Global Privacy Law and DPA Directory
Data protection laws exist across the globe. This tool has an interactive map identifying those countries with data protection laws. Within each country’s listing, if available, you can link to a resource containing the data protection law, the data protection authority, and relevant IAPP resources. The IAPP Resource Center also hosts a "Global Comprehensive Privacy Law Mapping Chart," which maps the differences between comprehensive privacy laws globally.
The Westin Research Center will periodically update these tools. As always, we appreciate input from our members. If you have comments about the information or believe additional material should be included, please share it with us at research@iapp.org.
Note: This tool is for informational purposes and is not legal advice. The status of a country's data protection legislation should always be verified via official sources.
-
101 Global Privacy Resources
Tool Last Updated: March 2024
Regional Topic Pages
Discover the IAPP's latest resources by region through the topic pages linked below:
Africa, Asia, Australia/New Zealand, Brazil, Canada, China, Europe, India, Latin America, Middle East, Russia, United Kingdom, US Federal Privacy, US State Privacy
Country Directory
Within each listing, if available, there will be links to the DPA, privacy legislation and relevant resources.
-
Afghanistan
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Afghanistan.
Additional Resources
-
Åland Islands
Data Protection Authority
Privacy Legislation
Additional Resources
-
Albania
Data Protection Authority
Privacy Legislation
Additional Resources
-
Algeria
Data Protection Authority
Privacy Legislation
Additional Resources
-
American Samoa
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for American Samoa.
-
Andorra
Data Protection Authority
Privacy Legislation
Additional Resources
-
Angola
Data Protection Authority
Privacy Legislation
Additional Resources
-
Anguilla
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Anguilla.
-
Antigua and Barbuda
Data Protection Authority
Privacy Legislation
-
Argentina
Data Protection Authority
Privacy Legislation
Additional Resources
-
Armenia
Data Protection Authority
Privacy Legislation
Additional Resources
-
Aruba
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Aruba.
-
Australia
Data Protection Authority
Privacy Legislation
- Privacy Act 1988 (Cth) No. 119 1998 and Australian Privacy Principles ("APPs") + sectoral state coverage
- DPA Legislation Page
Additional Resources
-
Austria
Data Protection Authority
Privacy Legislation
- Austria is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Azerbaijan
Data Protection Authority
Privacy Legislation
Additional Resources
-
Bahamas
Data Protection Authority
Privacy Legislation
- Data Protection (Privacy of Personal Information) Act ("DPA") - Link unavailable
-
Bahrain
Data Protection Authority
Privacy Legislation
Additional Resources
-
Bangladesh
Data Protection Authority
Privacy Legislation
Additional Resources
-
Barbados
Data Protection Authority
Privacy Legislation
-
Belarus
Data Protection Authority
Privacy Legislation
Additional Resources
-
Belgium
Data Protection Authority
Privacy Legislation
- Belgium is subject to the EU General Data Protection Regulation.
- DPA Publications
Additional Resources
-
Belize
Data Protection Authority
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Belize.
Privacy Legislation
Additional Resources
-
Benin
Data Protection Authority
Privacy Legislation
- Law No. 2017-20 (2018) on Digital Code and Law No. 2009-09 on Protection of Personally Identifiable Information
- DPA Legislation Page
Additional Resources
-
Bermuda
Data Protection Authority
Privacy Legislation
-
Bhutan
Data Protection Authority
Privacy Legislation
Additional Resources
-
Bolivia (Plurinational State of)
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Bolivia.
Additional Resources
-
Bonaire, Sint Eustatius and Saba
Data Protection Authority
Privacy Legislation
-
Bosnia and Herzegovina
Data Protection Authority
Privacy Legislation
Additional Resources
-
Botswana
Data Protection Authority
Privacy Legislation
Additional Resources
-
Brazil
Data Protection Authority
Privacy Legislation
Additional Resources
-
British Virgin Islands
Data Protection Authority
- The IAPP is unaware of a data protection authority for British Virgin Islands.
