Support Centre
Comparing Privacy Laws
workspace-icon
Back

Comparing Privacy Laws

Comply with laws around the world

The Global Privacy Laws portal is the latest feature to be added to the OneTrust DataGuidance Research platform and provides the most comprehensive way of comparing privacy laws around the world. New jurisdictions are being added to the portal every week. 

To research a jurisdiction not currently included, you can utilise the Laws Around The World Map to visit that country's dashboard and resources.

The US presents a plethora of laws and privacy bills posing relevant compliance challenges for privacy professionals. OneTrust DataGuidance has therefore built the USA State Law Tracker, a dedicated hub for US state law developments where organisations are able to access and understand how potential laws might affect their daily operations.

OneTrust DataGuidance's GDPR Portal also provides a central resource for more detailed research into the GDPR, its implementation in each Member State, and how such laws vary.

  • There is a requirement in place.
  • Click to view information for additional detail.
  • There is no requirement in place.

Law and Authority

Compare Reset
    title
  • Law
  • Bill
    Scope
  • Personal
  • Territorial
  • Material
    title
  • Authority
  • Albania
  • Algeria
  • Angola
  • Argentina
  • Armenia
  • Australia
  • Austria
  • Azerbaijan
  • Bahamas
  • Bahrain
  • Bangladesh
  • Barbados
  • Belarus
  • Belgium
  • Bermuda
  • Bolivia
  • Bosnia & Herzegovina
  • Botswana
  • Brazil
  • British Columbia
  • British Virgin Islands
  • Bulgaria
  • California
  • Cambodia
  • Cameroon
  • Canada Federal
  • Cape Verde
  • Chad
  • Chile
  • China
  • Colombia
  • Colorado
  • Connecticut
  • Costa Rica
  • Croatia
  • Cyprus
  • Czechia
  • Delaware
  • Denmark
  • Dominican Republic
  • Ecuador
  • Egypt
  • El Salvador
  • Estonia
  • Ethiopia
  • Finland
  • Florida
  • France
  • GDPR
  • Georgia
  • Germany
  • Ghana
  • Greece
  • Guatemala
  • Guernsey
  • Honduras
  • Hong Kong
  • Hungary
  • India
  • Indiana
  • Indonesia
  • Iowa
  • Iraq
  • Ireland
  • Isle of Man
  • Italy
  • Jamaica
  • Japan
  • Jersey
  • Jordan
  • Kazakhstan
  • Kenya
  • Kuwait
  • Kyrgyzstan
  • Lao PDR
  • Latvia
  • Lebanon
  • Liechtenstein
  • Lithuania
  • Luxembourg
  • Macau
  • Madagascar
  • Malaysia
  • Mali
  • Malta
  • Mauritius
  • Mexico
  • Moldova
  • Mongolia
  • Montana
  • Montenegro
  • Morocco
  • Myanmar
  • Namibia
  • Nepal
  • Netherlands
  • New Hampshire
  • New Jersey
  • New Zealand
  • Niger
  • Nigeria
  • North Macedonia
  • Norway
  • Oman
  • Ontario
  • Oregon
  • Pakistan
  • Panama
  • Paraguay
  • Peru
  • Philippines
  • Poland
  • Portugal
  • Qatar
  • Quebec
  • Romania
  • Russia
  • Rwanda
  • Saudi Arabia
  • Serbia
  • Seychelles
  • Singapore
  • Slovakia
  • Slovenia
  • South Africa
  • South Korea
  • Spain
  • Sri Lanka
  • Sweden
  • Switzerland
  • Taiwan
  • Tajikistan
  • Tanzania
  • Tennessee
  • Texas
  • Thailand
  • The Gambia
  • Timor-Leste
  • Tunisia
  • Turkey
  • Turkmenistan
  • UAE - ADGM
  • UAE - DIFC
  • UAE - Federal
  • Uganda
  • UK
  • Ukraine
  • Uruguay
  • Utah
  • Uzbekistan
  • Vietnam
  • Virginia
  • Zambia

