[ { "country": "Afghanistan", "slug": "afghanistan", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/afghanistan", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Afghanistan." }, { "country": "Åland Islands", "slug": "åland-islands", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Datainspektionen Åland", "url": "https://www.di.ax/" } ], "legislation": [ { "name": "DPA Legislation page", "url": "https://www-di-ax.translate.goog/lagstiftning-och-vagledning?_x_tr_sl=sv&_x_tr_tl=en&_x_tr_hl=en&_x_tr_pto=sc" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/åland-islands", "description": "Data Protection Authority Datainspektionen Åland Privacy Legislation DPA Legislation page" }, { "country": "Albania", "slug": "albania", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale (\"IDP\")", "url": "https://www.idp.al/" } ], "legislation": [ { "name": "Law on the Protection of Personal Data No. 9887 of 10 March 2008", "url": "https://idp.al/wp-content/uploads/2024/01/LDP_english_version_amended_2014-1.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/albania", "description": "Data Protection Authority Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale (\"IDP\") Privacy Legislation Law on the Protection of Personal Data No. 9887 of 10 March 2008" }, { "country": "Algeria", "slug": "algeria", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Autorité Nationale de Protection des Données à caractère Personnel (\"ANPDP\")", "url": "https://anpdp.dz/fr/accueil/" } ], "legislation": [ { "name": "Law No. 18-07 of 25 Ramadhan 1439 Corresponding to June 10, 2018 Relating to the Protection of Individuals in the Processing of Personal Data", "url": "https://www.joradp.dz/FTP/JO-FRANCAIS/2018/F2018034.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/algeria", "description": "Data Protection Authority Autorité Nationale de Protection des Données à caractère Personnel (\"ANPDP\") Privacy Legislation Law No. 18-07 of 25 Ramadhan 1439 Corresponding to June 10, 2018 Relating to the Protection of Individuals in the Processing of Personal Data" }, { "country": "American Samoa", "slug": "american-samoa", "region": "Other", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/american-samoa", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for American Samoa." }, { "country": "Andorra", "slug": "andorra", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Agència Andorrana de Protecció de Dades (\"APDA\")", "url": "https://www.apda.ad/" } ], "legislation": [ { "name": "Law 12/2024, of 15 July, amending Law 29/2021, of 28 October, on the protection of personal data", "url": "https://www.bopa.ad/Documents/Detall?doc=CGL_2024_07_19_11_32_35" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/andorra", "description": "Data Protection Authority Agència Andorrana de Protecció de Dades (\"APDA\") Privacy Legislation Law 12/2024, of 15 July, amending Law 29/2021, of 28 October, on the protection of personal data" }, { "country": "Angola", "slug": "angola", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Agência de Proteção de Dados (\"ADP\")", "url": "https://apd.ao/ao/" } ], "legislation": [ { "name": "Law No. 22/11 on the Protection of Personal Data", "url": "https://www.rapdp.org/sites/default/files/2021-07/Angolan%20Personal%20Data%20Protection%20Legislation%20-%20Law%2022_11%20of%2017th%20June_0.pdf" }, { "name": "DPA Legislation Page", "url": "https://apd.ao/ao/legislacao/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/angola", "description": "Data Protection Authority Agência de Proteção de Dados (\"ADP\") Privacy Legislation Law No. 22/11 on the Protection of Personal Data DPA Legislation Page" }, { "country": "Anguilla", "slug": "anguilla", "region": "Americas", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/anguilla", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Anguilla." }, { "country": "Antigua and Barbuda", "slug": "antigua-and-barbuda", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "The Information Commissioner", "url": "https://ab.gov.ag/detail_page.php?page=20" } ], "legislation": [ { "name": "Data Protection Act (Law No. 10-13)", "url": "http://laws.gov.ag/wp-content/uploads/2019/02/a2013-10.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/antigua-and-barbuda", "description": "Data Protection Authority The Information Commissioner Privacy Legislation Data Protection Act (Law No. 10-13)" }, { "country": "Argentina", "slug": "argentina", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Agencia de Acceso a la Información Pública (\"AAIP\")", "url": "https://www.argentina.gob.ar/aaip" } ], "legislation": [ { "name": "Protection of Personal Data Law 25.326", "url": "https://www.argentina.gob.ar/normativa/nacional/ley-25326-64790/actualizacion" }, { "name": "DPA Regulations Page", "url": "https://www.argentina.gob.ar/aaip/buscador-normativa" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/argentina", "description": "Data Protection Authority Agencia de Acceso a la Información Pública (\"AAIP\") Privacy Legislation Protection of Personal Data Law 25.326 DPA Regulations Page" }, { "country": "Armenia", "slug": "armenia", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Personal Data Protection Agency", "url": "https://www.moj.am/en/structures/view/structure/32" } ], "legislation": [ { "name": "Law on the Protection of Personal Data No. 49-ZR (2015)", "url": "http://www.foi.am/u_files/file/Personaldataprotectionlaw_ENG.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/armenia", "description": "Data Protection Authority Personal Data Protection Agency Privacy Legislation Law on the Protection of Personal Data No. 49-ZR (2015)" }, { "country": "Aruba", "slug": "aruba", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Ministry of Justice", "url": "https://www.gobierno.aw/en/ministry-of-justice-integration-and-public-transport" } ], "legislation": [ { "name": "Personal Data Registration National Ordinance", "url": "https://cuatro.sim-cdn.nl/arubaoverheid2858bd/uploads/ab2011no.37.pdf?cb=VPTvcx59" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/aruba", "description": "Data Protection Authority Ministry of Justice Privacy Legislation Personal Data Registration National Ordinance" }, { "country": "Australia", "slug": "australia", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Office of the Australian Information Commissioner (\"OAIC\")", "url": "https://www.oaic.gov.au/" } ], "legislation": [ { "name": "Privacy Act 1988 (Cth) No. 119 1998 and Australian Privacy Principles (\"APPs\") + sectoral state coverage", "url": "https://www.legislation.gov.au/Series/C2004A03712" }, { "name": "DPA Legislation Page", "url": "https://www.oaic.gov.au/privacy/privacy-legislation" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/australia", "description": "Data Protection Authority Office of the Australian Information Commissioner (\"OAIC\") Privacy Legislation Privacy Act 1988 (Cth) No. 119 1998 and Australian Privacy Principles (\"APPs\") + sectoral state coverage DPA Legislation Page" }, { "country": "Austria", "slug": "austria", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Österreichische Datenschutzbehörde (\"DSB\")", "url": "https://data-protection-authority.gv.at/" } ], "legislation": [ { "name": "Federal Act concerning the Protection of Personal Data", "url": "https://www.ris.bka.gv.at/Dokumente/Erv/ERV_1999_1_165/ERV_1999_1_165.html" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" }, { "name": "DPA Legislation Page", "url": "https://data-protection-authority.gv.at/data-protection-laws/relevant-data-protection-laws" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/austria", "description": "Data Protection Authority Österreichische Datenschutzbehörde (\"DSB\") Privacy Legislation Federal Act concerning the Protection of Personal Data Austria is subject to the EU General Data Protection Regulation . DPA Legislation Page" }, { "country": "Azerbaijan", "slug": "azerbaijan", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Ministry of Digital Development and Transport", "url": "https://mincom.gov.az/en" } ], "legislation": [ { "name": "Law on Personal Information (May 2010)", "url": "https://mincom.gov.az/storage/pages/376/998-iiiq-ferdi-melumatlar-haqqinda.pdf" }, { "name": "Government Legislation Page", "url": "https://mincom.gov.az/en/legal/laws" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/azerbaijan", "description": "Data Protection Authority Ministry of Digital Development and Transport Privacy Legislation Law on Personal Information (May 2010) Government Legislation Page" }, { "country": "Bahamas", "slug": "bahamas", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Office of the Data Protection Commissioner (\"DPC\")", "url": "https://www.dataprotection.gov.bs/" } ], "legislation": [ { "name": "Data Protection (Privacy of Personal Information) Act (\"DPA\")", "url": "https://laws.bahamas.gov.bs/cms/images/LEGISLATION/PRINCIPAL/2003/2003-0003/2003-0003.pdf?zoom_highlight=Police+act" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/bahamas", "description": "Data Protection Authority Office of the Data Protection Commissioner (\"DPC\") Privacy Legislation Data Protection (Privacy of Personal Information) Act (\"DPA\")" }, { "country": "Bahrain", "slug": "bahrain", "region": "Middle East", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Personal Data Protection Authority", "url": "http://www.pdp.gov.bh/en/index.html" } ], "legislation": [ { "name": "Law No. 30 of 2018 - Personal Data Protection (\"PDPL\")", "url": "http://www.pdp.gov.bh/en/regulations.html" }, { "name": "DPA Executive Decisions/Orders Page", "url": "https://www.pdp.gov.bh/en/executive-decisions.html" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/bahrain", "description": "Data Protection Authority Personal Data Protection Authority Privacy Legislation Law No. 30 of 2018 - Personal Data Protection (\"PDPL\") DPA Executive Decisions/Orders Page" }, { "country": "Bangladesh", "slug": "bangladesh", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "National Data Governance and Interoperability Authority", "url": "https://dsa.gov.bd/" } ], "legislation": [ { "name": "Personal Data Protection Ordinance, 2025 (draft)", "url": "https://bcc.gov.bd/sites/default/files/files/bcc.portal.gov.bd/notices/fab09ab5_bbc2_48be_8df7_1ad8c425b6d6/2025-05-13-06-35-1c64a2d41ea656769ddd832a36b74f0e.pdf" }, { "name": "Acts and Rules", "url": "https://dsa.gov.bd/site/page/50cf7d8c-954c-413f-8f23-eee744a1cd8d/Acts-&-Rules" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/bangladesh", "description": "Data Protection Authority National Data Governance and Interoperability Authority Privacy Legislation Personal Data Protection Ordinance, 2025 (draft) Acts and Rules" }, { "country": "Barbados", "slug": "barbados", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Data Protection Commission", "url": "https://www.gov.bb/Departments/data-protection-commissioner" } ], "legislation": [ { "name": "Data Protection Act (\"Act\")", "url": "https://oag.gov.bb/attachments/Data%20Protection%20Act,%202019-29.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/barbados", "description": "Data Protection Authority Data Protection Commission Privacy Legislation Data Protection Act (\"Act\")" }, { "country": "Belarus", "slug": "belarus", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "National Personal Data Protection Center (\"NPDPC\")", "url": "https://cpd.by/en/about-center/" } ], "legislation": [ { "name": "Law on Personal Data Protection No. 99-Z (2021)", "url": "https://cpd.by/en/national-regulation/the-belarusian-data-protection-act/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/belarus", "description": "Data Protection Authority National Personal Data Protection Center (\"NPDPC\") Privacy Legislation Law on Personal Data Protection No. 99-Z (2021)" }, { "country": "Belgium", "slug": "belgium", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Autorité De Protection Des Données", "url": "https://www.dataprotectionauthority.be/citizen" } ], "legislation": [ { "name": "Act of 3 December 2017 Establishing the Data Protection Authority, Act of 30 July 2018 on the Protection of Natural Persons with Regard to the Processing of Personal Data", "url": "https://www.dataprotectionauthority.be/publications/act-of-30-july-2018.pdf" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" }, { "name": "DPA Publications", "url": "https://www.autoriteprotectiondonnees.be/citoyen/publications/toutes-les-publications" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/belgium", "description": "Data Protection Authority Autorité De Protection Des Données Privacy Legislation Act of 3 December 2017 Establishing the Data Protection Authority, Act of 30 July 2018 on the Protection of Natural Persons with Regard to the Processing of Personal Data Belgium is subject to the EU General Data Protection Regulation . DPA Publications" }, { "country": "Belize", "slug": "belize", "region": "Americas", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Data Protection Act of 2021 (\"Act\")", "url": "https://www.nationalassembly.gov.bz/wp-content/uploads/2021/12/Act-No-45-of-2021-Data-Protection-Act.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/belize", "description": "Data Protection Authority Data Protection Commissioner Privacy Legislation Data Protection Act of 2021 (\"Act\")" }, { "country": "Benin", "slug": "benin", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "L'Autorité de Protection des Données à caractère Personnel", "url": "https://service.apdp.bj/" } ], "legislation": [ { "name": "Law No. 2009-09 of May 22, 2009 Dealing with the Protection of Personally Identifiable Information (Law No. 2009-09)", "url": "https://sgg.gouv.bj/doc/loi-2009-09/" }, { "name": "DPA Legislation Page", "url": "https://service.apdp.bj/documentations/lois" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/benin", "description": "Data Protection Authority L'Autorité de Protection des Données à caractère Personnel Privacy Legislation Law No. 2009-09 of May 22, 2009 Dealing with the Protection of Personally Identifiable Information (Law No. 2009-09) DPA Legislation Page" }, { "country": "Bermuda", "slug": "bermuda", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Office of the Privacy Commissioner for Bermuda (\"PrivCom\")", "url": "https://www.privacy.bm/about-us" } ], "legislation": [ { "name": "Personal Information Protection Act 2016", "url": "https://www.gov.bm/sites/default/files/Personal-Information-Protection-Act-2016.pdf" }, { "name": "PIPA Overview Page", "url": "https://www.privacy.bm/legislation-guidance" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/bermuda", "description": "Data Protection Authority Office of the Privacy Commissioner for Bermuda (\"PrivCom\") Privacy Legislation Personal Information Protection Act 2016 PIPA Overview Page" }, { "country": "Bhutan", "slug": "bhutan", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Bhutan Information Communication and Media Authority", "url": "https://www.bicma.gov.bt/" } ], "legislation": [ { "name": "ICM Act of Bhutan (2018)", "url": "https://www.bicma.gov.bt/data/publications/act/BICM_Act_2018_English.pdf" }, { "name": "DPA Legislation Page", "url": "https://www.bicma.gov.bt/?page_id=31" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/bhutan", "description": "Data Protection Authority Bhutan Information Communication and Media Authority Privacy Legislation ICM Act of Bhutan (2018) DPA Legislation Page" }, { "country": "Bolivia (Plurinational State of)", "slug": "bolivia-plurinational-state-of", "region": "Other", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/bolivia-plurinational-state-of", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Bolivia." }, { "country": "Bonaire, Sint Eustatius and Saba", "slug": "bonaire-sint-eustatius-and-saba", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Commissie toezicht bescherming persoonsgegevens (\"CBPBES\")", "url": "https://cbpbes.com/en/" } ], "legislation": [ { "name": "BES Personal Data Protection Act", "url": "https://cbpbes.com/wp-content/uploads/2019/08/WBP-BES-.pdf" }, { "name": "DPA Legislation Page", "url": "https://cbpbes.com/en/privacy-category/laws/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/bonaire-sint-eustatius-and-saba", "description": "Data Protection Authority Commissie toezicht bescherming persoonsgegevens (\"CBPBES\") Privacy Legislation BES Personal Data Protection Act DPA Legislation Page" }, { "country": "Bosnia and Herzegovina", "slug": "bosnia-and-herzegovina", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Agencija za zaštitu ličnih podataka u Bosni i Hercegovini (\"AZLP\")", "url": "https://azlp.ba/" } ], "legislation": [ { "name": "Law on Personal Data Protection No. 12/25", "url": "https://azlp.ba/propisi/default.aspx?id=4546&langTag=en-US" }, { "name": "DPA Regulations Page", "url": "http://www.azlp.ba/propisi/Default.aspx?id=5&langTag=en-US&template_id=149&pageIndex=1" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/bosnia-and-herzegovina", "description": "Data Protection Authority Agencija za zaštitu ličnih podataka u Bosni i Hercegovini (\"AZLP\") Privacy Legislation Law on Personal Data Protection No. 12/25 DPA Regulations Page" }, { "country": "Botswana", "slug": "botswana", "region": "Africa", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Data Protection Act, 2024 – Act No. 18 of 2024", "url": "https://itlawco.com/focus-areas/data-protection-and-privacy/data-protection-act-18-of-2024-botswana/" } ], "tags": [ "DPA Pending" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/botswana", "description": "Data Protection Authority Not yet established, but will be the Information and Data Protection Commission. Privacy Legislation Data Protection Act, 2024 – Act No. 18 of 2024" }, { "country": "Brazil", "slug": "brazil", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Autoridade Nacional de Proteção de Dados (\"ANPD\")", "url": "https://www.gov.br/anpd/pt-br" } ], "legislation": [ { "name": "Brazilian Data Protection Law (\"LGPD\"), Federal Law no. 13,709/2018", "url": "https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/L13709.htm" }, { "name": "DPA Legislation Page", "url": "https://www.gov.br/anpd/pt-br/centrais-de-conteudo/legislacao" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/brazil", "description": "Data Protection Authority Autoridade Nacional de Proteção de Dados (\"ANPD\") Privacy Legislation Brazilian Data Protection Law (\"LGPD\"), Federal Law no. 13,709/2018 DPA Legislation Page" }, { "country": "British Virgin Islands", "slug": "british-virgin-islands", "region": "Americas", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Data Protection Act of 2021", "url": "https://eservices.gov.vg/gazette/sites/eservices.gov.vg.gazette/files/newattachments/Act%20No.