IAPP Infographics


IAPP Infographics

This page hosts a collection of infographics published by the IAPP.

Featured Infographics


EU AI Act: Next Steps for Implementation

This resource shows some of the most important dates and milestones for the future implementation of the AI Act.
Read More


AdTech: A Look Back

This infographic traces how adtech law, policy, litigation and enforcement have grown and evolved in 2023.
Read More


At-a-Glance: Professionalizing Organizational AI Governance

This infographic presents key data points from the IAPP-EY Professionalizing Organizational AI Governance Report.
Read More


Countries at-a-Glance: Consumer Trust

This infographic series offers country-specific statistics related to consumer actions, concerns and understanding related to how their data is used.
Read More


At-a-Glance: Privacy Governance Report 2023

This infographic presents key data points from the IAPP-EY Privacy Governance Report.
Read More


Key Dates of Privacy Reform in Australia

This resource provides an overview of federal privacy reform efforts in Australia and what might be expected going forward.
Read More

Latest Infographics

What AI Governance Leaders are Thinking About

In July 2023, the IAPP AI Governance Center convened a group of leaders from industry, government, academia and civil society in Portsmouth, New Hampshire to discuss the future of AI and responsible governance. This infographic presents some of the most prominent themes and questions identified through the discussions. Read More

GDPR at Five

As privacy pros look toward the future, the GDPR’s influence looms large. For privacy pros looking back over the past five years, it is clear that policymakers, companies, and regulators have zeroed in on the importance of privacy to businesses, citizens, and societies. These statistics point to the GDPR’s tangible impact. Read More

Global data transfer contracts

The proliferation of new and updated data privacy laws around the world has resulted in a marked rise in the number of data transfer mechanisms. This infographic shows the jurisdictions that have taken steps to standardize draft contractual clauses for transferring personal data internationally. Read More

US Institutions Privacy Stakeholder Map

Privacy and data protection issues touch dozens of stakeholders across the U.S. government. This infographic is designed to help privacy professionals understand the myriad of entities involved in setting policy and enforcing privacy rules across the three branches of the federal system. Read More

The Growth of State Privacy Legislation

Since 2018, the IAPP has closely tracked privacy legislation developments in the U.S. at the state level. This resource, published by the IAPP Research and Insights team, shows the rapid growth of U.S. state-level privacy initiatives from 2018 through 2022 to provide historical context. Read More

FTC Privacy Rulemaking – The Steps to Get There

Actions and statements by the U.S. Federal Trade Commission this year have made it clear the commission intends to use its rulemaking authority under Section 18 of the FTC Act, 15 U.S.C. §57a, to formulate rules prohibiting unfair or deceptive acts or practices. This infographic outlines the key rulemaking steps. Read More

Brazilian General Data Protection Law may require 50,000 DPOs

Published: October 2020Click To View (PNG) Brazil’s General Data Protection Law is now in effect. Much like the EU General Data Protection Regulation, the LGPD has extraterritorial applicability, meaning any organization processing personal data in Brazil must comply with the law irrespective of the company’s location. One of the LGPD’s requirements for such companies under Article 41 is that they must appoint a data protection officer to be “in charge of processing personal data.” Given the ... Read More

How to get started in privacy engineering

Published: August 2020Click To View (PDF) Privacy engineering is a rapidly growing field in our increasingly data driven world. This infographic offers advice on how to jump start a career in this dynamic profession. It offers tips for pursuing a cross-disciplinary education, searching for career opportunities beyond Big Tech, writing about privacy issues, networking with other professionals, becoming an expert in your own privacy, earning privacy credentials, staying informed about privacy i... Read More

The impact of the CJEU’s decision on 'Schrems II'

Published: July 2020Click To View (PDF)Click To View (JPG) The Court of Justice of the European Union declared the EU-U.S. Privacy Shield arrangement is invalid. However, it did uphold the validity of standard contractual clauses, with a caveat: the third country to which EU data is transferred must have protections in place, particularly around access by public authorities and the ability for EU citizens to have legal redress. ... Read More

CCPA Enforcement Infographic

Published: May 2020Click To View (PDF)Click To View (PNG) The IAPP released a series of infographics as the California Consumer Privacy Act enforcement began July 1, 2020. The infographics highlight the civil penalties companies can face under the CCPA, and based on a survey conducted in partnership with FairWarning, 50% of IT and privacy professionals have reported one or more data breaches, and 67% has documented at least one privacy incident in the past three years. To view the CCPA Litiga... Read More

The Top-10 Most Impactful Provisions of the CPRA

The IAPP created an infographic outlining the 10 most-impactful provisions of the California Privacy Rights Act ballot initiative. The infographic gives a snapshot of the potential implications stemming from the CPRA being passed and entering into force January 2023. New provisions on sensitive data, the creation of an independent regulator and expanded breach liability are among the top impacts in play. Read More

COVID-19 Testing and Health Monitoring

Published: April 2020Click To View (PDF) The IAPP created an infographic outlining the privacy-related questions surrounding COVID-19 testing and health monitoring. As economies reopen, the scope and scale of health data collection, use and sharing will only increase. Employers and businesses are conducting testing, temperature checks and health screenings. This data collection raises novel privacy issues because of its scale, the non-traditional methods and reasons for its collection, and th... Read More

FTC-Facebook vs. largest global privacy and security fines

The U.S. Federal Trade Commission's fine of Facebook for $5 billion is the largest ever global enforcement fine for privacy violations to date, and according to the IAPP Westin Research Center, is more than twice the total number of global privacy and data security regulatory fines in history. This infographic compares the fine of Facebook to other global enforcement fines for privacy violations to date. Read More

ABA Data Breach Response Flowchart

Published: October 2018Click To View (PDF) This flowchart describes the duties imposed on attorneys by the Model Rules of Professional Conduct following a data breach or cyberattack in which client information was compromised. It provides a stepwise process for attorneys to follow after the attack. The chart is based on the guidance published by the American Bar Association in Formal Opinion 483. Attorneys’ duties of competence, confidence, and to keep the client reasonably informed impose di... Read More

What triggers a DPIA under the GDPR?

Published: July 2018Click To View (PDF)Click To View (PNG) The IAPP has created this infographic to help you determine what kinds of activities are more likely to trigger a mandatory data protection impact assessment under the EU General Data Protection Regulation. Print it out for a quick reference when determining how to move forward with a business activity that involves personal information of individuals in the EU. ... Read More

Infographic: GDPR Enforcement Priorities

Published: April 2018 Click To View (PDF) Click To View (PNG) European Supervisory Authorities have shed light on their initial enforcement priorities. Take a look at this IAPP infographic to learn more about where to focus your efforts to be on the right side of regulators. ... Read More