Definitions

Compare Reset
    title
  • Data Controller
  • Data Processor
  • Personal Data
  • Sensitive Data
  • Health Data
  • Biometric Data
  • Pseudonymisation
  • Albania
  • Algeria
  • Angola
  • Argentina
  • Armenia
  • Australia
  • Austria
  • Azerbaijan
  • Bahamas
  • Bahrain
  • Bangladesh
  • Barbados
  • Belarus
  • Belgium
  • Bermuda
  • Bolivia
  • Bosnia & Herzegovina
  • Botswana
  • Brazil
  • British Columbia
  • British Virgin Islands
  • Bulgaria
  • California
  • Cambodia
  • Cameroon
  • Canada Federal
  • Cape Verde
  • Chad
  • Chile
  • China
  • Colombia
  • Colorado
  • Connecticut
  • Costa Rica
  • Croatia
  • Cyprus
  • Czechia
  • Delaware
  • Denmark
  • Dominican Republic
  • Ecuador
  • Egypt
  • El Salvador
  • Estonia
  • Ethiopia
  • Finland
  • Florida
  • France
  • GDPR
  • Georgia
  • Germany
  • Ghana
  • Greece
  • Guatemala
  • Guernsey
  • Honduras
  • Hong Kong
  • Hungary
  • India
  • Indiana
  • Indonesia
  • Iowa
  • Iraq
  • Ireland
  • Isle of Man
  • Italy
  • Jamaica
  • Japan
  • Jersey
  • Jordan
  • Kazakhstan
  • Kenya
  • Kuwait
  • Kyrgyzstan
  • Lao PDR
  • Latvia
  • Lebanon
  • Liechtenstein
  • Lithuania
  • Luxembourg
  • Macau
  • Madagascar
  • Malaysia
  • Mali
  • Malta
  • Mauritius
  • Mexico
  • Moldova
  • Mongolia
  • Montana
  • Montenegro
  • Morocco
  • Myanmar
  • Namibia
  • Nepal
  • Netherlands
  • New Hampshire
  • New Jersey
  • New Zealand
  • Niger
  • Nigeria
  • North Macedonia
  • Norway
  • Oman
  • Ontario
  • Oregon
  • Pakistan
  • Panama
  • Paraguay
  • Peru
  • Philippines
  • Poland
  • Portugal
  • Qatar
  • Quebec
  • Romania
  • Russia
  • Rwanda
  • Saudi Arabia
  • Serbia
  • Seychelles
  • Singapore
  • Slovakia
  • Slovenia
  • South Africa
  • South Korea
  • Spain
  • Sri Lanka
  • Sweden
  • Switzerland
  • Taiwan
  • Tajikistan
  • Tanzania
  • Tennessee
  • Texas
  • Thailand
  • The Gambia
  • Timor-Leste
  • Tunisia
  • Turkey
  • Turkmenistan
  • UAE - ADGM
  • UAE - DIFC
  • UAE - Federal
  • Uganda
  • UK
  • Ukraine
  • Uruguay
  • Utah
  • Uzbekistan
  • Vietnam
  • Virginia
  • Zambia