Privacy Legislation
-
Brunei Darussalam
Data Protection Authority
Privacy Legislation
- The IAPP is unaware of comprehensive data protection legislation for Brunei Darussalam.
Additional Resources
-
Bulgaria
Data Protection Authority
Privacy Legislation
- Bulgaria is subject to the EU General Data Protection Regulation.
- Personal Data Protection Act
- DPA Legislation Page
Additional Resources
-
Burkina Faso
Data Protection Authority
Privacy Legislation
Additional Resources
-
Burundi
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Burundi.
Additional Resources
-
Cabo Verde
Data Protection Authority
Privacy Legislation
Additional Resources
-
Cambodia
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Cambodia.
Additional Resources
-
Cameroon
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Cameroon.
Additional Resources
-
Canada
Data Protection Authority
Privacy Legislation
Additional Resources
-
Cayman Islands
Data Protection Authority
Privacy Legislation
-
Central African Republic
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Central African Republic.
Additional Resources
-
Chad
Data Protection Authority
Privacy Legislation
Additional Resources
-
Chile
Data Protection Authority
- The IAPP is unaware of a data protection authority for Chile.
Privacy Legislation
Additional Resources
-
China
Data Protection Authority
- No single authority (sectoral regulation.) The PIPL notes that the Cyberspace Administration of China (CAC) is responsible for planning and coordination of personal information protection and related supervision.
Privacy Legislation
Additional Resources
-
Colombia
Data Protection Authority
Privacy Legislation
Additional Resources
-
Comoros
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Comoros.
Additional Resources
-
Cook Islands
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Cook Islands.
-
Costa Rica
Data Protection Authority
Privacy Legislation
- Law No. 7975 the Undisclosed Information Law; Law No. 8968 Protection in the Handling of the Personal Data of Individuals
- DPA Regulations Page
Additional Resources
-
Côte d’Ivoire
Data Protection Authority
Privacy Legislation
Additional Resources
-
Croatia
Data Protection Authority
Privacy Legislation
- Croatia is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Cuba
Data Protection Authority
Privacy Legislation
Additional Resources
-
Curaçao
Data Protection Authority
- The IAPP is unaware of a data protection authority for Curaçao.
Privacy Legislation
Additional Resources
-
Cyprus
Data Protection Authority
Privacy Legislation
- Cyprus is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Czechia
Data Protection Authority
Privacy Legislation
- Czechia is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Democratic People's Republic of Korea
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Democratic People's Republic of Korea.
Additional Resources
-
Democratic Republic of the Congo
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Democratic Republic of the Congo.
Additional Resources
-
Denmark
Data Protection Authority
Privacy Legislation
- Denmark is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Diego Garcia
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Diego Garcia.
-
Djibouti
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Djibouti.
Additional Resources
-
Dominica
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Dominica.
Additional Resources
-
Dominican Republic
Data Protection Authority
- The IAPP is unaware of a data protection authority for the Dominican Republic.
Privacy Legislation
Additional Resources
-
Ecuador
Data Protection Authority
Privacy Legislation
Additional Resources
-
Egypt
Data Protection Authority
- Data Protection Centre (DPC) - Law not yet operational
Privacy Legislation
Additional Resources
-
El Salvador
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for El Salvador.
Additional Resources
-
Equatorial Guinea
Data Protection Authority
- Governing Body for the Protection of Personal Data (Law not yet operational)
Privacy Legislation
- Law No. 1/2016 on the Protection of Personal Data (Law not yet operational)
Additional Resources
-
Eritrea
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Eritrea.
Additional Resources
-
Estonia
Data Protection Authority
Privacy Legislation
- Estonia is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Eswatini (Swaziland)
Data Protection Authority
Privacy Legislation
Additional Resources
-
Ethiopia
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Ethiopia.
Additional Resources
-
European Union
Data Protection Authority and Privacy Legislation
- Member-states of the European Union are subject to the EU General Data Protection Regulation.