%203%20of%202021-Data%20Protection%20Act%2C%202021.pdf" } ], "tags": [ "DPA Pending" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/british-virgin-islands", "description": "Data Protection Authority Not yet established, but will be the Office of the Information Commissioner. Privacy Legislation Data Protection Act of 2021" }, { "country": "Brunei Darussalam", "slug": "brunei-darussalam", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Authority for Info-communications Technology Industry of Brunei Darussalam (AITI)", "url": "https://www.aiti.gov.bn/" } ], "legislation": [ { "name": "Personal Data Protection Order, 2025", "url": "https://pdp.aiti.gov.bn/media/tndpduml/s-1_2025-e.pdf" }, { "name": "DPA Guidance Documents", "url": "https://pdp.aiti.gov.bn/publications/guidebooks/?pageNumber=1&pageSize=9&searchTerms=" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/brunei-darussalam", "description": "Data Protection Authority Authority for Info-communications Technology Industry of Brunei Darussalam (AITI) Privacy Legislation Personal Data Protection Order, 2025 DPA Guidance Documents" }, { "country": "Bulgaria", "slug": "bulgaria", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Commission for Personal Data Protection (\"CPDP\")", "url": "https://www.cpdp.bg/en/" } ], "legislation": [ { "name": "The Protection of Personal Data Act 2002", "url": "https://cpdp.bg/en/legislation/personal-data-protection-act/" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" }, { "name": "DPA Legislation Page", "url": "https://cpdp.bg/en/legislation/" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/bulgaria", "description": "Data Protection Authority Commission for Personal Data Protection (\"CPDP\") Privacy Legislation The Protection of Personal Data Act 2002 Bulgaria is subject to the  EU General Data Protection Regulation . DPA Legislation Page" }, { "country": "Burkina Faso", "slug": "burkina-faso", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Commission de l'Informatique et des Libertes (\"CIL\")", "url": "https://www.cil.bf/" } ], "legislation": [ { "name": "Act No. 001-2021/AN of 30 March 2021 (\"the 2021 Act\")", "url": "https://www.afapdp.org/wp-content/uploads/2021/06/Decret-2021-0276-promulguant-la-loi-n001-2021-du-30-mars-2021-portant-protection-des-personnes-a-legart-du-traitement-des-donnees-a-caratere-personnel.pdf" }, { "name": "DPA Legislation Page", "url": "http://www.cil.bf/index.php/legislation/legislation-nationalehttps://cil.bf/?page_id=1017" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/burkina-faso", "description": "Data Protection Authority Commission de l'Informatique et des Libertes (\"CIL\") Privacy Legislation Act No. 001-2021/AN of 30 March 2021 (\"the 2021 Act\") DPA Legislation Page" }, { "country": "Burundi", "slug": "burundi", "region": "Africa", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/burundi", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Burundi." }, { "country": "Cabo Verde", "slug": "cabo-verde", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Comissão Nacional de Protecção de Dados (\"CNPD\")", "url": "https://www.cnpd.cv/" } ], "legislation": [ { "name": "Law 133-V-2001 on the Protection of Personal Data (as amended by Law No. 41/VIII/2013 - General Legal Regime for the Protection of Personal Data of Individuals (only available in Portuguese here) and Law No. 121/IX/2021 of 17 March 2021", "url": "https://www.cnpd.cv/leis/Lei%20121.IX.2021%20altera%C3%A7%C3%A3o%20Lei%2041.VIII.2013.pdfhttps://www.cnpd.cv/wp-content/uploads/2025/03/Lei-121.IX_.2021-alteracao-Lei-41.VIII_.2013.pdf" }, { "name": "DPA Legislation Page", "url": "https://www.cnpd.cv/legislacao/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/cabo-verde", "description": "Data Protection Authority Comissão Nacional de Protecção de Dados (\"CNPD\") Privacy Legislation Law 133-V-2001 on the Protection of Personal Data (as amended by Law No. 41/VIII/2013 - General Legal Regime for the Protection of Personal Data of Individuals (only available in Portuguese here) and Law No. 121/IX/2021 of 17 March 2021 DPA Legislation Page" }, { "country": "Cambodia", "slug": "cambodia", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Ministry of Post and Telecommunications", "url": "https://mptc.gov.kh/" } ], "legislation": [ { "name": "Draft Law on Personal Data Protection", "url": "https://dgcbriefings.substack.com/p/cambodia-draft-law-on-personal-data" }, { "name": "DPA Legislation Page", "url": "https://mptc.gov.kh/en/laws-regulations/laws/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/cambodia", "description": "Data Protection Authority Ministry of Post and Telecommunications Privacy Legislation Draft Law on Personal Data Protection DPA Legislation Page" }, { "country": "Cameroon", "slug": "cameroon", "region": "Africa", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Law No. 2024/017 - Personal Data Protection Act", "url": "https://www.prc.cm/en/multimedia/documents/10271-law-n-2024-017-of-23-12-2024-web" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/cameroon", "description": "Data Protection Authority Personal Data Protection Authority Privacy Legislation Law No. 2024/017 - Personal Data Protection Act" }, { "country": "Canada", "slug": "canada", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Office of Privacy Commissioner (\"OPC\")", "url": "https://www.priv.gc.ca/en/" } ], "legislation": [ { "name": "Personal Information Protection and Electronic Documents Act 2000 (\"PIPEDA\")", "url": "https://laws-lois.justice.gc.ca/PDF/P-8.6.pdf" }, { "name": "DPA Legislation Page", "url": "https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/canada", "description": "Data Protection Authority Office of Privacy Commissioner (\"OPC\") Privacy Legislation Personal Information Protection and Electronic Documents Act 2000 (\"PIPEDA\") DPA Legislation Page" }, { "country": "Cayman Islands", "slug": "cayman-islands", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Office of the Ombudsman", "url": "https://ombudsman.ky/data-protection" } ], "legislation": [ { "name": "Data Protection Act", "url": "https://ombudsman.ky/images/pdf/laws_regs/Data_Protection_Act_2021_Rev.pdf" }, { "name": "DPA Resources", "url": "https://ombudsman.ky/resources" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/cayman-islands", "description": "Data Protection Authority Office of the Ombudsman Privacy Legislation Data Protection Act DPA Resources" }, { "country": "Central African Republic", "slug": "central-african-republic", "region": "Africa", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/central-african-republic", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Central African Republic." }, { "country": "Chad", "slug": "chad", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Agence Nationale de Sécurité Informatique et de Certification Électronique (\"ANSICE\")", "url": "https://www.ansice.td/" } ], "legislation": [ { "name": "Law No. 007/PR/2015 on Protection of Personal Data", "url": "https://ansice.td/assets/documents/loi_07.pdf" }, { "name": "DPA Legislation Page", "url": "https://ansice.td/publications" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/chad", "description": "Data Protection Authority Agence Nationale de Sécurité Informatique et de Certification Électronique (\"ANSICE\") Privacy Legislation Law No. 007/PR/2015 on Protection of Personal Data DPA Legislation Page" }, { "country": "Chile", "slug": "chile", "region": "Americas", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Law on the Protection of Personal Data No. 21.719", "url": "https://www.diariooficial.interior.gob.cl/publicaciones/2024/12/13/44023/01/2583630.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/chile", "description": "Data Protection Authority The IAPP is unaware of a data protection authority for Chile. Privacy Legislation Law on the Protection of Personal Data No. 21.719" }, { "country": "China", "slug": "china", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Cyberspace Administration of China", "url": "https://www.cac.gov.cn/" } ], "legislation": [ { "name": "Personal Information Protection Law, 2021 (\"PIPL\")", "url": "http://en.npc.gov.cn.cdurl.cn/2021-12/29/c_694559.htm" }, { "name": "DPA Policies and Regulations", "url": "https://www.cac.gov.cn/wxzw/zcfg/A093703index_1.htm" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/china", "description": "Data Protection Authority Cyberspace Administration of China Privacy Legislation Personal Information Protection Law, 2021 (\"PIPL\") DPA Policies and Regulations" }, { "country": "Colombia", "slug": "colombia", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Superintendencia de Industria y Comercio (\"SIC\")", "url": "https://www.sic.gov.co/" } ], "legislation": [ { "name": "Statutory Law 1581 of 2012 (\"Personal Data Protection Law\")", "url": "https://www.alcaldiabogota.gov.co/sisjur/normas/Norma1.jsp?i=49981" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/colombia", "description": "Data Protection Authority Superintendencia de Industria y Comercio (\"SIC\") Privacy Legislation Statutory Law 1581 of 2012 (\"Personal Data Protection Law\")" }, { "country": "Comoros", "slug": "comoros", "region": "Africa", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/comoros", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Comoros." }, { "country": "Cook Islands", "slug": "cook-islands", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Ombudsman", "url": "https://ombudsman.gov.ck/" }, { "name": "Official Information Act 2008", "url": "https://cookislandslaws.gov.ck/#/InternalConsolidatedLaws?legalId=LOCI.OIA.OIA08&parent_id=Official%20Information%20Act%202008" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/cook-islands", "description": "Data Protection Authority and Privacy Legislation Ombudsman Privacy Legislation Official Information Act 2008" }, { "country": "Costa Rica", "slug": "costa-rica", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Agencia de Protección de Datos de los Habitantes (\"PRODHAB\")", "url": "http://www.prodhab.go.cr/" } ], "legislation": [ { "name": "Law No. 8968 (Law on the Protection of Persons Regarding the Processing of their Personal Data)", "url": "http://www.pgrweb.go.cr/scij/Busqueda/Normativa/Normas/nrm_texto_completo.aspx?param1=NRTC&nValor1=1&nValor2=70975&nValor3=85989&strTipM=TC%20http://www.pgrweb.go.cr/scij/Busqueda/Normativa/Normas/nrm_texto_completo.aspx?param1=NRTC&nValor1=1&nValor2=74352&nValor3=106487&strTipM=TC" }, { "name": "DPA Regulations Page", "url": "http://www.prodhab.go.cr/reformas/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/costa-rica", "description": "Data Protection Authority Agencia de Protección de Datos de los Habitantes (\"PRODHAB\") Privacy Legislation Law No. 8968 (Law on the Protection of Persons Regarding the Processing of their Personal Data) DPA Regulations Page" }, { "country": "Côte d’Ivoire", "slug": "côte-d’ivoire", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Autirite de Regulation des Telecomunications de Cote d'Ivoire (\"ARTCI\")", "url": "https://www.artci.ci/" } ], "legislation": [ { "name": "Law 2013-450 on the Protection of Personal Data", "url": "https://www.artci.ci/images/stories/pdf-english/lois_english/loi_2013_450_english.pdf" }, { "name": "DPA Legislation Page", "url": "https://www.autoritedeprotection.ci/lois/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/côte-d’ivoire", "description": "Data Protection Authority Autirite de Regulation des Telecomunications de Cote d'Ivoire (\"ARTCI\") Privacy Legislation Law 2013-450 on the Protection of Personal Data DPA Legislation Page" }, { "country": "Croatia", "slug": "croatia", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Agencika za zaŝtitu osobnih podataka (\"AZOP\")", "url": "https://azop.hr/" } ], "legislation": [ { "name": "Law on the Implementation of the General Data Protection Regulation 2018", "url": "https://narodne-novine.nn.hr/clanci/sluzbeni/2018_05_42_805.html" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" }, { "name": "DPA Legislation Page", "url": "https://azop.hr/legal-framework/" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/croatia", "description": "Data Protection Authority Agencika za zaŝtitu osobnih podataka (\"AZOP\") Privacy Legislation Law on the Implementation of the General Data Protection Regulation 2018 Croatia is subject to the EU General Data Protection Regulation . DPA Legislation Page" }, { "country": "Cuba", "slug": "cuba", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Ministerio de Justicia", "url": "https://www.minjus.gob.cu/es" } ], "legislation": [ { "name": "Law 149/2022 on Personal Data Protection", "url": "https://www.gacetaoficial.gob.cu/sites/default/files/goc-2022-o90_0.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/cuba", "description": "Data Protection Authority Ministerio de Justicia Privacy Legislation Law 149/2022 on Personal Data Protection" }, { "country": "Curaçao", "slug": "curaçao", "region": "Americas", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Data Protection Ordinance", "url": "https://btnp.org/wp-content/uploads/2019/03/Landsverordening_Bescherming_Persoonsgegevens___AB_2010__no._84_.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/curaçao", "description": "Data Protection Authority Personal Data Protection Board Privacy Legislation Data Protection Ordinance" }, { "country": "Cyprus", "slug": "cyprus", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Office of the Commissioner for the Protection of Personal Data (\"Commissioner\")", "url": "https://www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/home_el/home_el?opendocument" } ], "legislation": [ { "name": "Law 125(I) of 2018 Providing for the Protection of Natural Persons with regard to the Processing of Personal Data and for the Free Movement of Such Data", "url": "https://www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/All/2B53605103DCE4A4C225826300362211" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" }, { "name": "DPA Legislation Page", "url": "http://www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/page3b_en/page3b_en?opendocument" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/cyprus", "description": "Data Protection Authority Office of the Commissioner for the Protection of Personal Data (\"Commissioner\") Privacy Legislation Law 125(I) of 2018 Providing for the Protection of Natural Persons with regard to the Processing of Personal Data and for the Free Movement of Such Data Cyprus is subject to the  EU General Data Protection Regulation . DPA Legislation Page" }, { "country": "Czechia", "slug": "czechia", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Úřad pro ochranu osobních údajů (\"UOOU\")", "url": "https://uoou.gov.cz/en" } ], "legislation": [ { "name": "Act No. 110/2019 Coll. on Personal Data Processing (the Act)", "url": "https://uoou.gov.cz/media/act-no-110-2019-coll.pdf%EF%BB%BF" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" }, { "name": "DPA Legislation Page", "url": "https://uoou.gov.cz/en/legislation" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/czechia", "description": "Data Protection Authority Úřad pro ochranu osobních údajů (\"UOOU\") Privacy Legislation Act No. 110/2019 Coll. on Personal Data Processing (the Act) Czechia is subject to the  EU General Data Protection Regulation . DPA Legislation Page" }, { "country": "Democratic People's Republic of Korea", "slug": "democratic-peoples-republic-of-korea", "region": "Other", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/democratic-peoples-republic-of-korea", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Democratic People's Republic of Korea." }, { "country": "Democratic Republic of the Congo", "slug": "democratic-republic-of-the-congo", "region": "Africa", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Digital Code Law No. 23/10", "url": "https://clinregs.niaid.nih.gov/sites/default/files/documents/DRC/DigiCode_GoogleTranslation.