Controller and Processor Obligations

Compare Reset
    title
  • Data Processing Registration
  • Data Transfers
  • Data Processing Records
  • DPIAs
  • DPOs
  • Breach Notification
  • Data Retention
  • Children's Data
  • Special Categories
  • Vendor Contracts
  • Albania
  • Algeria
  • Angola
  • Argentina
  • Armenia
  • Australia
  • Austria
  • Azerbaijan
  • Bahamas
  • Bahrain
  • Bangladesh
  • Barbados
  • Belarus
  • Belgium
  • Bermuda
  • Bolivia
  • Bosnia & Herzegovina
  • Botswana
  • Brazil
  • British Columbia
  • British Virgin Islands
  • Bulgaria
  • California
  • Cambodia
  • Cameroon
  • Canada Federal
  • Cape Verde
  • Chad
  • Chile
  • China
  • Colombia
  • Colorado
  • Connecticut
  • Costa Rica
  • Croatia
  • Cyprus
  • Czechia
  • Delaware
  • Denmark
  • Dominican Republic
  • Ecuador
  • Egypt
  • El Salvador
  • Estonia
  • Ethiopia
  • Finland
  • Florida
  • France
  • GDPR
  • Georgia
  • Germany
  • Ghana
  • Greece
  • Guatemala
  • Guernsey
  • Honduras
  • Hong Kong
  • Hungary
  • India
  • Indiana
  • Indonesia
  • Iowa
  • Iraq
  • Ireland
  • Isle of Man
  • Italy
  • Jamaica
  • Japan
  • Jersey
  • Jordan
  • Kazakhstan
  • Kenya
  • Kuwait
  • Kyrgyzstan
  • Lao PDR
  • Latvia
  • Lebanon
  • Liechtenstein
  • Lithuania
  • Luxembourg
  • Macau
  • Madagascar
  • Malaysia
  • Mali
  • Malta
  • Mauritius
  • Mexico
  • Moldova
  • Mongolia
  • Montana
  • Montenegro
  • Morocco
  • Myanmar
  • Namibia
  • Nepal
  • Netherlands
  • New Hampshire
  • New Jersey
  • New Zealand
  • Niger
  • Nigeria
  • North Macedonia
  • Norway
  • Oman
  • Ontario
  • Oregon
  • Pakistan
  • Panama
  • Paraguay
  • Peru
  • Philippines
  • Poland
  • Portugal
  • Qatar
  • Quebec
  • Romania
  • Russia
  • Rwanda
  • Saudi Arabia
  • Serbia
  • Seychelles
  • Singapore
  • Slovakia
  • Slovenia
  • South Africa
  • South Korea
  • Spain
  • Sri Lanka
  • Sweden
  • Switzerland
  • Taiwan
  • Tajikistan
  • Tanzania
  • Tennessee
  • Texas
  • Thailand
  • The Gambia
  • Timor-Leste
  • Tunisia
  • Turkey
  • Turkmenistan
  • UAE - ADGM
  • UAE - DIFC
  • UAE - Federal
  • Uganda
  • UK
  • Ukraine
  • Uruguay
  • Utah
  • Uzbekistan
  • Vietnam
  • Virginia
  • Zambia

Individuals' Rights

Compare Reset
    title
  • Informed
  • Access
  • Rectification
  • Erasure
  • Object
  • Portability
  • Automated Decision-Making
  • Other
  • Albania
  • Algeria
  • Angola
  • Argentina
  • Armenia
  • Australia
  • Austria
  • Azerbaijan
  • Bahamas
  • Bahrain
  • Bangladesh
  • Barbados
  • Belarus
  • Belgium
  • Bermuda
  • Bolivia
  • Bosnia & Herzegovina
  • Botswana
  • Brazil
  • British Columbia
  • British Virgin Islands
  • Bulgaria
  • California
  • Cambodia
  • Cameroon
  • Canada Federal
  • Cape Verde
  • Chad
  • Chile
  • China
  • Colombia
  • Colorado
  • Connecticut
  • Costa Rica
  • Croatia
  • Cyprus
  • Czechia
  • Delaware
  • Denmark
  • Dominican Republic
  • Ecuador
  • Egypt
  • El Salvador
  • Estonia
  • Ethiopia
  • Finland
  • Florida
  • France
  • GDPR
  • Georgia
  • Germany
  • Ghana
  • Greece
  • Guatemala
  • Guernsey
  • Honduras
  • Hong Kong
  • Hungary
  • India
  • Indiana
  • Indonesia
  • Iowa
  • Iraq
  • Ireland
  • Isle of Man
  • Italy
  • Jamaica
  • Japan
  • Jersey
  • Jordan
  • Kazakhstan
  • Kenya
  • Kuwait
  • Kyrgyzstan
  • Lao PDR
  • Latvia
  • Lebanon
  • Liechtenstein
  • Lithuania
  • Luxembourg
  • Macau
  • Madagascar
  • Malaysia
  • Mali
  • Malta
  • Mauritius
  • Mexico
  • Moldova
  • Mongolia
  • Montana
  • Montenegro
  • Morocco
  • Myanmar
  • Namibia
  • Nepal
  • Netherlands
  • New Hampshire
  • New Jersey
  • New Zealand
  • Niger
  • Nigeria
  • North Macedonia
  • Norway
  • Oman
  • Ontario
  • Oregon
  • Pakistan
  • Panama
  • Paraguay
  • Peru
  • Philippines
  • Poland
  • Portugal
  • Qatar
  • Quebec
  • Romania
  • Russia
  • Rwanda
  • Saudi Arabia
  • Serbia
  • Seychelles
  • Singapore
  • Slovakia
  • Slovenia
  • South Africa
  • South Korea
  • Spain
  • Sri Lanka
  • Sweden
  • Switzerland
  • Taiwan
  • Tajikistan
  • Tanzania
  • Tennessee
  • Texas
  • Thailand
  • The Gambia
  • Timor-Leste
  • Tunisia
  • Turkey
  • Turkmenistan
  • UAE - ADGM
  • UAE - DIFC
  • UAE - Federal
  • Uganda
  • UK
  • Ukraine
  • Uruguay
  • Utah
  • Uzbekistan
  • Vietnam
  • Virginia
  • Zambia