Additional Resources
-
Faroe Islands
Data Protection Authority
Privacy Legislation
Additional Resources
-
Fiji
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Fiji.
Additional Resources
-
Finland
Data Protection Authority
Privacy Legislation
- Finland is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
France
Data Protection Authority
Privacy Legislation
- France is subject to the EU General Data Protection Regulation.
- DPA Official Texts Page
Additional Resources
-
French Guiana
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for French Guiana.
-
French Polynesia
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for French Polynesia.
-
French Southern Territories
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the French Southern Territories.
-
Gabon
Data Protection Authority
Privacy Legislation
Additional Resources
-
Gambia (Republic of The)
Data Protection Authority
Privacy Legislation
- The IAPP is unaware of comprehensive data protection legislation for Gambia (Republic of The).
Additional Resources
-
Georgia
Data Protection Authority
Privacy Legislation
Additional Resources
-
Germany
Data Protection Authority
Privacy Legislation
- Germany is subject to the EU General Data Protection Regulation.
Additional Resources
-
Ghana
Data Protection Authority
Privacy Legislation
Additional Resources
-
Gibraltar
Data Protection Authority
Privacy Legislation
Additional Resources
-
Greece
Data Protection Authority
Privacy Legislation
- Greece is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Greenland
Data Protection Authority
Privacy Legislation
-
Grenada
Data Protection Authority
- Information Commission (not yet established)
Privacy Legislation
Additional Resources
-
Guadeloupe
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Guadeloupe.
Additional Resources
-
Guam
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Guam.
-
Guatemala
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Guatemala.
Additional Resources
-
Guernsey
Data Protection Authority
Privacy Legislation
Additional Resources
-
Guinea
Data Protection Authority
- The IAPP is unaware of a data protection authority for Guinea.
Privacy Legislation
Additional Resources
-
Guinea-Bissau
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Guinea-Bissau.
Additional Resources
-
Guyana
Data Protection Authority
- The IAPP is unaware of a data protection authority for Guyana.
Privacy Legislation
-
Haiti
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Haiti.
Additional Resources
-
Heard Island and McDonald Islands
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Heard Island and McDonald Islands.
-
Honduras
Data Protection Authority
- The IAPP is unaware of a data protection authority for Honduras.
Privacy Legislation
Additional Resources
-
Hong Kong
Data Protection Authority
Privacy Legislation
Additional Resources
-
Hungary
Data Protection Authority
Privacy Legislation
- Hungary is subject to the EU General Data Protection Regulation.
Additional Resources
-
Iceland
Data Protection Authority
Privacy Legislation
- Iceland is subject to the EU General Data Protection Regulation.
- Act 90/2018 on Privacy and Processing of Personal Data (GDPR implementation)
- DPA Legislation Page
Additional Resources
-
India
Data Protection Authority
- Data Protection Board of India (yet to be established.)
Privacy Legislation
Additional Resources
-
Indonesia
Data Protection Authority
- The IAPP is unaware of a data protection authority for Indonesia.
Privacy Legislation
Additional Resources
-
Iran (Islamic Republic of)
Data Protection Authority
Privacy Legislation
- The IAPP is unaware of comprehensive data protection legislation for Iran (Islamic Republic of).
Additional Resources
-
Iraq
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Iraq.
Additional Resources
-
Ireland
Data Protection Authority
Privacy Legislation
- Ireland is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Isle of Man
Data Protection Authority
Privacy Legislation
Additional Resources
-
Israel
Data Protection Authority
Privacy Legislation
Additional Resources
-
Italy
Data Protection Authority
Privacy Legislation
- Italy is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Jamaica
Data Protection Authority
Privacy Legislation
-
Japan
Data Protection Authority
Privacy Legislation
- Act on the Protection of Personal Information, No. 57 of 2003, as amended in 2020 ("APPI")
- DPA Legislation Page
Additional Resources
-
Jersey
Data Protection Authority
Privacy Legislation
Additional Resources
-
Jordan
Data Protection Authority
Privacy Legislation
Additional Resources
-
Kazakhstan
Data Protection Authority
Privacy Legislation
Additional Resources
-
Kenya
Data Protection Authority
Privacy Legislation
Additional Resources
-
Kiribati
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Kiribati.
