Resources
The privacy & AI regulation
library — open and translated.
Every major privacy and AI regulation, article by article. Community-translated into 24+ languages. Comment, contribute, and learn from working DPOs and lawyers.
- Regulations
- 15
- Articles
- 630+
- Languages
- 24+
- Community contributions
- 1,028
This map shows primary national regulations. Additional laws may apply depending on your industry, data types, or specific business activities.
List of regulations
- European Union / EEA
GDPR
General Data Protection Regulation
The primary EU regulation governing the collection, processing, and storage of personal data. Applies to any organisation handling EU residents' data, regardless of where the organisation is based.
- Articles
- 99
- Languages
- 24
- Contribs
- 412
- European Union
EU AI Act
Artificial Intelligence Act
The world's first comprehensive legal framework for AI, classifying systems by risk level and imposing obligations on developers and deployers of high-risk AI. Intersects significantly with data protection law.
- Articles
- 113
- Languages
- 12
- Contribs
- 187
- United Kingdom
UK GDPR
UK General Data Protection Regulation
The post-Brexit adaptation of EU GDPR into UK law, retaining substantially the same requirements. Enforced by the Information Commissioner's Office (ICO).
- Articles
- 99
- Languages
- 1
- Contribs
- 142
- United States — California
CCPA / CPRA
California Consumer Privacy Act / California Privacy Rights Act
Grants California residents rights over their personal information, including the right to know, delete, and opt out of the sale of personal data. Applicable to businesses meeting certain revenue or data-volume thresholds.
- Articles
- 31
- Languages
- 4
- Contribs
- 96
- Brazil
LGPD
Lei Geral de Proteção de Dados
Brazil's comprehensive data protection law, modelled closely on the GDPR. Establishes rules for the collection, processing, and storage of personal data and creates the National Data Protection Authority (ANPD).
- Articles
- 65
- Languages
- 6
- Contribs
- 73
- Canada
PIPEDA
Personal Information Protection and Electronic Documents Act
Canada's federal private-sector privacy law that governs how commercial businesses collect, use, and disclose personal information. Quebec's Law 25 (Bill 64) imposes stricter requirements at the provincial level.
- Articles
- 30
- Languages
- 2
- Contribs
- 51
- South Africa
POPIA
Protection of Personal Information Act
South Africa's data privacy law that gives effect to the constitutional right to privacy. It regulates the manner in which personal information may be processed and creates the Information Regulator.
- Articles
- 115
- Languages
- 3
- Contribs
- 38
- Singapore
PDPA
Personal Data Protection Act (Singapore)
Singapore's primary data protection legislation governing the collection, use, and disclosure of personal data by private organisations. Administered by the Personal Data Protection Commission (PDPC).
- Articles
- 78
- Languages
- 3
- Contribs
- 29
- India
DPDP Act
Digital Personal Data Protection Act 2023
India's landmark data protection legislation creating a framework for processing digital personal data. Establishes the Data Protection Board of India and creates significant obligations for data fiduciaries.
- Japan
APPI
Act on the Protection of Personal Information
Japan's primary data protection law, significantly strengthened by 2022 amendments. Regulates the handling of personal information by businesses and imposes obligations around data breach notification, third-party transfers, and individual rights.
- Australia
Privacy Act
Privacy Act 1988 (Australia)
Australia's federal privacy law regulating how Australian Government agencies and private sector organisations handle personal information. The Privacy Act Review (2023) proposes significant reforms to strengthen individual rights.
- New Zealand
Privacy Act
Privacy Act 2020 (New Zealand)
New Zealand's comprehensive privacy law replacing the 1993 Act. Introduces mandatory breach notification, new information privacy principles, and strengthened enforcement powers for the Privacy Commissioner.
- South Korea
PIPA
Personal Information Protection Act (South Korea)
South Korea's comprehensive privacy law administered by the Personal Information Protection Commission (PIPC). Considered one of the strongest data protection regimes in Asia, with strict consent requirements and significant penalties.
- China
PIPL
Personal Information Protection Law
China's first comprehensive national data privacy law, effective November 2021. Establishes a consent-based framework for personal information processing, imposes cross-border transfer restrictions, and applies extraterritorially.
- Switzerland
revFADP
Revised Federal Act on Data Protection (Switzerland)
Switzerland's revised data protection law (in force since 1 September 2023) modernising the 1992 FADP. Aligns more closely with GDPR standards, introducing data breach notification, privacy-by-design requirements, and expanded individual rights.
Need help staying compliant?
My DPO Now connects you with certified Data Protection Officers who understand these regulations and can guide your organisation through them.
Get started →