Penalties and Enforcement

Compare Reset
    title
  • Penalties
  • Enforcement
  • Albania
  • Algeria
  • Angola
  • Argentina
  • Armenia
  • Australia
  • Austria
  • Azerbaijan
  • Bahamas
  • Bahrain
  • Bangladesh
  • Barbados
  • Belarus
  • Belgium
  • Bermuda
  • Bolivia
  • Bosnia & Herzegovina
  • Botswana
  • Brazil
  • British Columbia
  • British Virgin Islands
  • Bulgaria
  • California
  • Cambodia
  • Cameroon
  • Canada Federal
  • Cape Verde
  • Chad
  • Chile
  • China
  • Colombia
  • Colorado
  • Connecticut
  • Costa Rica
  • Croatia
  • Cyprus
  • Czechia
  • Delaware
  • Denmark
  • Dominican Republic
  • Ecuador
  • Egypt
  • El Salvador
  • Estonia
  • Ethiopia
  • Finland
  • Florida
  • France
  • GDPR
  • Georgia
  • Germany
  • Ghana
  • Greece
  • Guatemala
  • Guernsey
  • Honduras
  • Hong Kong
  • Hungary
  • India
  • Indiana
  • Indonesia
  • Iowa
  • Iraq
  • Ireland
  • Isle of Man
  • Italy
  • Jamaica
  • Japan
  • Jersey
  • Jordan
  • Kazakhstan
  • Kenya
  • Kuwait
  • Kyrgyzstan
  • Lao PDR
  • Latvia
  • Lebanon
  • Liechtenstein
  • Lithuania
  • Luxembourg
  • Macau
  • Madagascar
  • Malaysia
  • Mali
  • Malta
  • Mauritius
  • Mexico
  • Moldova
  • Mongolia
  • Montana
  • Montenegro
  • Morocco
  • Myanmar
  • Namibia
  • Nepal
  • Netherlands
  • New Hampshire
  • New Jersey
  • New Zealand
  • Niger
  • Nigeria
  • North Macedonia
  • Norway
  • Oman
  • Ontario
  • Oregon
  • Pakistan
  • Panama
  • Paraguay
  • Peru
  • Philippines
  • Poland
  • Portugal
  • Qatar
  • Quebec
  • Romania
  • Russia
  • Rwanda
  • Saudi Arabia
  • Serbia
  • Seychelles
  • Singapore
  • Slovakia
  • Slovenia
  • South Africa
  • South Korea
  • Spain
  • Sri Lanka
  • Sweden
  • Switzerland
  • Taiwan
  • Tajikistan
  • Tanzania
  • Tennessee
  • Texas
  • Thailand
  • The Gambia
  • Timor-Leste
  • Tunisia
  • Turkey
  • Turkmenistan
  • UAE - ADGM
  • UAE - DIFC
  • UAE - Federal
  • Uganda
  • UK
  • Ukraine
  • Uruguay
  • Utah
  • Uzbekistan
  • Vietnam
  • Virginia
  • Zambia
Feedback