-
Kosovo
Data Protection Authority
Privacy Legislation
Additional Resources
-
Kuwait
Data Protection Authority
Privacy Legislation
Additional Resources
-
Kyrgyzstan
Data Protection Authority
Privacy Legislation
Additional Resources
-
Lao People’s Democratic Republic
Data Protection Authority
Privacy Legislation
Additional Resources
-
Latvia
Data Protection Authority
Privacy Legislation
- Latvia is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Lebanon
Data Protection Authority
- The IAPP is unaware of a data protection authority for Lebanon.
Privacy Legislation
Additional Resources
-
Lesotho
Data Protection Authority
- The Data Protection Commission (yet to be established.)
Privacy Legislation
Additional Resources
-
Liberia
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Liberia.
Additional Resources
-
Libya
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Libya.
Additional Resources
-
Liechtenstein
Data Protection Authority
Privacy Legislation
- Liechtenstein is subject to the EU General Data Protection Regulation.
- National Laws Page
Additional Resources
-
Lithuania
Data Protection Authority
Privacy Legislation
- Lithuania is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Luxembourg
Data Protection Authority
Privacy Legislation
- Luxembourg is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Macau
Data Protection Authority
Privacy Legislation
Additional Resources
-
Madagascar
Data Protection Authority
- The Madagascan Information Commission (yet to be established.)
Privacy Legislation
Additional Resources
-
Malawi
Data Protection Authority
Privacy Legislation
Additional Resources
-
Malaysia
Data Protection Authority
Privacy Legislation
Additional Resources
-
Maldives
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Maldives.
-
Mali
Data Protection Authority
Privacy Legislation
Additional Resources
-
Malta
Data Protection Authority
Privacy Legislation
- Malta is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Marshall Islands
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Marshall Islands.
-
Martinique
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Martinique.
-
Mauritania
Data Protection Authority
- Personal Data Protection Authority (yet to be established.)
Privacy Legislation
Additional Resources
-
Mauritius
Data Protection Authority
Privacy Legislation
Additional Resources
-
Mayotte
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Mayotte.
Additional Resources
-
Mexico
Data Protection Authority
Privacy Legislation
- Federal Law on Protection of Personal Data Held by Private Parties
- General Law on Protection of Personal Data in Possession of Obligated Subjects
- DPA Regulations Page
Additional Resources
-
Micronesia (Federated States of)
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Micronesia (Federated States of).
-
Monaco
Data Protection Authority
Privacy Legislation
Additional Resources
-
Mongolia
Data Protection Authority
Privacy Legislation
Additional Resources
-
Montenegro
Data Protection Authority
Privacy Legislation
Additional Resources
-
Montserrat
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Montserrat.
-
Morocco
Data Protection Authority
Privacy Legislation
Additional Resources
-
Mozambique
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of comprehensive data protection legislation for Mozambique.
Additional Resources
-
Myanmar
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of comprehensive data protection legislation for Myanmar.
Additional Resources
-
Namibia
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of comprehensive data protection legislation for Namibia.
Additional Resources
-
Nauru
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of comprehensive data protection legislation for Nauru.
-
Nepal
Data Protection Authority
- The IAPP is unaware of a data protection authority for Nepal.
Privacy Legislation
Additional Resources
-
Netherlands (Kingdom of the)
Data Protection Authority
Privacy Legislation
- The Netherlands (Kingdom of the) is subject to the EU General Data Protection Regulation.
Additional Resources
-
New Caledonia
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for New Caledonia.
-
New Zealand
Data Protection Authority
Privacy Legislation
Additional Resources
-
Nicaragua
Data Protection Authority
- Nicaraguan data protection authority (DIPRODAP) (yet to be established.)
