Updated October 6, 2026. Click a country or state for its laws. Use the + and − buttons (or Ctrl + scroll, pinch on a phone) to zoom, and drag to pan. The small dots mark microstates and islands.
Coming up in the next 12 months
Effective dates and deadlines between now and October 2027. Consent and opt-out settings need to be ready before these dates.
Nov 13, 2026IndiaDPDP Rules: consent managers must registerDec 1, 2026ChileLey 21.719 que regula la protección y el tratamiento de los datos personales y crea la Agencia de Protección de Datos PersonalesDec 10, 2026AustraliaChildren's Online Privacy Code must be registeredJan 1, 2027CaliforniaSB 690 operative: private pen-register suits over web and app tracking end; AB 566 browser opt-out signalJan 1, 2027DelawareHB 380: 10,000-consumer thresholdJan 1, 2027LouisianaLouisiana Data Privacy Act (Louisiana DPA)Jan 1, 2027OklahomaOklahoma Data Privacy Act (OKCDPA)Mar 19, 2027MontenegroLaw on Personal Data Protection (Official Gazette of Montenegro 133/2026)May 1, 2027AlabamaAlabama Personal Data Protection Act (Alabama PDPA)May 13, 2027IndiaDPDP Act: substantive duties and Data Protection Board penalties apply
Every country and state
Sort by any column. Type in the search box to filter.
| Place | Region | Status | Tier | Laws | Decisions citing | In effect since |
|---|---|---|---|---|---|---|
| Alabama | United States | Signed, not yet in effect | Enacted | 2 | 4 | May 1, 2027 |
| Åland | Europe | In effect | GDPR-style | 1 | 0 | May 1, 2019 |
| Alaska | United States | Other privacy laws only | Sector laws only | 1 | 0 | |
| Albania | Europe | In effect | Comprehensive | 1 | 0 | Feb 1, 2025 |
| Algeria | Africa | In effect | Comprehensive | 1 | 0 | Jun 10, 2018 |
| Andorra | Europe | In effect | Comprehensive | 1 | 0 | May 17, 2022 |
| Angola | Africa | In effect | Comprehensive | 1 | 0 | Jun 17, 2011 |
| Antigua and Barbuda | Americas | In effect | Comprehensive | 1 | 0 | 2013 |
| Argentina | Americas | In effect | Comprehensive | 5 | 0 | Nov 2, 2000 |
| Arizona | United States | Other privacy laws only | Sector laws only | 1 | 1 | |
| Arkansas | United States | Other privacy laws only | Sector laws only | 1 | 3 | |
| Armenia | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Jul 1, 2015 |
| Aruba | Americas | In effect | Comprehensive | 1 | 0 | May 19, 2011 |
| Australia | Asia-Pacific | In effect | Comprehensive | 15 | 2 | Jun 4, 2026 |
| Austria | Europe | In effect | GDPR-style | 2 | 310 | Jan 1, 2000 |
| Azerbaijan | Asia-Pacific | In effect | Comprehensive | 1 | 0 | May 11, 2010 |
| Bahamas | Americas | In effect | Comprehensive | 1 | 0 | Apr 2, 2007 |
| Bahrain | Middle East | In effect | Comprehensive | 1 | 0 | Aug 1, 2019 |
| Bangladesh | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Nov 6, 2025 |
| Barbados | Americas | In effect | Comprehensive | 1 | 0 | Mar 31, 2021 |
| Belarus | Europe | In effect | Comprehensive | 1 | 0 | Nov 15, 2021 |
| Belgium | Europe | In effect | GDPR-style | 3 | 875 | May 25, 2018 |