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/democratic-republic-of-the-congo", "description": "Data Protection Authority The IAPP is unaware of a data protection authority for the Democratic Republic of the Congo. Privacy Legislation Digital Code Law No. 23/10" }, { "country": "Denmark", "slug": "denmark", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Datatilsynet", "url": "https://www.datatilsynet.dk/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.datatilsynet.dk/english/legislation" }, { "name": "Act No. 502 of 23 May 2018 on Supplementary Provisions to the Regulation on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data", "url": "https://www.retsinformation.dk/eli/lta/2018/502" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/denmark", "description": "Data Protection Authority Datatilsynet Privacy Legislation DPA Legislation Page Act No. 502 of 23 May 2018 on Supplementary Provisions to the Regulation on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data Denmark is subject to the EU General Data Protection Regulation ." }, { "country": "Diego Garcia", "slug": "diego-garcia", "region": "Other", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/diego-garcia", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Diego Garcia." }, { "country": "Djibouti", "slug": "djibouti", "region": "Africa", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/djibouti", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Djibouti." }, { "country": "Dominica", "slug": "dominica", "region": "Americas", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/dominica", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Dominica." }, { "country": "Dominican Republic", "slug": "dominican-republic", "region": "Americas", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Law No. 172-13 on the Comprehensive Protection of Personal Data Contained in Archives, Public Registries, Databases or Other Technical Means of Data Processing Used for Reporting, Whether Public or Private (2013)", "url": "https://presidencia.gob.do/sites/default/files/statics/transparencia/marco-legal/leyes/Ley-172-13.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/dominican-republic", "description": "Data Protection Authority The IAPP is unaware of a data protection authority for the Dominican Republic. Privacy Legislation Law No. 172-13 on the Comprehensive Protection of Personal Data Contained in Archives, Public Registries, Databases or Other Technical Means of Data Processing Used for Reporting, Whether Public or Private (2013)" }, { "country": "Ecuador", "slug": "ecuador", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Superintendencia de Protección de Datos Personales (SPDP)", "url": "https://spdp.gob.ec/" } ], "legislation": [ { "name": "Ley Organica de Proteccion de Datos Personales (\"Personal Data Protection Law\")", "url": "https://www.asambleanacional.gob.ec/sites/default/files/private/asambleanacional/filesasambleanacionalnameuid-29/Leyes%202013-2017/920-lmoreno/ro-459-5to-sup-26-05-2021.pdf" }, { "name": "DPA Resolutions Page", "url": "https://spdp.gob.ec/resoluciones_spdp/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/ecuador", "description": "Data Protection Authority Superintendencia de Protección de Datos Personales (SPDP) Privacy Legislation Ley Organica de Proteccion de Datos Personales (\"Personal Data Protection Law\") DPA Resolutions Page" }, { "country": "Egypt", "slug": "egypt", "region": "Africa", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Law 151/2020 on the Protection of Personal Data", "url": "https://www.dataguidance.com/sites/default/files/egypt_data_protection_law.pdfhttps://www.acc.com/sites/default/files/program-materials/upload/Data%20Protection%20Law%20-%20Egypt%20-%20EN%20-%20MBH.PDF" } ], "tags": [ "DPA Pending" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/egypt", "description": "Data Protection Authority Personal Data Protection Center (not yet established) Privacy Legislation Law 151/2020 on the Protection of Personal Data" }, { "country": "El Salvador", "slug": "el-salvador", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Agencia de Ciberseguridad del Estado (ACE)", "url": "https://agenciadeciberseguridad.gob.sv/" } ], "legislation": [ { "name": "Ley de Proteccion de Datos Personales", "url": "https://www.asamblea.gob.sv/sites/default/files/documents/dictamenes/735C8568-ED94-4125-99CB-2474D2507CED.pdf" }, { "name": "DPA Legislation", "url": "https://agenciadeciberseguridad.gob.sv/politicas.php" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/el-salvador", "description": "Data Protection Authority Agencia de Ciberseguridad del Estado (ACE) Privacy Legislation Ley de Proteccion de Datos Personales DPA Legislation" }, { "country": "Equatorial Guinea", "slug": "equatorial-guinea", "region": "Africa", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [ "DPA Pending" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/equatorial-guinea", "description": "Data Protection Authority The data protection authority for Equatorial Guinea is not yet established. Privacy Legislation Law No. 1/2016 on the Protection of Personal Data (\"the Law\") - No available copy yet." }, { "country": "Eritrea", "slug": "eritrea", "region": "Africa", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/eritrea", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Eritrea." }, { "country": "Estonia", "slug": "estonia", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Andmekaitse Inspektsioon (\"Data Protection Inspectorate\")", "url": "https://www.aki.ee/en" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.aki.ee/en/guidelines-legislation/legislation" }, { "name": "Personal Data Protection Act 2018", "url": "https://www.riigiteataja.ee/en/eli/523012019001/consolide" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/estonia", "description": "Data Protection Authority Andmekaitse Inspektsioon (\"Data Protection Inspectorate\") Privacy Legislation DPA Legislation Page Personal Data Protection Act 2018 Estonia is subject to the  EU General Data Protection Regulation ." }, { "country": "Eswatini (Swaziland)", "slug": "eswatini-swaziland", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Eswatini Communications Commission (\"the Commission\")", "url": "https://www.esccom.org.sz/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.esccom.org.sz/legislation/" }, { "name": "Data Protection Act No. 5 of 2022", "url": "https://www.esccom.org.sz/legislation/DATA%20PROTECTION%20ACT.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/eswatini-swaziland", "description": "Data Protection Authority Eswatini Communications Commission (\"the Commission\") Privacy Legislation DPA Legislation Page Data Protection Act No. 5 of 2022" }, { "country": "Ethiopia", "slug": "ethiopia", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Ethiopian Communications Authority", "url": "https://eca.et/" } ], "legislation": [ { "name": "Personal Data Protection Proclamation No. 1321/2024", "url": "https://eca.et/wp-content/uploads/2024/10/personal_data_protection_proclamation_No_1321_2024.pdf" }, { "name": "DPA Resources", "url": "https://eca.et/resources/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/ethiopia", "description": "Data Protection Authority Ethiopian Communications Authority Privacy Legislation Personal Data Protection Proclamation No. 1321/2024 DPA Resources" }, { "country": "European Union", "slug": "european-union", "region": "Europe", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "EU General Data Protection Regulation.", "url": "https://gdpr-info.eu/" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/european-union", "description": "Privacy Legislation Member-states of the European Union are subject to the  EU General Data Protection Regulation." }, { "country": "Faroe Islands", "slug": "faroe-islands", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Dátueftirlitið", "url": "https://www.dat.fo/english/" } ], "legislation": [ { "name": "Act No. 80 of 7 June 2020 on the Protection of Personal Data", "url": "https://dat.cdn.fo/savn/opccxh1q/act-on-the-protection-of-personal-data-data-protection-act-act-no-80-on-the-7-june-2020.pdf?s=npz6Af6yDTe-q09LB1mBPmpL3_E" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/faroe-islands", "description": "Data Protection Authority Dátueftirlitið Privacy Legislation Act No. 80 of 7 June 2020 on the Protection of Personal Data" }, { "country": "Fiji", "slug": "fiji", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/fiji", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Fiji." }, { "country": "Finland", "slug": "finland", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Tietosuojavaltuutetun toimisto", "url": "https://tietosuoja.fi/en/home" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://tietosuoja.fi/en/legislation" }, { "name": "Data Protection Act (1050/2018)", "url": "https://tietosuoja.fi/en/legislation" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/finland", "description": "Data Protection Authority Tietosuojavaltuutetun toimisto Privacy Legislation DPA Legislation Page Data Protection Act (1050/2018) Finland is subject to the  EU General Data Protection Regulation ." }, { "country": "France", "slug": "france", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Comission nationale de l'informatique et des libertes (\"CNIL\")", "url": "https://www.cnil.fr/en/home" } ], "legislation": [ { "name": "DPA National Framework Page", "url": "https://www.cnil.fr/fr/cadre-national" }, { "name": "Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties", "url": "https://www.cnil.fr/fr/la-loi-informatique-et-libertes" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/france", "description": "Data Protection Authority Comission nationale de l'informatique et des libertes (\"CNIL\") Privacy Legislation DPA National Framework Page Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties France is subject to the EU General Data Protection Regulation ." }, { "country": "French Guiana", "slug": "french-guiana", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Comission nationale de l'informatique et des libertes (\"CNIL\")", "url": "https://www.cnil.fr/en/home" } ], "legislation": [ { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties", "url": "https://www.cnil.fr/fr/la-loi-informatique-et-libertes" }, { "name": "DPA National Framework Page", "url": "https://www.cnil.fr/fr/cadre-national" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/french-guiana", "description": "Data Protection Authority Comission nationale de l'informatique et des libertes (\"CNIL\") Privacy Legislation GDPR and Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties DPA National Framework Page" }, { "country": "French Polynesia", "slug": "french-polynesia", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Comission nationale de l'informatique et des libertes (\"CNIL\")", "url": "https://www.cnil.fr/en/home" } ], "legislation": [ { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties", "url": "https://www.cnil.fr/fr/la-loi-informatique-et-libertes" }, { "name": "DPA National Framework Page", "url": "https://www.cnil.fr/fr/cadre-national" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/french-polynesia", "description": "Data Protection Authority Comission nationale de l'informatique et des libertes (\"CNIL\") Privacy Legislation GDPR and Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties DPA National Framework Page" }, { "country": "French Southern Territories", "slug": "french-southern-territories", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Comission nationale de l'informatique et des libertes (\"CNIL\")", "url": "https://www.cnil.fr/en/home" } ], "legislation": [ { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties", "url": "https://www.cnil.fr/fr/la-loi-informatique-et-libertes" }, { "name": "DPA National Framework Page", "url": "https://www.cnil.fr/fr/cadre-national" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/french-southern-territories", "description": "Data Protection Authority Comission nationale de l'informatique et des libertes (\"CNIL\") Privacy Legislation GDPR and Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties DPA National Framework Page" }, { "country": "Gabon", "slug": "gabon", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "L'Autorité pour la Protection des Données Personnelles et de la Vie Privée (\"APDPVP\")", "url": "https://www.apdpvp.ga/" } ], "legislation": [ { "name": "Law No. 025/2023 of 09/07/2023 amending Law No. 001/2011 of September 25, 2011, on the protection of personal data", "url": "https://www.afapdp.org/wp-content/uploads/2012/01/Gabon-Loi-relative-%C3%A0-la-protection-des-donn%C3%A9es-personnelles-du-4-mai-20112.pdfhttps://www.apdpvp.ga/wp-content/uploads/2025/01/Gabon-Loi-025-2023-du-12-juillet-2023-portant-modification-de-la-loi-001-2011-du-25-septembre-relative-a-la-protection-des-donnees-a-caractere-personnel.pdf" }, { "name": "DPA Legislation Page", "url": "https://www.apdpvp.ga/textes-et-decisions/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/gabon", "description": "Data Protection Authority L'Autorité pour la Protection des Données Personnelles et de la Vie Privée (\"APDPVP\") Privacy Legislation Law No. 025/2023 of 09/07/2023 amending Law No. 001/2011 of September 25, 2011, on the protection of personal data DPA Legislation Page" }, { "country": "Gambia (Republic of The)", "slug": "gambia-republic-of-the", "region": "Other", "hasDpa": true, "hasLegislation": false, "dpas": [ { "name": "Gambia Public Utilities Regulatory Authority ('PURA')", "url": "https://pura.gm/" } ], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/gambia-republic-of-the", "description": "Data Protection Authority Gambia Public Utilities Regulatory Authority ('PURA') Privacy Legislation Personal Data Protection and Privacy Act, 2025" }, { "country": "Georgia", "slug": "georgia", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Personal Data Protection Service (\"PDPS\")", "url": "https://personaldata.ge/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://pdps.ge/ka/content/958/LEGISLATION" }, { "name": "Law Of Georgia on Personal Data Protection of June 14, 2023, No 3144", "url": "https://matsne.gov.ge/en/document/view/5827307?publication=2" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/georgia", "description": "Data Protection Authority Personal Data Protection Service (\"PDPS\") Privacy Legislation DPA Legislation Page Law Of Georgia on Personal Data Protection of June 14, 2023, No 3144" }, { "country": "Germany", "slug": "germany", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (\"BfDI\")", "url": "https://www.bfdi.bund.de/DE/Home/home_node.html" } ], "legislation": [ { "name": "Federal Data Protection Act of 30 June 2017", "url": "https://www.gesetze-im-internet.de/englisch_bdsg/englisch_bdsg.html" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/germany", "description": "Data Protection Authority Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (\"BfDI\") Privacy Legislation Federal Data Protection Act of 30 June 2017 Germany is subject to the  EU General Data Protection Regulation ." }, { "country": "Ghana", "slug": "ghana", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Data Protection Commission (\"DPC\")", "url": "https://dataprotection.org.gh/" } ], "legislation": [ { "name": "DPA Compliance Page", "url": "https://dataprotection.org.gh/compliance/" }, { "name": "Data Protection Act of 2012", "url": "https://www.dataguidance.com/sites/default/files/data_protection_act_2012_act_843.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/ghana", "description": "Data Protection Authority Data Protection Commission (\"DPC\") Privacy Legislation DPA Compliance Page Data Protection Act of 2012" }, { "country": "Gibraltar", "slug": "gibraltar", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Gibraltar Regulatory Authority", "url": "https://www.gra.gi/data-protection" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.gra.gi/index.php/data-protection/legislation/acts-regs" }, { "name": "Data Protection Act 2004", "url": "https://www.gibraltarlaws.gov.gi/legislations/data-protection-act-2004-1046" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/gibraltar", "description": "Data Protection Authority Gibraltar Regulatory Authority Privacy Legislation DPA Legislation Page Data Protection Act 2004" }, { "country": "Greece", "slug": "greece", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Hellenic Data Protection Authority (\"HDPA\")", "url": "https://www.dpa.gr/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.dpa.gr/en/enimerwtiko/legal_framework/personal_data" }, { "name": "Law 4624/2019 on the Personal Data Protection Authority", "url": "https://www.dpa.gr/sites/default/files/2020-08/LAW%204624_2019_EN_TRANSLATED%20BY%20THE%20HDPA.PDF" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/greece", "description": "Data Protection Authority Hellenic Data Protection Authority (\"HDPA\") Privacy Legislation DPA Legislation Page Law 4624/2019 on the Personal Data Protection Authority Greece is subject to the  EU General Data Protection Regulation ." }, { "country": "Greenland", "slug": "greenland", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Datatilsynet (Danish DPA)", "url": "https://www.datatilsynet.dk/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.datatilsynet.dk/hvad-siger-reglerne/lovgivninghttps://www.datatilsynet.dk/english/legislation" }, { "name": "Personal Data Protection Act 2016", "url": "https://www.datatilsynet.dk/media/7644/anordning_pdl_for_groenland_kal.