GDPR Matchup Series
This series looks at global laws and matches them up against the GDPR, with an aim of helping determine how much duplication of operational effort that may be avoided while moving toward GDPR compliance.
This series provides a comparative, practical lens for understanding how data protection laws around the world align with and diverge from the GDPR, helping organizations anticipate operational overlap, minimize redundant compliance efforts, and identify where local obligations require distinct approaches. The series highlights both shared principles and critical points of differentiation in areas such as legal bases for processing, individual rights, cross‑border transfer requirements, enforcement models, and breach‑notification standards.
Through these structured matchups, readers gain a clearer view of how global privacy regimes map onto GDPR expectations, and where harmonization or divergence may shape their compliance strategies.
Series Overview
- APEC Privacy Framework and Cross-Border Privacy Rules
- Argentina’s draft Data Protection Act
- Australia's Privacy Act 1988
- Brazil's General Data Protection Law
- California Consumer Privacy Act 2018
- Canada's Personal Information Protection and Electronic Documents Act
- China’s Cybersecurity Law
- Hong Kong’s Personal Data (Privacy) Ordinance
- Japan’s Act on the Protection of Personal Information
- Mexico's Federal Data Protection Law Held by Private Parties and its Regulations
- New Zealand's Privacy Act 1993
- Philippines’ Data Privacy Act and its Implementing Rules and Regulations
- Singapore’s Personal Data Protection Act
- South Africa's Protection of Personal Information Act
- Turkey's Data Protection Law
- US Children's Online Privacy Protection Act
- US financial privacy laws
- US Health Insurance Portability and Accountability Act
- US state data breach laws
This content is eligible for Continuing Professional Education credits. Please self-submit according to CPE policy guidelines.
Submit for CPEs