| Belize | Americas | Enacted, start date not confirmed | Enacted | 1 | 0 | |
| Benin | Africa | In effect | Comprehensive | 1 | 0 | Apr 20, 2018 |
| Bermuda | Americas | In effect | Comprehensive | 1 | 0 | Jan 1, 2025 |
| Bhutan | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Jun 21, 2018 |
| Bonaire, Sint Eustatius and Saba | Americas | In effect | Comprehensive | 1 | 0 | Oct 10, 2010 |
| Bosnia and Herzegovina | Europe | In effect | Comprehensive | 1 | 0 | Oct 4, 2025 |
| Botswana | Africa | In effect | Comprehensive | 1 | 0 | Jan 14, 2025 |
| Brazil | Americas | In effect | GDPR-style | 3 | 2 | Jun 23, 2014 |
| British Virgin Islands | Americas | In effect | Comprehensive | 1 | 0 | Jul 9, 2021 |
| Brunei | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Jan 1, 2026 |
| Bulgaria | Europe | In effect | GDPR-style | 2 | 153 | Jan 1, 2002 |
| Burkina Faso | Africa | In effect | Comprehensive | 1 | 0 | Mar 30, 2021 |
| Burundi | Africa | In effect | Comprehensive | 1 | 0 | Mar 10, 2026 |
| California | United States | In effect | Comprehensive (US state) | 12 | 1,443 | January 1, 2020 |
| Cameroon | Africa | In effect | Comprehensive | 1 | 0 | Dec 23, 2024 |
| Canada | Americas | In effect | Comprehensive | 24 | 6 | Mar 4, 2025 |
| Cape Verde | Africa | In effect | Comprehensive | 1 | 0 | Jan 22, 2001 |
| Cayman Islands | Americas | In effect | Comprehensive | 1 | 0 | Sep 30, 2019 |
| Central African Republic | Africa | In effect | Comprehensive | 1 | 0 | Jan 1, 2024 |
| Chad | Africa | In effect | Comprehensive | 1 | 0 | Feb 10, 2015 |
| Chile | Americas | In effect | Comprehensive | 2 | 1 | Aug 28, 1999 |
| China | Asia-Pacific | In effect | Comprehensive | 3 | 1 | Nov 1, 2021 |
| Colombia | Americas | In effect | Comprehensive | 3 | 0 | Oct 18, 2012 |
| Colorado | United States | In effect | Comprehensive (US state) | 2 | 7 | July 1, 2023 |
| Comoros | Africa | Enacted, start date not confirmed | Enacted | 1 | 0 | |
| Connecticut | United States | In effect | Comprehensive (US state) | 1 | 2 | July 1, 2023 |
| Costa Rica | Americas | In effect | Comprehensive | 1 | 0 | Sep 5, 2011 |
| Côte d’Ivoire | Africa | In effect | Comprehensive | 1 | 0 | Jun 19, 2013 |
| Croatia | Europe | In effect | GDPR-style | 2 | 0 | May 25, 2018 |
| Cuba | Americas | In effect | Comprehensive | 1 | 0 | Feb 21, 2023 |
| Curaçao | Americas | In effect | Comprehensive | 1 | 0 | Oct 1, 2010 |
| Cyprus | Europe | In effect | GDPR-style | 2 | 9 | Jul 31, 2018 |
| Czech Republic | Europe | In effect | GDPR-style | 2 | 115 | Apr 24, 2019 |
| Delaware | United States | In effect | Comprehensive (US state) | 1 | 1 | January 1, 2025 |
| Denmark | Europe | In effect | GDPR-style | 2 | 245 | May 25, 2018 |
| Djibouti | Africa | In effect | Comprehensive | 1 | 0 | Jun 30, 2025 |
| Dominican Republic | Americas | In effect | Comprehensive | 1 | 0 | Dec 13, 2013 |
| DR Congo | Africa | In effect | Comprehensive | 1 | 0 | Apr 11, 2023 |
| Ecuador | Americas | In effect | Comprehensive | 1 | 0 | May 26, 2021 |
| Egypt | Africa | In effect | Comprehensive | 1 | 0 | Oct 15, 2020 |