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/greenland", "description": "Data Protection Authority Datatilsynet (Danish DPA) Privacy Legislation DPA Legislation Page Personal Data Protection Act 2016" }, { "country": "Grenada", "slug": "grenada", "region": "Americas", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Grenada Data Protection Act, No. 1 of 2023 (\"GDPA\")", "url": "https://grenadaparliament.gd/wp-content/uploads/2023/03/Data-Protection-Bill-2023-8-3-23-with-HOR-amendments-Final.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/grenada", "description": "Data Protection Authority Information Commission Privacy Legislation Grenada Data Protection Act, No. 1 of 2023 (\"GDPA\")" }, { "country": "Guadeloupe", "slug": "guadeloupe", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Comission nationale de l'informatique et des libertes (\"CNIL\")", "url": "https://www.cnil.fr/en/home" } ], "legislation": [ { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties", "url": "https://www.cnil.fr/fr/la-loi-informatique-et-libertes" }, { "name": "DPA Official Texts Page", "url": "https://www.cnil.fr/en/official-texts" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/guadeloupe", "description": "Data Protection Authority Comission nationale de l'informatique et des libertes (\"CNIL\") Privacy Legislation GDPR and Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties DPA Official Texts Page" }, { "country": "Guam", "slug": "guam", "region": "Other", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/guam", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Guam." }, { "country": "Guatemala", "slug": "guatemala", "region": "Americas", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/guatemala", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Guatemala." }, { "country": "Guernsey", "slug": "guernsey", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "The Office of the Data Protection Authority (\"ODPA\")", "url": "https://odpa.gg/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.odpa.gg/information-hub/the-law/" }, { "name": "The Data Protection Law, 2017 and The Data Protection Ordinance, 2018", "url": "https://www.odpa.gg/information-hub/the-law/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/guernsey", "description": "Data Protection Authority The Office of the Data Protection Authority (\"ODPA\") Privacy Legislation DPA Legislation Page The Data Protection Law, 2017 and The Data Protection Ordinance, 2018" }, { "country": "Guinea", "slug": "guinea", "region": "Africa", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "DPA Laws and Ordinances Page", "url": "https://www.arpt.gov.gn/lois-et-ordonnances/" }, { "name": "Law No. L/2016/037/AN on Cybersecurity and Personal Data Protection", "url": "https://www.afapdp.org/wp-content/uploads/2018/05/Guinee-loi_2016037an_relative_a_la_cybersecurite_et_protection_des_donees.pdf" } ], "tags": [ "DPA Pending" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/guinea", "description": "Data Protection Authority The data protection authority for Guinea is not yet established. Privacy Legislation DPA Laws and Ordinances Page Law No. L/2016/037/AN on Cybersecurity and Personal Data Protection" }, { "country": "Guinea-Bissau", "slug": "guinea-bissau", "region": "Africa", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/guinea-bissau", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Guinea-Bissau." }, { "country": "Guyana", "slug": "guyana", "region": "Americas", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Data Protection Act No. 18/2023", "url": "https://www.parliament.gov.gy/publications/acts-of-parliament/dataprotectionact18of2023" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/guyana", "description": "Data Protection Authority Data Protection Office Privacy Legislation Data Protection Act No. 18/2023" }, { "country": "Haiti", "slug": "haiti", "region": "Americas", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/haiti", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Haiti." }, { "country": "Heard Island and McDonald Islands", "slug": "heard-island-and-mcdonald-islands", "region": "Other", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/heard-island-and-mcdonald-islands", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Heard Island and McDonald Islands." }, { "country": "Honduras", "slug": "honduras", "region": "Americas", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [ "Link Unavailable" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/honduras", "description": "Data Protection Authority The IAPP is unaware of a data protection authority for Honduras. Privacy Legislation Only Draft Law on the Protection of Personal Data exists (link unavailable.)" }, { "country": "Hong Kong", "slug": "hong-kong", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Office of the Privacy Commissioner for Personal Data (PCPD)", "url": "https://www.pcpd.org.hk/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.pcpd.org.hk/english/data_privacy_law/ordinance_at_a_Glance/ordinance.html" }, { "name": "Personal Data (Privacy) Ordinance (Cap. 486)", "url": "https://www.elegislation.gov.hk/hk/cap486" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/hong-kong", "description": "Data Protection Authority Office of the Privacy Commissioner for Personal Data (PCPD) Privacy Legislation DPA Legislation Page Personal Data (Privacy) Ordinance (Cap. 486)" }, { "country": "Hungary", "slug": "hungary", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Nemzeti Adatvédelmi és Információszabadság Hatóság (\"NAIH\")", "url": "https://www.naih.hu/" } ], "legislation": [ { "name": "Act CXII of 2011 on the Right to Informational Self-determination and on the Freedom of Information, as amended by Act XXXVIII of 2018", "url": "https://www.naih.hu/files/Privacy_Act-CXII-of-2011_EN_201310.pdf" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/hungary", "description": "Data Protection Authority Nemzeti Adatvédelmi és Információszabadság Hatóság (\"NAIH\") Privacy Legislation Act CXII of 2011 on the Right to Informational Self-determination and on the Freedom of Information, as amended by Act XXXVIII of 2018 Hungaryis subject to the  EU General Data Protection Regulation ." }, { "country": "Iceland", "slug": "iceland", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Personu Vernd", "url": "https://www.personuvernd.is/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.personuvernd.is/log-og-reglur/log-um-personuvernd" }, { "name": "Act 90/2018 on Privacy and Processing of Personal Data", "url": "https://www.althingi.is/lagas/nuna/2018090.html" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/iceland", "description": "Data Protection Authority Personu Vernd Privacy Legislation DPA Legislation Page Act 90/2018 on Privacy and Processing of Personal Data Iceland is subject to the EU General Data Protection Regulation ." }, { "country": "India", "slug": "india", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Digital Personal Data Protection Act, 2023 (\"DPDPA\")", "url": "https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf" }, { "name": "DPDPA Rules, 2025", "url": "https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf" }, { "name": "DPA Acts and Policies Page", "url": "https://www.meity.gov.in/documents/act-and-policies?page=1" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/india", "description": "Data Protection Authority Data Protection Board of India Privacy Legislation Digital Personal Data Protection Act, 2023 (\"DPDPA\") and DPDPA Rules, 2025 DPA Acts and Policies Page" }, { "country": "Indonesia", "slug": "indonesia", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Minister of Communications and Digital (\"KOMDIGI\")", "url": "https://www.komdigi.go.id/" } ], "legislation": [ { "name": "Law No. 27 of 2022 regarding Personal Data Protection (\"PDPL\")", "url": "https://peraturan.bpk.go.id/Home/Download/224884/UU%20Nomor%2027%20Tahun%202022.pdf" }, { "name": "DPA Legislation Page", "url": "https://jdih.komdigi.go.id/produk_hukum/kategori" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/indonesia", "description": "Data Protection Authority Minister of Communications and Digital (\"KOMDIGI\") Privacy Legislation Law No. 27 of 2022 regarding Personal Data Protection (\"PDPL\") DPA Legislation Page" }, { "country": "Iran (Islamic Republic of)", "slug": "iran-islamic-republic-of", "region": "Other", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/iran-islamic-republic-of", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Iran." }, { "country": "Iraq", "slug": "iraq", "region": "Middle East", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/iraq", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Iraq." }, { "country": "Ireland", "slug": "ireland", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Data Protection Commission (\"DPC\")", "url": "https://www.dataprotection.ie/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.dataprotection.ie/en/who-we-are/data-protection-legislation" }, { "name": "Data Protection Act 2018", "url": "https://www.irishstatutebook.ie/eli/2018/act/7/enacted/en/html" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/ireland", "description": "Data Protection Authority Data Protection Commission (\"DPC\") Privacy Legislation DPA Legislation Page Data Protection Act 2018 Ireland is subject to the  EU General Data Protection Regulation ." }, { "country": "Isle of Man", "slug": "isle-of-man", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Barrantagh Fysseree", "url": "https://www.inforights.im/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.inforights.im/organisations/data-protection-law-2018/legislation-and-case-law/the-legislation/" }, { "name": "Data Protection Act 2018", "url": "https://www.gov.im/about-the-government/data-protection-gdpr-on-the-isle-of-man/legislation/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/isle-of-man", "description": "Data Protection Authority Barrantagh Fysseree Privacy Legislation DPA Legislation Page Data Protection Act 2018" }, { "country": "Israel", "slug": "israel", "region": "Middle East", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Privacy Protection Authority (\"PPA\")", "url": "https://www.gov.il/en/departments/the_privacy_protection_authority/govil-landing-page" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.gov.il/en/departments/legalInfo/legislation" }, { "name": "Protection of Privacy Law, 5741-1981 (\"Privacy Law\")", "url": "https://www.gov.il/BlobFolder/legalinfo/legislation/en/ProtectionofPrivacyLaw57411981unofficialtranslatio.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/israel", "description": "Data Protection Authority Privacy Protection Authority (\"PPA\") Privacy Legislation DPA Legislation Page Protection of Privacy Law, 5741-1981 (\"Privacy Law\")" }, { "country": "Italy", "slug": "italy", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Garante per la protezione dei dati personali (\"GDPD\")", "url": "https://www.garanteprivacy.it/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.garanteprivacy.it/codice" }, { "name": "Personal Data Protection Code", "url": "https://registrodelleopposizioni.it/wp-content/uploads/2022/07/ITALIAN_PERSONAL_DATA_PROTECTION_CODE.pdf" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/italy", "description": "Data Protection Authority Garante per la protezione dei dati personali (\"GDPD\") Privacy Legislation DPA Legislation Page Personal Data Protection Code Italy is subject to the  EU General Data Protection Regulation ." }, { "country": "Jamaica", "slug": "jamaica", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Office of the Information Commissioner (\"the Commissioner\")", "url": "https://www.mset.gov.jm/oic/" } ], "legislation": [ { "name": "Data Protection Act, 2020", "url": "https://japarliament.gov.jm/attachments/article/339/The%20Data%20Protection%20Act,%202020.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/jamaica", "description": "Data Protection Authority Office of the Information Commissioner (\"the Commissioner\") Privacy Legislation Data Protection Act, 2020" }, { "country": "Japan", "slug": "japan", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Personal Information Protection Commission (\"PPC\")", "url": "https://www.ppc.go.jp/en/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.ppc.go.jp/en/legal/" }, { "name": "Act on the Protection of Personal Information, No. 57 of 2003, as amended in 2020 (\"APPI\")", "url": "https://www.japaneselawtranslation.go.jp/en/laws/view/4241/en" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/japan", "description": "Data Protection Authority Personal Information Protection Commission (\"PPC\") Privacy Legislation DPA Legislation Page Act on the Protection of Personal Information, No. 57 of 2003, as amended in 2020 (\"APPI\")" }, { "country": "Jersey", "slug": "jersey", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Jersey Office of the Information Commissioner (\"JOIC\")", "url": "https://jerseyoic.org/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://jerseyoic.org/dp-foi-laws/" }, { "name": "Data Protection Law 2018 and Data Protection Authority Law 2018", "url": "https://www.gov.je/Government/dataprotection/pages/dataprotectionlaws.aspx" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/jersey", "description": "Data Protection Authority Jersey Office of the Information Commissioner (\"JOIC\") Privacy Legislation DPA Legislation Page Data Protection Law 2018 and Data Protection Authority Law 2018" }, { "country": "Jordan", "slug": "jordan", "region": "Middle East", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Personal Data Protection Directorate (\"PDPD\")", "url": "https://www.modee.gov.jo/EN/Pages/False" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.modee.gov.jo/Ar/List/%D8%AA%D8%B4%D8%B1%D9%8A%D8%B9%D8%A7%D8%AA_%D9%88%D8%A7%D9%84%D8%B3%D9%8A%D8%A7%D8%B3%D8%A7%D8%AA" }, { "name": "Law No. 24 of 2023 Personal Data Protection Law", "url": "https://www.modee.gov.jo/EBV4.0/Root_Storage/EN/1/PDP_Law_-_English_Version-_officail_translation.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/jordan", "description": "Data Protection Authority Personal Data Protection Directorate (\"PDPD\") Privacy Legislation DPA Legislation Page Law No. 24 of 2023 Personal Data Protection Law" }, { "country": "Kazakhstan", "slug": "kazakhstan", "region": "Central Asia", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Ministry of Artificial Intelligence and Digital Development", "url": "https://www.gov.kz/memleket/entities/mdai" } ], "legislation": [ { "name": "Law No. 94-V on Personal Data and its Protection of 21 May 2013", "url": "https://adilet.zan.kz/eng/docs/Z1300000094#:~:text=The%20Law%20of%20the%20Republic,94%2DV.&text=This%20Law%20regulates%20the%20public,and%20protection%20of%20personal%20data." } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/kazakhstan", "description": "Data Protection Authority Ministry of Artificial Intelligence and Digital Development Privacy Legislation Law No. 94-V on Personal Data and its Protection of 21 May 2013" }, { "country": "Kenya", "slug": "kenya", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Office of the Data Protection Commissioner (\"ODPC\")", "url": "https://www.odpc.go.ke/" } ], "legislation": [ { "name": "Data Protection Act of 2019 and the Data Protection Regulations of 2021", "url": "http://kenyalaw.org/kl/fileadmin/pdfdownloads/Acts/2019/TheDataProtectionAct__No24of2019.pdf" }, { "name": "DPA Legislation Page", "url": "https://www.odpc.go.ke/data-protection-laws-kenya/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/kenya", "description": "Data Protection Authority Office of the Data Protection Commissioner (\"ODPC\") Privacy Legislation Data Protection Act of 2019 and the Data Protection Regulations of 2021 DPA Legislation Page" }, { "country": "Kiribati", "slug": "kiribati", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "An Act to Provide and Regulate the Processing of Personal Data (Draft Bill)", "url": "https://www.mict.gov.ki/sites/default/files/publications/Data%20Protection%20Bill%202025.