CevroCountries with limited or no comprehensive data protection law
Not every country has a comprehensive data-protection statute. In these jurisdictions our reference found none in force today, but sector rules, constitutional protections and contracts can still create obligations, and a law may be on the way.
What to do when there is no comprehensive law
- Apply the strictest standard you already meet elsewhere, such as the GDPR, so you are ready when a law arrives.
- Check sector rules for health, finance and telecoms, which often exist even without a general statute.
- Keep contracts with customers and vendors explicit about data handling.
- Watch for draft bills and regulator announcements in the markets you plan to enter.
Jurisdictions in this group
Sudan
Constitutional and sectoral privacy provisions apply; monitor for new legislation.
Pakistan
A Personal Data Protection Bill is pending; a 2026 National Data Governance Policy currently covers public-sector data only.
Iran
Sectoral and constitutional privacy rules, plus cyber/e-commerce regulations, apply; monitor developments.
Guatemala
Constitutional privacy protections and sectoral rules apply; developments ongoing.
Haiti
Constitutional and general provisions apply; framework not yet modernized.
Cuba
No publicly detailed comprehensive private-sector data protection law; a state-centric framework applies.
Nicaragua
Constitutional privacy protections apply; no comprehensive modern statute currently in force.
Venezuela
Constitutional and sectoral rules apply; no comprehensive modern private-sector statute.
Bolivia
Constitutional privacy and sectoral provisions apply.
Papua New Guinea
Constitutional privacy and sectoral rules apply; digital governance is developing.
Fiji
Constitutional and general provisions apply, with some sectoral rules.
Solomon Islands
No modern comprehensive data protection framework currently in force.
Vanuatu
No dedicated comprehensive data protection law currently in force.
Samoa
No modern comprehensive private-sector data protection law currently in force.