Privacy Legislation
Additional Resources
-
Niger
Data Protection Authority
Privacy Legislation
Additional Resources
-
Nigeria
Data Protection Authority
Privacy Legislation
Additional Resources
-
Niue
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Niue.
-
North Macedonia
Data Protection Authority
Privacy Legislation
Additional Resources
-
Northern Mariana Islands
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Northern Mariana Islands.
-
Norway
Data Protection Authority
Privacy Legislation
- Norway is subject to the EU General Data Protection Regulation.
- DPA Regulations Page
Additional Resources
-
Oman
Data Protection Authority
Privacy Legislation
Additional Resources
-
Pakistan
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Pakistan.
Additional Resources
-
Palau
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Palau.
-
Palestinian Territories
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Palestinian Territories.
Additional Resources
-
Panama
Data Protection Authority
Privacy Legislation
Additional Resources
-
Papua New Guinea
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Papua New Guinea.
Additional Resources
-
Paraguay
Data Protection Authority
- The IAPP is unaware of a data protection authority for Paraguay.
Privacy Legislation
Additional Resources
-
Peru
Data Protection Authority
Privacy Legislation
Additional Resources
-
Philippines
Data Protection Authority
Privacy Legislation
Additional Resources
-
Poland
Data Protection Authority
Privacy Legislation
- Poland is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Portugal
Data Protection Authority
Privacy Legislation
- Portugal is subject to the EU General Data Protection Regulation.
Additional Resources
-
Puerto Rico
Data Protection Authority
Privacy Legislation
- The IAPP is unaware of comprehensive data protection legislation for Puerto Rico.
-
Qatar
Data Protection Authority
Privacy Legislation
Additional Resources
-
Republic of Korea
Data Protection Authority
Privacy Legislation
Additional Resources
-
Republic of Moldova
Data Protection Authority
Privacy Legislation
- Law No. 182-XVI of 10 July 2008 regarding the Approval of the National Center for Personal Data Protection Regulation, Structure, Staff-limit and its Financial Arrangements
- DPA Legislation Page
Additional Resources
-
Republic of the Congo
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Republic of the Congo.
Additional Resources
-
Réunion
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Réunion.
-
Romania
Data Protection Authority
Privacy Legislation
- Romania is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Russian Federation
Data Protection Authority
Privacy Legislation
Additional Resources
-
Rwanda
Data Protection Authority
Privacy Legislation
Additional Resources
-
Saint Barthélemy
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Saint Barthélemy.
-
Saint Kitts and Nevis
Data Protection Authority
- Information Commissioner (yet to be established.)
Privacy Legislation
-
Saint Lucia
Data Protection Authority
- Data Protection Commissioner (link unavailable.)
Privacy Legislation
-
Saint Martin
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Saint Martin.
-
Saint Pierre and Miquelon
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Saint Pierre and Miquelon.
-
Saint Vincent and the Grenadines
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Saint Vincent and the Grenadines.
-
Samoa
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Samoa.
-
San Marino
Data Protection Authority
Privacy Legislation
- Law No. 171 of 21 December 2018, Protection of Natural Persons with Regard to the Processing of Personal Data
- DPA Legislation Page
Additional Resources
-
São Tomé and Príncipe
Data Protection Authority
Privacy Legislation
Additional Resources
-
Saudi Arabia
Data Protection Authority
Privacy Legislation
Additional Resources
-
Senegal
Data Protection Authority
Privacy Legislation
Additional Resources
-
Serbia
Data Protection Authority
Privacy Legislation
Additional Resources
-
Seychelles
Data Protection Authority
Privacy Legislation
Additional Resources
-
Sierra Leone
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Sierra Leone.
Additional Resources
-
Singapore
Data Protection Authority
Privacy Legislation
Additional Resources
-
Sint Maarten
Data Protection Authority
- Personal Data Protection Supervisory Committee (link unavailable.)
Privacy Legislation
-
Slovakia
Data Protection Authority
Privacy Legislation
- Slovakia is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Slovenia
Data Protection Authority
Privacy Legislation
- Slovenia is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Solomon Islands
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Solomon Islands.
