CevroData protection law by country and region
Data-protection law across 90 countries and territories: regulators, breach windows, cross-border rules and penalties, with sources. Reference last verified 2026-09.
Africa
Nigeria Data Protection Act (NDPA) 2023
Personal Data Protection Proclamation No. 1321/2024
Personal Data Protection Law 151/2020
Digital Code (Ordinance-Law 23/010 of 2023)
Personal Data Protection Act 2022
POPIA
Kenya DPA
Data Protection and Privacy Act 2019
Law 18-07 on Personal Data Protection (2018)
Ghana DPA
Rwanda DPL
Asia
India DPDPA
Personal Information Protection Law (PIPL) 2021
Law 27/2022 on Personal Data Protection
Personal Data Protection Act 2026
Act on the Protection of Personal Information (APPI)
Data Privacy Act 2012
Personal Data Protection Law / Decree 13/2023
Personal Data Protection Law 6698 (KVKK)
Singapore PDPA
UAE PDPL
Saudi PDPL
Korea PIPA
Europe
Federal Law No. 152-FZ on Personal Data
UK GDPR
Law on Personal Data Protection
Swiss FADP
North America
US privacy and security laws
Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP)
PIPEDA
Law 172-13 on Personal Data Protection
Law on Protection of Personal Data
Personal Data Protection Law
South America
Brazil LGPD
Statutory Law 1581 of 2012
Personal Data Protection Law 25.326
Personal Data Protection Law 29733
Law 19.628 on Protection of Private Life (updated)
Organic Law on Personal Data Protection (2021)
Personal Data Protection Law (recent developments)
Law 18.331 on Personal Data Protection
Oceania
Privacy Act 1988 (Australian Privacy Principles)
Privacy Act 2020
Looking for a country that isn't listed? Countries with limited or no comprehensive data protection law.