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/kiribati", "description": "Data Protection Authority The IAPP is unaware of a data protection authority for Kiribati. Privacy Legislation An Act to Provide and Regulate the Processing of Personal Data (Draft Bill)" }, { "country": "Kosovo", "slug": "kosovo", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Agjencia për Informim dhe Privatësi (\"AIP\")", "url": "https://aip.rks-gov.net/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://aip.rks-gov.net/mbrojtja-e-te-dhenave-personale/mbrojtja-e-te-dhenave-personale/" }, { "name": "Law No. 06/L-082 on Personal Data Protection", "url": "https://gzk.rks-gov.net/ActDetail.aspx?ActID=18616&langid=2" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/kosovo", "description": "Data Protection Authority Agjencia për Informim dhe Privatësi (\"AIP\") Privacy Legislation DPA Legislation Page Law No. 06/L-082 on Personal Data Protection" }, { "country": "Kuwait", "slug": "kuwait", "region": "Middle East", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Communication and Information Technology Regulatory Authority (\"CITRA\")", "url": "https://www.citra.gov.kw/sites/En/Pages/Home.aspx" } ], "legislation": [ { "name": "Data Privacy Protection Regulation", "url": "https://www.citra.gov.kw/sites/en/LegalReferences/Data_Privacy_Protection_Regulation.pdf" }, { "name": "DPA Regulations and Systems Page", "url": "https://www.citra.gov.kw/sites/ar/Pages/CITRALaws.aspx" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/kuwait", "description": "Data Protection Authority Communication and Information Technology Regulatory Authority (\"CITRA\") Privacy Legislation Data Privacy Protection Regulation DPA Regulations and Systems Page" }, { "country": "Kyrgyzstan", "slug": "kyrgyzstan", "region": "Central Asia", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Personal Data Protection Agency under the Cabinet of Ministers of the Kyrgyz Republic", "url": "https://dpa.gov.kg/ky" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://dpa.gov.kg/en/npa/category/npa_localacts" }, { "name": "Law No. 58 on Personal Information of 14 April 2008", "url": "https://dpa.gov.kg/en/npa/4" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/kyrgyzstan", "description": "Data Protection Authority Personal Data Protection Agency under the Cabinet of Ministers of the Kyrgyz Republic Privacy Legislation DPA Legislation Page Law No. 58 on Personal Information of 14 April 2008" }, { "country": "Lao People’s Democratic Republic", "slug": "lao-people’s-democratic-republic", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Ministry of Technology and Communication (\"MTC\")", "url": "https://mtc.gov.la/#" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://mtc.gov.la/index.php?r=site/contents&id=4" }, { "name": "Electronic Data Protection Act 2017", "url": "http://laoofficialgazette.gov.la/kcfinder/upload/files/0918570.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/lao-people’s-democratic-republic", "description": "Data Protection Authority Ministry of Technology and Communication (\"MTC\") Privacy Legislation DPA Legislation Page Electronic Data Protection Act 2017" }, { "country": "Latvia", "slug": "latvia", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Datu Valsts Inspekcija (\"DVI\")", "url": "https://www.dvi.gov.lv/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.dvi.gov.lv/lv/nacionalie-normativie-akti" }, { "name": "Personal Data Processing Law of 21 June 2018", "url": "https://likumi.lv/ta/id/300099-fizisko-personu-datu-apstrades-likums" }, { "name": "EU General Data Protection Regulation", "url": "https://gdpr-info.eu/" } ], "tags": [ "GDPR Member" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/latvia", "description": "Data Protection Authority Datu Valsts Inspekcija (\"DVI\") Privacy Legislation DPA Legislation Page Personal Data Processing Law of 21 June 2018 Latvia is subject to the  EU General Data Protection Regulation ." }, { "country": "Lebanon", "slug": "lebanon", "region": "Middle East", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Law No. 81 of 10 October 2018 on Electronic Transaction and Personal Data", "url": "https://www.bdl.gov.lb/CB%20Com/Laws%20And%20Regulations/Laws/Law_81_AR%C2%A72572_1.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/lebanon", "description": "Data Protection Authority None. Data protection law does not require creation of independent public authority. Privacy Legislation Law No. 81 of 10 October 2018 on Electronic Transaction and Personal Data" }, { "country": "Lesotho", "slug": "lesotho", "region": "Africa", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Data Protection Act of 2011", "url": "https://commons.laws.africa/akn/ls/act/2012/5/eng@2012-02-22.pdf" } ], "tags": [ "DPA Pending" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/lesotho", "description": "Data Protection Authority Data Protection Commission (Not yet established) Privacy Legislation Data Protection Act of 2011" }, { "country": "Liberia", "slug": "liberia", "region": "Africa", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/liberia", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Liberia." }, { "country": "Libya", "slug": "libya", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "National Information Security and Safety Authority (\"NISSA\")", "url": "https://nissa.gov.ly/en/" } ], "legislation": [ { "name": "Law No. 6 of 2022 concerning Electronic Transactions", "url": "https://lawsociety.ly/en/legislation/law-no-6-of-2022-concerning-electronic-transactions/#Chapter_Seven_Protection_of_Personal_Data" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/libya", "description": "Data Protection Authority National Information Security and Safety Authority (\"NISSA\") Privacy Legislation Law No. 6 of 2022 concerning Electronic Transactions" }, { "country": "Liechtenstein", "slug": "liechtenstein", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Datenschutzstelle Fürstentum Liechtenstein", "url": "https://www.datenschutzstelle.li/" } ], "legislation": [ { "name": "DPA National Laws Page", "url": "https://www.datenschutzstelle.li/rechtsgrundlagen/nationale-gesetze" }, { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Data Protection Act", "url": "https://www.datenschutzstelle.li/application/files/4515/8641/2923/DSG_English_final.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/liechtenstein", "description": "Data Protection Authority Datenschutzstelle Fürstentum Liechtenstein Privacy Legislation DPA National Laws Page GDPR and the Data Protection Act" }, { "country": "Lithuania", "slug": "lithuania", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Valstybinė duomenų apsaugos inspekcija", "url": "https://vdai.lrv.lt/en/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://vdai.lrv.lt/en/legislation" }, { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Law on Legal Protection of Personal Data", "url": "https://vdai.lrv.lt/uploads/vdai/documents/files/Republic%20of%20Lithuania%20Law%20on%20legal%20protection%20of%20personal%20data%202018%20Non-Official%20Translation%2001_12_2021.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/lithuania", "description": "Data Protection Authority Valstybinė duomenų apsaugos inspekcija Privacy Legislation DPA Legislation Page GDPR and Law on Legal Protection of Personal Data" }, { "country": "Luxembourg", "slug": "luxembourg", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Commission Nationale Pour La Protection Des Données (CNPD)", "url": "https://cnpd.public.lu/fr.html" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://cnpd.public.lu/en/legislation.html" }, { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Act of 1 August 2018 on the organisation of the National Data Protection Commission and the general data protection framework", "url": "https://cnpd.public.lu/dam-assets/fr/legislation/droit-lux/Act-of-1-August-2018-on-the-organisation-of-the-National-Data-Protection-Commission-and-the-general-data-protection-framework.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/luxembourg", "description": "Data Protection Authority Commission Nationale Pour La Protection Des Données (CNPD) Privacy Legislation DPA Legislation Page GDPR and Act of 1 August 2018 on the organisation of the National Data Protection Commission and the general data protection framework" }, { "country": "Macau", "slug": "macau", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Personal Data Protection Bureau", "url": "https://www.dspdp.gov.mo/" } ], "legislation": [ { "name": "Personal Data Protection Act", "url": "https://www.dspdp.gov.mo/file/Laws%20and%20Regulations/%E5%80%8B%E4%BA%BA%E8%B3%87%E6%96%99%E4%BF%9D%E8%AD%B7%E6%B3%95_EN.pdf" }, { "name": "DPA Legislation Page", "url": "https://www.dspdp.gov.mo/en/relevant_laws.html" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/macau", "description": "Data Protection Authority Personal Data Protection Bureau Privacy Legislation Personal Data Protection Act DPA Legislation Page" }, { "country": "Madagascar", "slug": "madagascar", "region": "Africa", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Law No. 2014-038 on the Protection of Personal Data", "url": "http://www.afapdp.org/wp-content/uploads/2015/01/Madagascar-L-2014-038-du-09-01-15-sur-la-protection-des-donn%C3%A9es-%C3%A0-caract%C3%A8re-personnel.pdf" } ], "tags": [ "Link Unavailable" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/madagascar", "description": "Data Protection Authority Commission Malagasy de l’Informatique et des Libertés (CMIL) - Link unavailable. Privacy Legislation Law No. 2014-038 on the Protection of Personal Data" }, { "country": "Malawi", "slug": "malawi", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Malawi Communications Regulatory Authority (MACRA)", "url": "https://macra.mw/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://macra.mw/rules-regulations/" }, { "name": "Data Protection Act, 2024", "url": "https://iapp.org/media/uploads/2015/02/admin-ajax.php_.jpg?juwpfisadmin=false&action=wpfd&task=file.download&wpfd_category_id=25&wpfd_file_id=252806&token=d6944d6f939a5048fed89dd5f3b39d06&preview=1" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/malawi", "description": "Data Protection Authority Malawi Communications Regulatory Authority (MACRA) Privacy Legislation DPA Legislation Page Data Protection Act, 2024" }, { "country": "Malaysia", "slug": "malaysia", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Jabatan Perlindungan Data Peribadi", "url": "https://www.pdp.gov.my/jpdpv2/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.pdp.gov.my/ppdpv1/en/akta/pdp-act-2010-en/" }, { "name": "Personal Data Protection Act Amendment of 2024", "url": "https://www.pdp.gov.my/ppdpv1/akta/akta-pdppindaan-2024/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/malaysia", "description": "Data Protection Authority Jabatan Perlindungan Data Peribadi Privacy Legislation DPA Legislation Page Personal Data Protection Act Amendment of 2024" }, { "country": "Maldives", "slug": "maldives", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/maldives", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Maldives." }, { "country": "Mali", "slug": "mali", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Autorité de Protection des Données à caractère Personnel du Mali (APDP)", "url": "https://apdp.ml/" } ], "legislation": [ { "name": "DPA Texts and Decisions", "url": "https://apdp.ml/textes-et-decisions" }, { "name": "Law No. 2013-015", "url": "https://assets.contentstack.io/v3/assets/blt5775cc69c999c255/blt0dc22efa6f2c64d8/Mali-Loi-sur-la-protection-des-donnees-personnelles-du-21-mai-2013.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/mali", "description": "Data Protection Authority Autorité de Protection des Données à caractère Personnel du Mali (APDP) Privacy Legislation DPA Texts and Decisions Law No. 2013-015" }, { "country": "Malta", "slug": "malta", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Office of the Information and Data Protection Commissioner", "url": "https://idpc.org.mt/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://idpc.org.mt/for-organisations/legislation/" }, { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Data Protection Act", "url": "https://idpc.org.mt/wp-content/uploads/2020/07/CAP-586.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/malta", "description": "Data Protection Authority Office of the Information and Data Protection Commissioner Privacy Legislation DPA Legislation Page GDPR and the Data Protection Act" }, { "country": "Marshall Islands", "slug": "marshall-islands", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/marshall-islands", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Marshall Islands." }, { "country": "Martinique", "slug": "martinique", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Comission nationale de l'informatique et des libertes (\"CNIL\")", "url": "https://www.cnil.fr/en/home" } ], "legislation": [ { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties", "url": "https://www.cnil.fr/fr/la-loi-informatique-et-libertes" }, { "name": "DPA National Framework Page", "url": "https://www.cnil.fr/fr/cadre-national" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/martinique", "description": "Data Protection Authority Comission nationale de l'informatique et des libertes (\"CNIL\") Privacy Legislation GDPR and Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties DPA National Framework Page" }, { "country": "Mauritania", "slug": "mauritania", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Personal Data Protection Authority", "url": "https://www.apd.mr/fr/" } ], "legislation": [ { "name": "Law No. 2017-020", "url": "https://mtnima.gov.mr/sites/default/files/imp1fr-2.pdf\thttps://www.apd.mr/fr/lois/\tDPA Legislation Page" }, { "name": "DPA Legislation Page", "url": "https://www.apd.mr/fr/lois/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/mauritania", "description": "Data Protection Authority Personal Data Protection Authority Privacy Legislation Law No. 2017-020 DPA Legislation Page" }, { "country": "Mauritius", "slug": "mauritius", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Data Protection Office", "url": "https://dataprotection.govmu.org/" } ], "legislation": [ { "name": "The Data Protection Act 2017", "url": "https://dataprotection.govmu.org/Documents/DPA_2017_updated.pdf?csf=1&e=0rlrffhttps://dataprotection.govmu.org/Pages/The%20Law/Data-Protection-Act-2017.aspx" }, { "name": "DPA Regulations Page", "url": "https://dataprotection.govmu.org/Pages/The%20Law/Data-Protection-Regulations.aspx" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/mauritius", "description": "Data Protection Authority Data Protection Office Privacy Legislation The Data Protection Act 2017 DPA Regulations Page" }, { "country": "Mayotte", "slug": "mayotte", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Comission nationale de l'informatique et des libertes (\"CNIL\")", "url": "https://www.cnil.fr/en/home" } ], "legislation": [ { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties", "url": "https://www.cnil.fr/fr/la-loi-informatique-et-libertes" }, { "name": "DPA National Framework Page", "url": "https://www.cnil.fr/fr/cadre-national" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/mayotte", "description": "Data Protection Authority Comission nationale de l'informatique et des libertes (\"CNIL\") Privacy Legislation GDPR and Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties DPA National Framework Page" }, { "country": "Mexico", "slug": "mexico", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "El Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI)", "url": "https://home.inai.org.mx/" } ], "legislation": [ { "name": "DPA Regulations Page", "url": "https://home.inai.org.mx/?page_id=1870&mat=p" }, { "name": "Federal Law on Protection of Personal Data Held by Private Parties", "url": "https://www.diputados.gob.mx/LeyesBiblio/pdf/LFPDPPP.pdf" }, { "name": "General Law on Protection of Personal Data in Possession of Obligated Subjects", "url": "https://www.diputados.gob.mx/LeyesBiblio/pdf/LGPDPPSO.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/mexico", "description": "Data Protection Authority El Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) Privacy Legislation DPA Regulations Page Federal Law on Protection of Personal Data Held by Private Parties General Law on Protection of Personal Data in Possession of Obligated Subjects" }, { "country": "Micronesia (Federated States of)", "slug": "micronesia-federated-states-of", "region": "Other", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/micronesia-federated-states-of", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Micronesia." }, { "country": "Monaco", "slug": "monaco", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Personal Data Protection Authority (APDP)", "url": "https://apdp.mc/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.ccin.mc/en/legislation/laws/" }, { "name": "Law No. 1.565 of December 3, 2024 on the Protection of Personal Data", "url": "https://legimonaco.mc/tnc/loi/2024/12-03-1.565/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/monaco", "description": "Data Protection Authority Personal Data Protection Authority (APDP) Privacy Legislation DPA Legislation Page Law No. 1.565 of December 3, 2024 on the Protection of Personal Data" }, { "country": "Mongolia", "slug": "mongolia", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Ministry of Digital Development and Communications", "url": "https://mddc.gov.mn/eng/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://mddc.gov.mn/eng/%d1%85%d1%83%d1%83%d0%bb%d1%8c-%d1%8d%d1%80%d1%85-%d0%b7%d2%af%d0%b9/" }, { "name": "Law of Mongolia on Protection of Personal Data", "url": "https://legalinfo.mn/mn/detail?lawId=16390288615991" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/mongolia", "description": "Data Protection Authority Ministry of Digital Development and Communications Privacy Legislation DPA Legislation Page Law of Mongolia on Protection of Personal Data" }, { "country": "Montenegro", "slug": "montenegro", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Agencija za zaštitu ličnih podataka", "url": "http://www.azlp.me/en/home" } ], "legislation": [ { "name": "DPA Regulations Page", "url": "https://www.azlp.me/en/regulations" }, { "name": "Personal Data Protection Law 79/08 and 70/09", "url": "https://www.azlp.me/docs/zajednicka/zakoni/personaldataprotectionlaweng.