-
Somalia
Data Protection Authority
Privacy Legislation
Additional Resources
-
South Africa
Data Protection Authority
Privacy Legislation
Additional Resources
-
South Georgia and the South Sandwich Islands
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for South Georgia and the South Sandwich Islands.
-
South Sudan
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for South Sudan.
Additional Resources
-
Spain
Data Protection Authority
Privacy Legislation
- Spain is subject to the EU General Data Protection Regulation.
- DPA Legislation Page
Additional Resources
-
Sri Lanka
Data Protection Authority
- The Data Protection Authority of Sri Lanka (yet to be established.)
Privacy Legislation
Additional Resources
-
Sudan
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Sudan.
Additional Resources
-
Suriname
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Suriname.
Additional Resources
-
Svalbard and Jan Mayen
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Svalbard and Jan Mayen.
-
Sweden
Data Protection Authority
Privacy Legislation
- Sweden is subject to the EU General Data Protection Regulation.
Additional Resources
-
Switzerland
Data Protection Authority
Privacy Legislation
Additional Resources
-
Syrian Arab Republic
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Syria.
Additional Resources
-
Taiwan
Data Protection Authority
Privacy Legislation
Additional Resources
-
Tajikistan
Data Protection Authority
Privacy Legislation
Additional Resources
-
Thailand
Data Protection Authority
Privacy Legislation
Additional Resources
-
Timor-Leste
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Timor-Leste.
Additional Resources
-
Togo
Data Protection Authority
- Togolese Data Protection Authority (IPDCP)
Privacy Legislation
Additional Resources
-
Tonga
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Tonga.
-
Trinidad and Tobago
Data Protection Authority
- Office of the Information Commissioner (yet to be established.)
Privacy Legislation
Additional Resources
-
Tunisia
Data Protection Authority
Privacy Legislation
Additional Resources
-
Türkiye
Data Protection Authority
Privacy Legislation
Additional Resources
-
Turkmenistan
Data Protection Authority
Privacy Legislation
Additional Resources
-
Turks and Caicos Islands
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Turks and Caicos Islands.
-
Uganda
Data Protection Authority
Privacy Legislation
Additional Resources
-
Ukraine
Data Protection Authority
Privacy Legislation
Additional Resources
-
United Arab Emirates
Data Protection Authority
- UAE Data Office (yet to be established.)
Privacy Legislation
- Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data
- Government Privacy Legislation Page
Additional Resources
-
United Kingdom of Great Britain and Northern Ireland
Data Protection Authority
Privacy Legislation
Additional Resources
-
United Republic of Tanzania
Data Protection Authority
- The Personal Data Protection Commission (PDPC) (link unavailable.)
Privacy Legislation
Additional Resources
-
United States of America
Data Protection Authority
Privacy Legislation
- No general federal privacy regulation, although there are many sectoral laws.
- US Federal Privacy Legislation Tracker
- US State Privacy Legislation Tracker
Additional Resources
-
Uruguay
Data Protection Authority
Privacy Legislation
Additional Resources
-
US Virgin Islands
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the US Virgin Islands.
-
Uzbekistan
Data Protection Authority
Privacy Legislation
Additional Resources
-
Vanuatu
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Vanuatu.
-
Venezuela, Bolivarian Republic of
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Venezuela.
Additional Resources
-
Viet Nam
Data Protection Authority
Privacy Legislation
Additional Resources
-
Wallis and Futuna
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Wallis and Futuna.
-
Western Sahara
Data Protection Authority and Privacy Legislation
- The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Western Sahara.
Additional Resources
-
Yemen
Data Protection Authority
- The IAPP is unaware of a data protection authority for Yemen.
Privacy Legislation
Additional Resources
-
Zambia
Data Protection Authority
- Office of the Data Protection Commissioner (yet to be established.)
Privacy Legislation
Additional Resources
-
Zimbabwe
Data Protection Authority
Privacy Legislation
Additional Resources