000 |
PDPA Taiwanese Personal Data Protection Act | Asia |  Taiwan | 2012 | Active | NTD$200M |
LPPD Tajikistan Law on Protection of Personal Data | Asia |  Tajikistan | 2018 | Active | TJS 50,000 |
DPA Tanzanian Data Protection Act | Africa |  Tanzania | 2022 | Active | TZS 5B |
PDPA Thailand Personal Data Protection Act | Asia |  Thailand | 2022 | Active | THB 5M |
DPA Trinidad and Tobago Data Protection Act | Caribbean |  Trinidad and Tobago | 2011 | Active | TTD 100,000 |
DPL Tunisian Personal Data Protection Law | Africa |  Tunisia | 2004 | Active | TND 50,000 |
SDPL Sharjah Data Protection Law | Middle East |  UAE | 2023 | Active | AED 500,000 |
DPL Dubai DIFC Data Protection Law | Middle East | UAE | 2020 | Active | USD $100,000 |
DPR Abu Dhabi ADGM Data Protection Regulations | Middle East | UAE | 2021 | Active | USD $28M |
DPR RAK ICC Data Protection Regulations | Middle East | UAE | 2022 | Active | USD 50,000 |
DPPA Ugandan Data Protection and Privacy Act | Africa |  Uganda | 2019 | Active | 2% of annual revenue |
PDPL Ukrainian Law on Personal Data Protection | Europe |  Ukraine | 2010 | Active | UAH 17,000 |
UK GDPR UK General Data Protection Regulation | Europe |  United Kingdom | 2021 | Active | £17.5M or 4% of global revenue |
DPA UK Data Protection Act 2018 | Europe | United Kingdom | 2018 | Active | £17.5M or 4% of global revenue |
PECR UK Privacy and Electronic Communications Regulations | Europe | United Kingdom | 2003 | Active | £500,000 |
HIPAA US Health Insurance Portability and Accountability Act | North America |  United States | 1996 | Active | $1.5M per violation per year |
GLBA US Gramm-Leach-Bliley Act | North America | United States | 1999 | Active | $100,000 per violation |
COPPA US Children's Online Privacy Protection Act | North America | United States | 1998 | Active | $43,280 per violation |
FERPA US Family Educational Rights and Privacy Act | North America | United States | 1974 | Active | Loss of federal funding |
CCPA California Consumer Privacy Act | North America | United States | 2020 | Active | $7,500 per violation |
WPA Washington Privacy Act | North America | United States | 2024 | Pending | $7,500 per violation |
ICDPA Iowa Consumer Data Protection Act | North America | United States | 2024 | Pending | $7,500 per violation |
FDBR Florida Digital Bill of Rights | North America | United States | 2024 | Pending | $50,000 per violation |
OCPA Oregon Consumer Privacy Act | North America | United States | 2024 | Pending | $7,500 per violation |
MCDPA Montana Consumer Data Privacy Act | North America | United States | 2024 | Active | $7,500 per violation |
DPDPA Delaware Personal Data Privacy Act | North America | United States | 2024 | Pending | $10,000 per violation |
NRS 603A Nevada Privacy of Information Collected on the Internet from Consumers Act | North America | United States | 2019 | Active | $5,000 per violation |
CPRA California Privacy Rights Act | North America | United States | 2023 | Active | $7,500 per violation |
VCDPA Virginia Consumer Data Protection Act | North America | United States | 2023 | Active | $7,500 per violation |
CTDPA Connecticut Data Privacy Act | North America | United States | 2023 | Active | $5,000 per violation |
UCPA Utah Consumer Privacy Act | North America | United States | 2023 | Active | $7,500 per violation |
CPA Colorado Privacy Act | North America | United States | 2023 | Active | $20,000 per violation |
SHIELD New York SHIELD Act | North America | United States | 2020 | Active | $250,000 per violation |
201 CMR 17.00 Massachusetts Standards for Personal Information Protection | North America | United States | 2010 | Active | $5,000 per violation |
TDPSA Texas Data Privacy and Security Act | North America | United States | 2023 | Active | $7,500 per violation |
Law 18.331 Uruguayan Personal Data Protection Law | South America |  Uruguay | 2008 | Active | Up to 500,000 UI |