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/montenegro", "description": "Data Protection Authority Agencija za zaštitu ličnih podataka Privacy Legislation DPA Regulations Page Personal Data Protection Law 79/08 and 70/09" }, { "country": "Montserrat", "slug": "montserrat", "region": "Americas", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/montserrat", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Montserrat." }, { "country": "Morocco", "slug": "morocco", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "General Directorate of Information Systems Security", "url": "https://www.dgssi.gov.ma/en" } ], "legislation": [ { "name": "Law No. 09-08", "url": "https://www.cndp.ma/loi-09-08/https://www.dgssi.gov.ma/sites/default/files/legislative/brochure/2024-07/law%2009-08%20in%20french.pdf" }, { "name": "DPA Legislation Page", "url": "https://www.dgssi.gov.ma/en/textes-legislatifs-et-reglementaires" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/morocco", "description": "Data Protection Authority General Directorate of Information Systems Security Privacy Legislation Law No. 09-08 DPA Legislation Page" }, { "country": "Mozambique", "slug": "mozambique", "region": "Africa", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/mozambique", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Mozambique." }, { "country": "Myanmar", "slug": "myanmar", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/myanmar", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Myanmar." }, { "country": "Namibia", "slug": "namibia", "region": "Africa", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Data Protection Bill, 2021 (Draft)", "url": "https://action-namibia.org/wp-content/uploads/2022/10/Data-Protection-Draft-Bill-March-2022....pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/namibia", "description": "Data Protection Authority The IAPP is unaware of a data protection authority for Namibia. Privacy Legislation Data Protection Bill, 2021 (Draft)" }, { "country": "Nauru", "slug": "nauru", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/nauru", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Nauru." }, { "country": "Nepal", "slug": "nepal", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "The Privacy Act, 2075 (2018)", "url": "https://www.lawcommission.gov.np/en/wp-content/uploads/2019/07/The-Privacy-Act-2075-2018.pdfhttps://lawcommission.gov.np/content/12261/12261-the-privacy-act-2075/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/nepal", "description": "Data Protection Authority The IAPP is unaware of a data protection authority for Nepal. Privacy Legislation The Privacy Act, 2075 (2018)" }, { "country": "Netherlands (Kingdom of the)", "slug": "netherlands-kingdom-of-the", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Autoriteit Persoonsgegevens", "url": "https://autoriteitpersoonsgegevens.nl/en" } ], "legislation": [ { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Dutch GDPR Implementation Act", "url": "https://wetten.overheid.nl/BWBR0040940/2021-07-01" }, { "name": "DPA Legislation Page", "url": "https://www.autoriteitpersoonsgegevens.nl/en/themes/basic-gdpr/privacy-and-personal-data/privacy-legislation" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/netherlands-kingdom-of-the", "description": "Data Protection Authority Autoriteit Persoonsgegevens Privacy Legislation GDPR and Dutch GDPR Implementation Act DPA Legislation Page" }, { "country": "New Caledonia", "slug": "new-caledonia", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Comission nationale de l'informatique et des libertes (\"CNIL\")", "url": "https://www.cnil.fr/en/home" } ], "legislation": [ { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties", "url": "https://www.cnil.fr/fr/la-loi-informatique-et-libertes" }, { "name": "DPA National Framework Page", "url": "https://www.cnil.fr/fr/cadre-national" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/new-caledonia", "description": "Data Protection Authority Comission nationale de l'informatique et des libertes (\"CNIL\") Privacy Legislation GDPR and Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties DPA National Framework Page" }, { "country": "New Zealand", "slug": "new-zealand", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Office of the Privacy Commissioner of New Zealand (OPC)", "url": "https://www.privacy.org.nz/" } ], "legislation": [ { "name": "Privacy Act 2020", "url": "https://www.privacy.org.nz/privacy-act-2020/privacy-principles/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/new-zealand", "description": "Data Protection Authority Office of the Privacy Commissioner of New Zealand (OPC) Privacy Legislation Privacy Act 2020" }, { "country": "Nicaragua", "slug": "nicaragua", "region": "Americas", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Law on Personal Data Protection No. 787", "url": "http://legislacion.asamblea.gob.ni/normaweb.nsf/9e314815a08d4a6206257265005d21f9/e5d37e9b4827fc06062579ed0076ce1d" } ], "tags": [ "DPA Pending" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/nicaragua", "description": "Data Protection Authority Dirección de Protección de Datos Personales (not yet established) Privacy Legislation Law on Personal Data Protection No. 787" }, { "country": "Niger", "slug": "niger", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "La Haute Autorité de Protection des Données à caractère Personnel (HAPDP)", "url": "https://www.hapdp.ne/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.hapdp.ne/legislation-nationale" }, { "name": "Law No. 2022-59 of 16 December 2022 relating to the protection of personal data", "url": "https://www.hapdp.ne/uploads/files/Loi-N%C2%B02022-59HAPDP.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/niger", "description": "Data Protection Authority La Haute Autorité de Protection des Données à caractère Personnel (HAPDP) Privacy Legislation DPA Legislation Page Law No. 2022-59 of 16 December 2022 relating to the protection of personal data" }, { "country": "Nigeria", "slug": "nigeria", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Nigeria Data Protection Commission", "url": "https://ndpc.gov.ng/" } ], "legislation": [ { "name": "DPA Legislation and Resources Page", "url": "https://ndpc.gov.ng/Home/resources" }, { "name": "Nigeria Data Protection Act", "url": "https://ndpc.gov.ng/Files/Nigeria_Data_Protection_Act_2023.pdfhttps://ndpc.gov.ng/resources/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/nigeria", "description": "Data Protection Authority Nigeria Data Protection Commission Privacy Legislation DPA Legislation and Resources Page Nigeria Data Protection Act" }, { "country": "Niue", "slug": "niue", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/niue", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Niue." }, { "country": "North Macedonia", "slug": "north-macedonia", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Personal Data Protection Agency", "url": "https://azlp.mk/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://azlp.mk/azlp/propisi-i-dokumenti/domasni_propisi/" }, { "name": "Law on Personal Data Protection 2020", "url": "https://azlp.mk/wp-content/uploads/2022/12/lpdp_2020.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/north-macedonia", "description": "Data Protection Authority Personal Data Protection Agency Privacy Legislation DPA Legislation Page Law on Personal Data Protection 2020" }, { "country": "Northern Mariana Islands", "slug": "northern-mariana-islands", "region": "Other", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/northern-mariana-islands", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Northern Mariana Islands." }, { "country": "Norway", "slug": "norway", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Datatilsynet", "url": "https://www.datatilsynet.no/en/" } ], "legislation": [ { "name": "DPA Regulations Page", "url": "https://www.datatilsynet.no/en/regulations-and-tools/regulations/https://www.datatilsynet.no/en/regulations-and-tools/regulations/" }, { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Personal Data Act (LOV-2018-06-15-38)", "url": "https://lovdata.no/dokument/NLE/lov/2018-06-15-38/KAPITTEL_6#KAPITTEL_6" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/norway", "description": "Data Protection Authority Datatilsynet Privacy Legislation DPA Regulations Page GDPR and Personal Data Act (LOV-2018-06-15-38)" }, { "country": "Oman", "slug": "oman", "region": "Middle East", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Ministry of Transport, Communications and Information Technology", "url": "https://www.mtcit.gov.om/ITAPortal/ITA/default.aspx" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.mtcit.gov.om/ITAPortal/Pages/Page.aspx?NID=1980&PID=7491&LID=299" }, { "name": "Royal Decree No. 6 of 2022 Promulgating the Personal Data Protection Law", "url": "https://mjla.gov.om/eng/legislation/decrees/details.aspx?Id=1397&type=Lhttps://mjla.gov.om/decrees/ar/1/show/1030" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/oman", "description": "Data Protection Authority Ministry of Transport, Communications and Information Technology Privacy Legislation DPA Legislation Page Royal Decree No. 6 of 2022 Promulgating the Personal Data Protection Law" }, { "country": "Pakistan", "slug": "pakistan", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/pakistan", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Pakistan." }, { "country": "Palau", "slug": "palau", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/palau", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Palau." }, { "country": "Palestinian Territories", "slug": "palestinian-territories", "region": "Other", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/palestinian-territories", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Palestinian Territories." }, { "country": "Panama", "slug": "panama", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Autoridad Nacional de Transparencia y Acceso a la Información (ANTAI)", "url": "http://www.antai.gob.pa/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.antai.gob.pa/legislacion/" }, { "name": "Law No. 81 on Personal Data Protection 2019", "url": "https://www.gacetaoficial.gob.pa/pdfTemp/28743_A/GacetaNo_28743a_20190329.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/panama", "description": "Data Protection Authority Autoridad Nacional de Transparencia y Acceso a la Información (ANTAI) Privacy Legislation DPA Legislation Page Law No. 81 on Personal Data Protection 2019" }, { "country": "Papua New Guinea", "slug": "papua-new-guinea", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/papua-new-guinea", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Papua New Guinea." }, { "country": "Paraguay", "slug": "paraguay", "region": "Americas", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Personal Data Protection Bill (Draft)", "url": "https://www.tedic.org/wp-content/uploads/2024/07/Ley-PdP-Ultima-version-Coalicion-julio-2024.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/paraguay", "description": "Data Protection Authority The IAPP is unaware of a data protection authority for Paraguay. Privacy Legislation Personal Data Protection Bill (Draft)" }, { "country": "Peru", "slug": "peru", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Autoridad Nacional de Protección de Datos Personales (ANDP)", "url": "https://www.gob.pe/anpd" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.gob.pe/institucion/anpd/normas-legales" }, { "name": "Reglamento de la Ley N° 29733, Ley de Protección de Datos Personales; Decreto Supremo N° 016-2024-JUS (link unavailable.)", "url": "https://cdn.www.gob.pe/uploads/document/file/2011398/Ley%20N%C2%BA%2029733%20-%20Ley%20de%20protecci%C3%B3n%20de%20datos%20personales.pdf.pdf?v=1683928275 and https://epdoc2.elperuano.pe/EpPo/VistaNLSE.asp?Referencias=MjM0OTY1My0xMjAyNDExMzA=" } ], "tags": [ "Link Unavailable" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/peru", "description": "Data Protection Authority Autoridad Nacional de Protección de Datos Personales (ANDP) Privacy Legislation DPA Legislation Page Reglamento de la Ley N° 29733, Ley de Protección de Datos Personales; Decreto Supremo N° 016-2024-JUS (link unavailable.)" }, { "country": "Philippines", "slug": "philippines", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "National Privacy Commission", "url": "https://privacy.gov.ph/" } ], "legislation": [ { "name": "Data Privacy Act", "url": "https://privacy.gov.ph/the-data-privacy-act-and-its-irr/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/philippines", "description": "Data Protection Authority National Privacy Commission Privacy Legislation Data Privacy Act" }, { "country": "Poland", "slug": "poland", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Urzad Ochrony Danych Osobowych", "url": "https://uodo.gov.pl/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://uodo.gov.pl/en/480" }, { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "The Act of 10 May 2018 on the Protection of Personal Data", "url": "https://uodo.gov.pl/en/660/1464" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/poland", "description": "Data Protection Authority Urzad Ochrony Danych Osobowych Privacy Legislation DPA Legislation Page GDPR and The Act of 10 May 2018 on the Protection of Personal Data" }, { "country": "Portugal", "slug": "portugal", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Comissão Nacional de Proteção de Dados", "url": "https://www.cnpd.pt/" } ], "legislation": [ { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Law No. 58/2019 on Personal Data Protection", "url": "https://www.pgdlisboa.pt/leis/lei_mostra_estrutura.php?tabela=leis&artigo_id=3118A0002&nid=3118&nversao=&tabela=leis&so_miolo=" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/portugal", "description": "Data Protection Authority Comissão Nacional de Proteção de Dados Privacy Legislation GDPR and Law No. 58/2019 on Personal Data Protection" }, { "country": "Puerto Rico", "slug": "puerto-rico", "region": "Other", "hasDpa": true, "hasLegislation": false, "dpas": [ { "name": "Departamento de Asuntos del Consumidor (DACO)", "url": "https://www.daco.pr.gov/" } ], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/puerto-rico", "description": "Data Protection Authority Departamento de Asuntos del Consumidor (DACO) Privacy Legislation The IAPP is unaware of comprehensive data protection legislation for Puerto Rico." }, { "country": "Qatar", "slug": "qatar", "region": "Middle East", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "National Cyber Governance and Assurance Affairs", "url": "https://assurance.ncsa.gov.qa/en" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://assurance.ncsa.gov.qa/en/library/privacy?csrt=17356728339519142158" }, { "name": "Law No. (13) of 2016 Concerning Personal Data Protection", "url": "https://compliance.qcert.org/sites/default/files/library/2020-11/Law%20No.%20%2813%29%20of%202016%20%20on%20Protecting%20Personal%20Data%20Privacy%20-%20English.pdfhttps://assurance.ncsa.gov.qa/sites/default/files/library/2020-11/Law%20No.%20%2813%29%20of%202016%20%20on%20Protecting%20Personal%20Data%20Privacy%20-%20English.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/qatar", "description": "Data Protection Authority National Cyber Governance and Assurance Affairs Privacy Legislation DPA Legislation Page Law No. (13) of 2016 Concerning Personal Data Protection" }, { "country": "Republic of Korea", "slug": "republic-of-korea", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Personal Information Protection Commission (PIPC)", "url": "https://www.pipc.go.kr/eng/index.do" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.pipc.go.kr/eng/user/lgp/law/lawsRegulations.do" }, { "name": "Personal Information Protection Act (2011) (\"PIPA\")", "url": "https://elaw.klri.re.kr/kor_service/lawView.do?lang=ENG&hseq=62389" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/republic-of-korea", "description": "Data Protection Authority Personal Information Protection Commission (PIPC) Privacy Legislation DPA Legislation Page Personal Information Protection Act (2011) (\"PIPA\")" }, { "country": "Republic of Moldova", "slug": "republic-of-moldova", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Centrul Naţional pentru Protecţia Datelor cu Caracter Personal al Republica Moldova (CNPDCP)", "url": "https://datepersonale.md/en/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://datepersonale.md/en/legislation/national-legislation/law/" }, { "name": "Law No. 195 of 25-07-2024 regarding the protection of personal data", "url": "https://www.legis.md/cautare/getResults?doc_id=144681&lang=ro" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/republic-of-moldova", "description": "Data Protection Authority Centrul Naţional pentru Protecţia Datelor cu Caracter Personal al Republica Moldova (CNPDCP) Privacy Legislation DPA Legislation Page Law No. 195 of 25-07-2024 regarding the protection of personal data" }, { "country": "Republic of the Congo", "slug": "republic-of-the-congo", "region": "Africa", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Law 29-2019 on the Protection of Personal Data", "url": "https://www.sgg.cg/JO/2019/congo-jo-2019-45.pdf" } ], "tags": [ "DPA Pending" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/republic-of-the-congo", "description": "Data Protection Authority The data protection authority for Republic of the Congo is not yet established. Privacy Legislation Law 29-2019 on the Protection of Personal Data" }, { "country": "Réunion", "slug": "réunion", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Comission nationale de l'informatique et des libertes (\"CNIL\")", "url": "https://www.cnil.fr/en/home" } ], "legislation": [ { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties", "url": "https://www.cnil.fr/fr/la-loi-informatique-et-libertes" }, { "name": "DPA National Framework Page", "url": "https://www.cnil.fr/fr/cadre-national" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/réunion", "description": "Data Protection Authority Comission nationale de l'informatique et des libertes (\"CNIL\") Privacy Legislation GDPR and Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties DPA National Framework Page" }, { "country": "Romania", "slug": "romania", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal", "url": "http://www.dataprotection.ro/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.dataprotection.ro/?page=legislatie_primara&lang=ro" }, { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Law No. 190 of 18 July 2018", "url": "https://www.dataprotection.ro/servlet/ViewDocument?id=1520" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/romania", "description": "Data Protection Authority Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal Privacy Legislation DPA Legislation Page GDPR and Law No. 190 of 18 July 2018" }, { "country": "Russian Federation", "slug": "russian-federation", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Roskomnadzor", "url": "https://rkn.gov.ru/" } ], "legislation": [ { "name": "Federal Law of 27 July 2006 No. 152-FZ on Personal Data", "url": "https://base.garant.ru/512148567/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/russian-federation", "description": "Data Protection Authority Roskomnadzor Privacy Legislation Federal Law of 27 July 2006 No. 152-FZ on Personal Data" }, { "country": "Rwanda", "slug": "rwanda", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Data Protection Office", "url": "https://dpo.gov.rw/" } ], "legislation": [ { "name": "Law No 058/2021 - Protection of Personal Data and Privacy Law", "url": "https://dpo.gov.rw/dpp-law/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/rwanda", "description": "Data Protection Authority Data Protection Office Privacy Legislation Law No 058/2021 - Protection of Personal Data and Privacy Law" }, { "country": "Saint Barthélemy", "slug": "saint-barthélemy", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Comission nationale de l'informatique et des libertes (\"CNIL\")", "url": "https://www.cnil.fr/en/home" } ], "legislation": [ { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties", "url": "https://www.cnil.fr/fr/la-loi-informatique-et-libertes" }, { "name": "DPA National Framework Page", "url": "https://www.cnil.fr/fr/cadre-national" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/saint-barthélemy", "description": "Data Protection Authority Comission nationale de l'informatique et des libertes (\"CNIL\") Privacy Legislation GDPR and Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties DPA National Framework Page" }, { "country": "Saint Kitts and Nevis", "slug": "saint-kitts-and-nevis", "region": "Americas", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Data Protection Act 2018 (not yet in force.)", "url": "https://www.theinformationcollective.com/dpl/st-kitts-data-protection-act" } ], "tags": [ "DPA Pending" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/saint-kitts-and-nevis", "description": "Data Protection Authority Information Commissioner (not yet established.) Privacy Legislation Data Protection Act 2018 (not yet in force.)" }, { "country": "Saint Lucia", "slug": "saint-lucia", "region": "Americas", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Privacy and Data Protection Act", "url": "https://www.govt.lc/privacy-data-prot" } ], "tags": [ "Link Unavailable" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/saint-lucia", "description": "Data Protection Authority Data Protection Commissioner (link unavailable.) Privacy Legislation Privacy and Data Protection Act" }, { "country": "Saint Martin", "slug": "saint-martin", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Comission nationale de l'informatique et des libertes (\"CNIL\")", "url": "https://www.cnil.fr/en/home" } ], "legislation": [ { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties", "url": "https://www.cnil.fr/fr/la-loi-informatique-et-libertes" }, { "name": "DPA Official Texts Page", "url": "https://www.cnil.fr/en/official-texts" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/saint-martin", "description": "Data Protection Authority Comission nationale de l'informatique et des libertes (\"CNIL\") Privacy Legislation GDPR and Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties DPA Official Texts Page" }, { "country": "Saint Pierre and Miquelon", "slug": "saint-pierre-and-miquelon", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Comission nationale de l'informatique et des libertes (\"CNIL\")", "url": "https://www.cnil.fr/en/home" } ], "legislation": [ { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties", "url": "https://www.cnil.fr/fr/la-loi-informatique-et-libertes" }, { "name": "DPA Official Texts Page", "url": "https://www.cnil.fr/en/official-texts" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/saint-pierre-and-miquelon", "description": "Data Protection Authority Comission nationale de l'informatique et des libertes (\"CNIL\") Privacy Legislation GDPR and Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties DPA Official Texts Page" }, { "country": "Saint Vincent and the Grenadines", "slug": "saint-vincent-and-the-grenadines", "region": "Americas", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/saint-vincent-and-the-grenadines", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Saint Vincent and the Grenadines." }, { "country": "Samoa", "slug": "samoa", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/samoa", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Samoa." }, { "country": "San Marino", "slug": "san-marino", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Autorità Garante per la Protezione dei Dati Personali", "url": "https://garanteprivacy.sm/pub1/garante/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://garanteprivacy.sm/pub1/garante/normativa-e-regolamenti.html" }, { "name": "Law No. 171 of 21 December 2018, Protection of Natural Persons with Regard to the Processing of Personal Data", "url": "https://garanteprivacy.sm/pub1/dam/jcr:5bfff8ec-b3d3-4c2b-8624-3f0ccfa26e6e/L171-2018%20%5B%20testo%20consolidato%202023%5D.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/san-marino", "description": "Data Protection Authority Autorità Garante per la Protezione dei Dati Personali Privacy Legislation DPA Legislation Page Law No. 171 of 21 December 2018, Protection of Natural Persons with Regard to the Processing of Personal Data" }, { "country": "São Tomé and Príncipe", "slug": "são-tomé-and-príncipe", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Agência Nacional de Protecção de Dados Pessoais (ANPDP)", "url": "https://www.anpdp.st/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.anpdp.st/https://anpdp.st/#/pt-PT/0/EXT/form/EXTMC6/SHOW" }, { "name": "Law No. 03/2016", "url": "https://www.anpdp.st/docs_comprimidos/legislacao_nacional/dr39_lei3_2016_proteccao_de_dados_pessoais.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/são-tomé-and-príncipe", "description": "Data Protection Authority Agência Nacional de Protecção de Dados Pessoais (ANPDP) Privacy Legislation DPA Legislation Page Law No. 03/2016" }, { "country": "Saudi Arabia", "slug": "saudi-arabia", "region": "Middle East", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Saudi Data & Artificial Intelligence Authority", "url": "https://sdaia.gov.sa/ar/default.aspx" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://sdaia.gov.sa/en/SDAIA/about/Pages/RegulationsAndPolicies.aspx" }, { "name": "Personal Data Protection Law", "url": "https://sdaia.gov.sa/en/SDAIA/about/Documents/Personal%20Data%20English%20V2-23April2023-%20Reviewed-.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/saudi-arabia", "description": "Data Protection Authority Saudi Data & Artificial Intelligence Authority Privacy Legislation DPA Legislation Page Personal Data Protection Law" }, { "country": "Senegal", "slug": "senegal", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Commission de Protection de Donnees Personelles (CDP)", "url": "https://www.cdp.sn/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.cdp.sn/legislation/textes-legislatifs" }, { "name": "Law No 2008-12", "url": "https://sppsyrftszniuaicadvk.supabase.co/storage/v1/object/sign/cdp_files/textes_juridiques/protection.pdf?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJjZHBfZmlsZXMvdGV4dGVzX2p1cmlkaXF1ZXMvcHJvdGVjdGlvbi5wZGYiLCJpYXQiOjE3MzcwNjc1MjUsImV4cCI6MTgzMTY3NTUyNX0.Yoqiz4dNto-P5OG54HZOwAedIOfksj2l3hreUNDjklM&t=2025-01-16T22%3A45%3A25.777Z" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/senegal", "description": "Data Protection Authority Commission de Protection de Donnees Personelles (CDP) Privacy Legislation DPA Legislation Page Law No 2008-12" }, { "country": "Serbia", "slug": "serbia", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Commissioner for Information of Public Importance and Personal Data Protection (Poverenik)", "url": "https://www.poverenik.rs/en/home.html" } ], "legislation": [ { "name": "Law on Protection of Personal Data", "url": "https://www.poverenik.rs/images/stories/dokumentacija-nova/zakon-o-zastiti-podataka-o-licnosti_en.pdf" }, { "name": "DPA Legislation Page", "url": "https://www.poverenik.rs/en/%D0%B7%D0%B0%D0%BA%D0%BE%D0%BD%D0%B84.html" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/serbia", "description": "Data Protection Authority Commissioner for Information of Public Importance and Personal Data Protection (Poverenik) Privacy Legislation Law on Protection of Personal Data DPA Legislation Page" }, { "country": "Seychelles", "slug": "seychelles", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Information Commission of Seychelles", "url": "https://www.infocom.sc/" } ], "legislation": [ { "name": "Data Protection Act, 2023", "url": "https://www.gazette.sc/sites/default/files/2023-12/Act%2024%20-%202023%20-%20Data%20Protection%20Act%202023.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/seychelles", "description": "Data Protection Authority Information Commission of Seychelles Privacy Legislation Data Protection Act, 2023" }, { "country": "Sierra Leone", "slug": "sierra-leone", "region": "Africa", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/sierra-leone", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Sierra Leone." }, { "country": "Singapore", "slug": "singapore", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Personal Data Protection Commission", "url": "https://www.pdpc.gov.sg/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.pdpc.gov.sg/overview-of-pdpa/the-legislation" }, { "name": "Personal Data Protection Act 2012 (No. 26 of 2012)", "url": "https://sso.agc.gov.sg/Act/PDPA2012" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/singapore", "description": "Data Protection Authority Personal Data Protection Commission Privacy Legislation DPA Legislation Page Personal Data Protection Act 2012 (No. 26 of 2012)" }, { "country": "Sint Maarten", "slug": "sint-maarten", "region": "Americas", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "National Ordinance for the Protection of Personal Data", "url": "https://www.dataguidance.com/sites/default/files/05.11.20_sint_maarten_data_protection_act.pdf" } ], "tags": [ "Link Unavailable" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/sint-maarten", "description": "Data Protection Authority Personal Data Protection Supervisory Committee (link unavailable.) Privacy Legislation National Ordinance for the Protection of Personal Data" }, { "country": "Slovakia", "slug": "slovakia", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Úrad na ochranu osobných údajov Slovenskej republiky", "url": "https://dataprotection.gov.sk/sk/urad/o-nas/?csrt=1461281679238818619" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://dataprotection.gov.sk/sk/legislativa-metodiky/legislativa-judikatura/?csrt=1461281679238818619" }, { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts", "url": "https://www.slov-lex.sk/ezbierky/pravne-predpisy/SK/ZZ/2018/18/20220330" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/slovakia", "description": "Data Protection Authority Úrad na ochranu osobných údajov Slovenskej republiky Privacy Legislation DPA Legislation Page GDPR and Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts" }, { "country": "Slovenia", "slug": "slovenia", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Informacijski pooblaščenec", "url": "https://www.ip-rs.si/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.ip-rs.si/zakonodaja/" }, { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Data Protection Act (ZVOP-2)", "url": "https://www.ip-rs.si/zakonodaja/zakon-o-varstvu-osebnih-podatkov/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/slovenia", "description": "Data Protection Authority Informacijski pooblaščenec Privacy Legislation DPA Legislation Page GDPR and Data Protection Act (ZVOP-2)" }, { "country": "Solomon Islands", "slug": "solomon-islands", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/solomon-islands", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Solomon Islands." }, { "country": "Somalia", "slug": "somalia", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Somali Data Protection Authority (DPA)", "url": "https://dpa.gov.so/" } ], "legislation": [ { "name": "Law No. 005 of 2023 Data Protection Act", "url": "https://moct.gov.so/en/wp-content/uploads/2023/07/Somalia-Data-Protection-Act-2.pdf" }, { "name": "DPA Legislation Page", "url": "https://dpa.gov.so/laws-policies" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/somalia", "description": "Data Protection Authority Somali Data Protection Authority (DPA) Privacy Legislation Law No. 005 of 2023 Data Protection Act DPA Legislation Page" }, { "country": "South Africa", "slug": "south-africa", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Information Regulator", "url": "https://inforegulator.org.za/" } ], "legislation": [ { "name": "The Protection of Personal Information Act, (Act 4 of 2013)", "url": "https://www.gov.za/documents/protection-personal-information-act" }, { "name": "DPA Legislation", "url": "https://inforegulator.org.za/acts/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/south-africa", "description": "Data Protection Authority Information Regulator Privacy Legislation The Protection of Personal Information Act, (Act 4 of 2013) DPA Legislation" }, { "country": "South Georgia and the South Sandwich Islands", "slug": "south-georgia-and-the-south-sandwich-islands", "region": "Other", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/south-georgia-and-the-south-sandwich-islands", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for South Georgia and the South Sandwich Islands." }, { "country": "South Sudan", "slug": "south-sudan", "region": "Africa", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/south-sudan", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for South Sudan." }, { "country": "Spain", "slug": "spain", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Agencia Española de Protección de Datos (AEPD)", "url": "http://www.agpd.es/portalwebAGPD/index-ides-idphp.php" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.aepd.es/es/informes-y-resoluciones/normativa-y-circulares" }, { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights", "url": "https://www.boe.es/buscar/act.php?id=BOE-A-2018-16673" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/spain", "description": "Data Protection Authority Agencia Española de Protección de Datos (AEPD) Privacy Legislation DPA Legislation Page GDPR and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights" }, { "country": "Sri Lanka", "slug": "sri-lanka", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "The Data Protection Authority of Sri Lanka", "url": "https://www.dpa.gov.lk/" } ], "legislation": [ { "name": "Personal Data Protection Act No. 9 of 2022", "url": "https://www.parliament.lk/uploads/acts/gbills/english/6242.pdf" }, { "name": "DPA Guidelines Page", "url": "https://www.dpa.gov.lk/guidelines.php" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/sri-lanka", "description": "Data Protection Authority The Data Protection Authority of Sri Lanka Privacy Legislation Personal Data Protection Act No. 9 of 2022 DPA Guidelines Page" }, { "country": "Sudan", "slug": "sudan", "region": "Africa", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/sudan", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Sudan." }, { "country": "Suriname", "slug": "suriname", "region": "Americas", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/suriname", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Suriname." }, { "country": "Svalbard and Jan Mayen", "slug": "svalbard-and-jan-mayen", "region": "Other", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/svalbard-and-jan-mayen", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Svalbard and Jan Mayen." }, { "country": "Sweden", "slug": "sweden", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Integritetsskyddsmyndigheten (IMY)", "url": "https://www.imy.se/" } ], "legislation": [ { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Act (2018:218)", "url": "https://www.riksdagen.se/sv/dokument-och-lagar/dokument/svensk-forfattningssamling/lag-2018218-med-kompletterande-bestammelser_sfs-2018-218/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/sweden", "description": "Data Protection Authority Integritetsskyddsmyndigheten (IMY) Privacy