PDPL Uzbekistan Law on Personal Data | Asia |  Uzbekistan | 2019 | Active | UZS 100M |
LCDP Venezuelan Constitutional Law on Data Protection | South America |  Venezuela | 2021 | Active | Up to 2% of revenue |
PDPD Vietnamese Personal Data Protection Decree | Asia |  Vietnam | 2023 | Active | 5% of revenue |
DPPL Yemeni Data Protection and Privacy Law | Middle East |  Yemen | 2024 | Pending | YER 5M |
DPA Zambian Data Protection Act | Africa |  Zambia | 2021 | Active | ZMW 450,000 |
DPA Zimbabwean Data Protection Act | Africa |  Zimbabwe | 2021 | Active | USD 20,000 |
Showing 29 of 29 ai laws
Law | Region | Country | Year | Status | Max Penalty |
|---|---|---|---|---|---|
AI Privacy Amendment AI Privacy Regulation Amendment | Oceania | Australia | 2023 | Active | A$50M |
AI Bill 21/20 Brazilian Artificial Intelligence Bill | South America | Brazil | 2023 | Pending | To be determined |
AIDA Artificial Intelligence and Data Act | North America | Canada | 2023 | Pending | C$25M or 5% of revenue |
Quebec AI Privacy Quebec AI Regulations in Privacy Law | North America | Canada | 2023 | Active | C$10M or 2% of revenue |
Generative AI Regulations Administrative Provisions on Generative AI Services | Asia | China | 2023 | Active | ¥100M |
Algorithm Recommendations Internet Information Service Algorithmic Recommendation Management | Asia | China | 2022 | Active | ¥30M |
Deep Synthesis Rules Deep Synthesis Technology Management Regulations | Asia | China | 2023 | Active | ¥50M |
AI Act Artificial Intelligence Act | Europe | European Union | 2024 | Active | €40M or 7% of revenue |
AI Liability Directive AI Liability Directive | Europe | European Union | 2024 | Active | Varies by case |
Public AI Law Public Sector AI Governance Law | Europe | France | 2023 | Active | €500K |
AI Liability Framework German AI System Liability Framework | Europe | Germany | 2023 | Active | €5M |
AI Framework India AI Regulation Framework | Asia | India | 2023 | Active | ₹150M |
AI Protection Rules Israel AI Data Protection Regulations | Middle East | Israel | 2023 | Active | ILS 3M |
AI Oversight Act Italian AI Monitoring and Oversight Act | Europe | Italy | 2023 | Active | €20M |
AI Provisions AI Provisions in Digital Services Act | Asia | Japan | 2023 | Active | ¥100M |
AI Strategy New Zealand AI Strategy and Framework | Oceania | New Zealand | 2023 | Active | NZ$10M |
Nigeria AI Strategy Nigerian National AI Strategy | Africa | Nigeria | 2023 | Active | NGN 10M |
Saudi AI Framework Saudi Arabia AI Regulatory Framework | Middle East | Saudi Arabia | 2023 | Active | SAR 20M |
AI Governance Act Singapore AI Governance Act | Asia | Singapore | 2024 | Active | S$1M |
SA AI Framework South Africa AI Technology Governance Framework | Africa | South Africa | 2023 | Active | ZAR 10M |
AI Protection Act AI Industry Promotion and User Protection Act | Asia | South Korea | 2023 | Active | ₩300M |
Digital Rights Charter Spanish Digital Rights and AI Charter | Europe | Spain | 2023 | Active | €3M |
AI Transaction Law UAE AI Transaction Law | Middle East | United Arab Emirates | 2023 | Active | AED 5M |
EO 14110 Executive Order on Safe, Secure, and Trustworthy AI | North America | United States | 2023 | Active | Varies by violation |
CPRA AI Provisions California Privacy Rights Act AI Provisions | North America | United States | 2023 | Active | $7,500 per violation |
SB 1189 Workplace Technology Accountability Act | North America | United States | 2024 | Active | $15,000 per violation |
CO AI Act Colorado AI Governance Act | North America | United States | 2023 | Active | $500,000 |
VIPA Artificial Intelligence Video Interview Act | North America | United States | 2020 | Active | $1,000 per violation |
AEDT Law NYC Automated Employment Decision Tools Law | North America | United States | 2023 | Active | $1,500 per violation |