Legislation GDPR and Act (2018:218)" }, { "country": "Switzerland", "slug": "switzerland", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Préposé fédéral à la protection des données et à la transparence (PFPDT)", "url": "https://www.edoeb.admin.ch/edoeb/en/home.html" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.edoeb.admin.ch/edoeb/en/home/datenschutz/grundlagen.html" }, { "name": "Ordinance on the Federal Act on Data Protection", "url": "https://www.fedlex.admin.ch/eli/oc/2022/568/fr" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/switzerland", "description": "Data Protection Authority Préposé fédéral à la protection des données et à la transparence (PFPDT) Privacy Legislation DPA Legislation Page Ordinance on the Federal Act on Data Protection" }, { "country": "Syrian Arab Republic", "slug": "syrian-arab-republic", "region": "Other", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/syrian-arab-republic", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Syrian Arab Republic." }, { "country": "Taiwan", "slug": "taiwan", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "National Development Council", "url": "https://www.ndc.gov.tw/en/Content_List.aspx?n=F01BA39CDAD39B01" } ], "legislation": [ { "name": "Personal Data Protection Act", "url": "https://theme.ndc.gov.tw/lawout/EngLawContent.aspx?lan=E&id=89" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/taiwan", "description": "Data Protection Authority National Development Council Privacy Legislation Personal Data Protection Act" }, { "country": "Tajikistan", "slug": "tajikistan", "region": "Central Asia", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Communication Service under the Government of the Republic of Tajikistan", "url": "https://khadamotialoqa.tj/en/main/https://cs.gov.tj/en/main/" } ], "legislation": [ { "name": "Law of 3 August 2018 No.1537 on Protection of Personal Data", "url": "https://cis-legislation.com/document.fwx?rgn=108952" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/tajikistan", "description": "Data Protection Authority Communication Service under the Government of the Republic of Tajikistan Privacy Legislation Law of 3 August 2018 No.1537 on Protection of Personal Data" }, { "country": "Thailand", "slug": "thailand", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Personal Data Protection Committee", "url": "https://www.mdes.go.th/mission/82" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.mdes.go.th/mission/detail/2319-%E0%B8%81%E0%B8%8E%E0%B8%AB%E0%B8%A1%E0%B8%B2%E0%B8%A2%E0%B8%84%E0%B8%B8%E0%B9%89%E0%B8%A1%E0%B8%84%E0%B8%A3%E0%B8%AD%E0%B8%87%E0%B8%82%E0%B9%89%E0%B8%AD%E0%B8%A1%E0%B8%B9%E0%B8%A5%E0%B8%AA%E0%B9%88%E0%B8%A7%E0%B8%99%E0%B8%9A%E0%B8%B8%E0%B8%84%E0%B8%84%E0%B8%A5" }, { "name": "Personal Data Protection Act 2019", "url": "https://www.mdes.go.th/uploads/tinymce/source/%E0%B8%AA%E0%B8%84%E0%B8%AA/Personal%20Data%20Protection%20Act%202019.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/thailand", "description": "Data Protection Authority Personal Data Protection Committee Privacy Legislation DPA Legislation Page Personal Data Protection Act 2019" }, { "country": "Timor-Leste", "slug": "timor-leste", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/timor-leste", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Timor-Leste." }, { "country": "Togo", "slug": "togo", "region": "Africa", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Law No. 2019-014", "url": "https://jo.gouv.tg/sites/default/files/JO/JOS_29_10_2019-64E%20ANNEE-N%C2%B026%20TER.pdf#page=1" } ], "tags": [ "Link Unavailable" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/togo", "description": "Data Protection Authority Instance de Protection des Données à Caractère Personnel (link unavailable.) Privacy Legislation Law No. 2019-014" }, { "country": "Tonga", "slug": "tonga", "region": "Asia-Pacific", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/tonga", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Tonga." }, { "country": "Trinidad and Tobago", "slug": "trinidad-and-tobago", "region": "Americas", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Data Protection Act, 2011", "url": "https://rgd.legalaffairs.gov.tt/laws2/Alphabetical_List/lawspdfs/22.04.pdf" } ], "tags": [ "DPA Pending" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/trinidad-and-tobago", "description": "Data Protection Authority Office of the Information Commissioner (not yet established.) Privacy Legislation Data Protection Act, 2011" }, { "country": "Tunisia", "slug": "tunisia", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Instance Nationale De Protection Des Données Personnelles (INPDP)", "url": "https://www.inpdp.tn/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.inpdp.tn/textes.xhtml" }, { "name": "Organic Act No. 2004-63", "url": "https://www.ins.tn/sites/default/files/2020-04/Loi%2063-2004%20Fr.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/tunisia", "description": "Data Protection Authority Instance Nationale De Protection Des Données Personnelles (INPDP) Privacy Legislation DPA Legislation Page Organic Act No. 2004-63" }, { "country": "Türkiye", "slug": "türkiye", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Kişisel Verileri Koruma Kurumu", "url": "https://www.kvkk.gov.tr/" } ], "legislation": [ { "name": "Law on Protection of Personal Data No. 6698", "url": "https://www.kvkk.gov.tr/Icerik/6649/Personal-Data-Protection-Law" }, { "name": "DPA Regulations Page", "url": "https://www.kvkk.gov.tr/Icerik/5257/yonetmelikler" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/türkiye", "description": "Data Protection Authority Kişisel Verileri Koruma Kurumu Privacy Legislation Law on Protection of Personal Data No. 6698 DPA Regulations Page" }, { "country": "Turkmenistan", "slug": "turkmenistan", "region": "Central Asia", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Regulator - The Cabinet of Ministers of Turkmenistan", "url": "https://www.turkmenistan.gov.tm/tk" } ], "legislation": [ { "name": "Law of Turkmenistan No.519-V ‘On Information about Private Life and its Protection’ (the ‘Data Protection Law’)", "url": "https://natlex.ilo.org/dyn/natlex2/r/natlex/fe/details?p3_isn=107056" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/turkmenistan", "description": "Data Protection Authority Regulator - The Cabinet of Ministers of Turkmenistan Privacy Legislation Law of Turkmenistan No.519-V ‘On Information about Private Life and its Protection’ (the ‘Data Protection Law’)" }, { "country": "Turks and Caicos Islands", "slug": "turks-and-caicos-islands", "region": "Americas", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/turks-and-caicos-islands", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Turks and Caicos Islands." }, { "country": "Uganda", "slug": "uganda", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Personal Data Protection Office", "url": "https://pdpo.go.ug/home" } ], "legislation": [ { "name": "Data Protection and Privacy Act 2019", "url": "https://ict.go.ug/wp-content/uploads/2019/03/Data-Protection-and-Privacy-Act-2019.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/uganda", "description": "Data Protection Authority Personal Data Protection Office Privacy Legislation Data Protection and Privacy Act 2019" }, { "country": "Ukraine", "slug": "ukraine", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "The Ukraine Parliamentary Commissioner for Human Rights", "url": "https://ombudsman.gov.ua/en/zahist-personalnih-danih" } ], "legislation": [ { "name": "Personal Data Protection Law", "url": "https://zakon.rada.gov.ua/laws/show/en/2297-17#Text" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/ukraine", "description": "Data Protection Authority The Ukraine Parliamentary Commissioner for Human Rights Privacy Legislation Personal Data Protection Law" }, { "country": "United Arab Emirates", "slug": "united-arab-emirates", "region": "Middle East", "hasDpa": false, "hasLegislation": true, "dpas": [], "legislation": [ { "name": "Government Privacy Legislation Page", "url": "https://u.ae/en/about-the-uae/digital-uae/data/data-protection-laws" }, { "name": "Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data", "url": "https://uaelegislation.gov.ae/en/legislations/1972/download" } ], "tags": [ "DPA Pending" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/united-arab-emirates", "description": "Data Protection Authority UAE Data Office (not yet established.) Privacy Legislation Government Privacy Legislation Page Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data" }, { "country": "United Kingdom of Great Britain and Northern Ireland", "slug": "united-kingdom-of-great-britain-and-northern-ireland", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Information Commissioner's Office", "url": "https://ico.org.uk/" } ], "legislation": [ { "name": "Data Protection Act 2018", "url": "https://www.legislation.gov.uk/ukpga/2018/12/contents" }, { "name": "UK GDPR", "url": "https://www.legislation.gov.uk/eur/2016/679/contents" }, { "name": "ICO's UK GDPR guidance and resources", "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/united-kingdom-of-great-britain-and-northern-ireland", "description": "Data Protection Authority Information Commissioner's Office Privacy Legislation Data Protection Act 2018 UK GDPR ICO's UK GDPR guidance and resources" }, { "country": "United Republic of Tanzania", "slug": "united-republic-of-tanzania", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Utangulizi Tume Ya Ulinzi Wa Taarifa Binafsi", "url": "https://www.pdpc.go.tz/en/#" } ], "legislation": [ { "name": "The Personal Data Protection Act, 2022", "url": "https://www.pdpc.go.tz/media/media/THE_PERSONAL_DATA_PROTECTION_ACT.pdf" }, { "name": "DPA Legislation Page", "url": "https://www.pdpc.go.tz/en/policies-legislations/acts/" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/united-republic-of-tanzania", "description": "Data Protection Authority Utangulizi Tume Ya Ulinzi Wa Taarifa Binafsi Privacy Legislation The Personal Data Protection Act, 2022 DPA Legislation Page" }, { "country": "United States of America", "slug": "united-states-of-america", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Federal Trade Commission", "url": "https://www.ftc.gov/" } ], "legislation": [ { "name": "US Federal Privacy Legislation Tracker", "url": "https://iapp.org/resources/article/us-federal-privacy-legislation-tracker/" }, { "name": "US State Privacy Legislation Tracker", "url": "https://iapp.org/resources/article/us-state-privacy-legislation-tracker/" } ], "tags": [ "Sectoral Only" ], "iappUrl": "https://iapp.org/resources/global-privacy-directory/united-states-of-america", "description": "Data Protection Authority Federal Trade Commission Privacy Legislation No general federal privacy regulation, although there are many sectoral laws. US Federal Privacy Legislation Tracker US State Privacy Legislation Tracker" }, { "country": "Uruguay", "slug": "uruguay", "region": "Americas", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Unidad Reguladora y de Control de Datos Personales", "url": "https://www.gub.uy/unidad-reguladora-control-datos-personales/" } ], "legislation": [ { "name": "Law No. 18.331 on the Protection of Personal Data and the Habeas Data Action 2008", "url": "https://www.impo.com.uy/bases/leyes/18331-2008" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/uruguay", "description": "Data Protection Authority Unidad Reguladora y de Control de Datos Personales Privacy Legislation Law No. 18.331 on the Protection of Personal Data and the Habeas Data Action 2008" }, { "country": "US Virgin Islands", "slug": "us-virgin-islands", "region": "Other", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/us-virgin-islands", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the US Virgin Islands." }, { "country": "Uzbekistan", "slug": "uzbekistan", "region": "Central Asia", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "State Personalisation Centre of Uzbekistan", "url": "https://dpm.uz/" } ], "legislation": [ { "name": "Law of Uzbekistan of 2 July 2019 No. ЗРУ-547 on Personal Data", "url": "https://lex.uz/docs/4396428" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/uzbekistan", "description": "Data Protection Authority State Personalisation Centre of Uzbekistan Privacy Legislation Law of Uzbekistan of 2 July 2019 No. ЗРУ-547 on Personal Data" }, { "country": "Vanuatu", "slug": "vanuatu", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "CERT Vanuatu", "url": "https://cert.gov.vu/index.php" } ], "legislation": [ { "name": "Data Protection and Privacy Act No. 13 of 2024", "url": "https://digital.gov.vu/images/Docs/legislation/Data_Protection_and_Privacy_Act_No13_of_2024-EN.pdf" }, { "name": "DPA Legislation Page", "url": "https://cert.gov.vu/index.php/information/legislations" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/vanuatu", "description": "Data Protection Authority CERT Vanuatu Privacy Legislation Data Protection and Privacy Act No. 13 of 2024 DPA Legislation Page" }, { "country": "Vatican City", "slug": "vatican-city", "region": "Europe", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "The Pontifical Commission", "url": "https://www.vaticanstate.va/en/" } ], "legislation": [ { "name": "Regolamento Generale sulla protezione dei Dati personali", "url": "https://www.vaticanstate.va/phocadownload/leggi-decreti/normativa-generale/N.%20DCLVII.pdf" }, { "name": "DPA Legislation Page", "url": "https://www.vaticanstate.va/en/state-and-government/legislation-and-regulations/general-regulations.html" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/vatican-city", "description": "Data Protection Authority The Pontifical Commission Privacy Legislation Regolamento Generale sulla protezione dei Dati personali DPA Legislation Page" }, { "country": "Venezuela, Bolivarian Republic of", "slug": "venezuela-bolivarian-republic-of", "region": "Other", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/venezuela-bolivarian-republic-of", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Venezuela." }, { "country": "Vietnam", "slug": "vietnam", "region": "Asia-Pacific", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Ministry of Public Security", "url": "https://en.bocongan.gov.vn/" } ], "legislation": [ { "name": "Law on Personal Data Protection (PDPL)", "url": "https://thuvienphapluat.vn/van-ban/EN/Cong-nghe-thong-tin/Decree-No-13-2023-ND-CP-dated-April-17-2023-on-protection-of-personal-data/564343/tieng-anh.aspx" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/vietnam", "description": "Data Protection Authority Ministry of Public Security Privacy Legislation Law on Personal Data Protection (PDPL)" }, { "country": "Wallis and Futuna", "slug": "wallis-and-futuna", "region": "Other", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Comission nationale de l'informatique et des libertes (\"CNIL\")", "url": "https://www.cnil.fr/en/home" } ], "legislation": [ { "name": "GDPR", "url": "https://gdpr-info.eu/" }, { "name": "Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties", "url": "https://www.cnil.fr/fr/la-loi-informatique-et-libertes" }, { "name": "DPA Official Texts Page", "url": "https://www.cnil.fr/en/official-texts" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/wallis-and-futuna", "description": "Data Protection Authority Comission nationale de l'informatique et des libertes (\"CNIL\") Privacy Legislation GDPR and Act No.78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties DPA Official Texts Page" }, { "country": "Western Sahara", "slug": "western-sahara", "region": "Other", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/western-sahara", "description": "Data Protection Authority and Privacy Legislation The IAPP is unaware of a data protection authority or comprehensive data protection legislation for the Western Sahara." }, { "country": "Yemen", "slug": "yemen", "region": "Middle East", "hasDpa": false, "hasLegislation": false, "dpas": [], "legislation": [], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/yemen", "description": "Data Protection Authority The IAPP is unaware of a data protection authority or comprehensive data protection legislation for Yemen." }, { "country": "Zambia", "slug": "zambia", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Office of the Data Protection Commissioner", "url": "https://www.dataprotection.gov.zm/" } ], "legislation": [ { "name": "The Data Protection Act, 2021", "url": "https://www.parliament.gov.zm/sites/default/files/documents/acts/Act%20No.%203%20The%20Data%20Protection%20Act%202021_0.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/zambia", "description": "Data Protection Authority Office of the Data Protection Commissioner Privacy Legislation The Data Protection Act, 2021" }, { "country": "Zimbabwe", "slug": "zimbabwe", "region": "Africa", "hasDpa": true, "hasLegislation": true, "dpas": [ { "name": "Postal and Telecommunications Regulatory Authority of Zimbabwe", "url": "https://www.potraz.gov.zw/" } ], "legislation": [ { "name": "DPA Legislation Page", "url": "https://www.potraz.gov.zw/?page_id=1678" }, { "name": "Data Protection Act 5 of 2021", "url": "http://www.potraz.gov.zw/wp-content/uploads/2022/02/Data-Protection-Act-5-of-2021.pdf" } ], "tags": [], "iappUrl": "https://iapp.org/resources/global-privacy-directory/zimbabwe", "description": "Data Protection Authority Postal and Telecommunications Regulatory Authority of Zimbabwe Privacy Legislation DPA Legislation Page Data Protection Act 5 of 2021" } ]