| El Salvador | Americas | In effect | Comprehensive | 1 | 0 | Nov 24, 2024 |
| Equatorial Guinea | Africa | In effect | Comprehensive | 1 | 0 | Jul 22, 2016 |
| Estonia | Europe | In effect | GDPR-style | 2 | 129 | Jan 15, 2019 |
| Eswatini | Africa | In effect | Comprehensive | 1 | 0 | Mar 4, 2022 |
| Ethiopia | Africa | In effect | Comprehensive | 1 | 0 | Jul 24, 2024 |
| Faroe Islands | Europe | In effect | Comprehensive | 1 | 0 | Jan 1, 2021 |
| Finland | Europe | In effect | GDPR-style | 2 | 225 | Jan 1, 2019 |
| Florida | United States | In effect | Comprehensive (US state) | 3 | 28 | July 1, 2024 |
| France | Europe | In effect | GDPR-style | 1 | 171 | Jan 7, 1978 |
| Gabon | Africa | In effect | Comprehensive | 1 | 0 | Jul 15, 2023 |
| Gambia | Africa | Enacted, start date not confirmed | Enacted | 1 | 0 | |
| Georgia (country) | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Mar 1, 2024 |
| Germany | Europe | In effect | GDPR-style | 2 | 120 | May 25, 2018 |
| Ghana | Africa | In effect | Comprehensive | 1 | 0 | Oct 16, 2012 |
| Gibraltar | Europe | In effect | GDPR-style | 1 | 0 | Apr 13, 2006 |
| Greece | Europe | In effect | GDPR-style | 2 | 394 | Aug 29, 2019 |
| Greenland | Europe | In effect | Comprehensive | 1 | 0 | Nov 1, 2016 |
| Grenada | Americas | Enacted, start date not confirmed | Enacted | 1 | 0 | |
| Guernsey | Europe | In effect | GDPR-style | 1 | 0 | May 25, 2018 |
| Guinea | Africa | In effect | Comprehensive | 1 | 0 | Jul 28, 2016 |
| Guyana | Americas | Enacted, start date not confirmed | Enacted | 1 | 0 | |
| Hawaii | United States | Other privacy laws only | Sector laws only | 2 | 2 | |
| Hong Kong | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Oct 1, 2022 |
| Hungary | Europe | In effect | GDPR-style | 2 | 336 | Jan 1, 2004 |
| Iceland | Europe | In effect | GDPR-style | 2 | 104 | Jul 15, 2018 |
| Idaho | United States | Other privacy laws only | Sector laws only | 1 | 2 | |
| Illinois | United States | Other privacy laws only | Sector laws only | 6 | 61 | |
| India | Asia-Pacific | In effect | Comprehensive | 4 | 1 | Apr 11, 2011 |
| Indiana | United States | In effect | Comprehensive (US state) | 1 | 1 | January 1, 2026 |
| Indonesia | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Oct 17, 2022 |
| Iowa | United States | In effect | Comprehensive (US state) | 1 | 1 | January 1, 2025 |
| Ireland | Europe | In effect | GDPR-style | 2 | 33 | May 25, 2018 |
| Isle of Man | Europe | In effect | GDPR-style | 3 | 0 | May 1, 2018 |
| Israel | Middle East | In effect | Comprehensive | 1 | 0 | Aug 14, 2025 |
| Italy | Europe | In effect | GDPR-style | 1 | 885 | Jan 1, 2004 |
| Jamaica | Americas | In effect | Comprehensive | 1 | 0 | Dec 1, 2023 |
| Japan | Asia-Pacific | In effect | GDPR-style | 2 | 2 | Jul 17, 2026 |
| Jersey | Europe | In effect | GDPR-style | 2 | 13 | May 25, 2018 |
| Jordan | Middle East | In effect | Comprehensive | 1 | 0 | Mar 17, 2024 |
| Kansas | United States | Other privacy laws only | Sector laws only | 1 | 3 | |
| Kazakhstan | Asia-Pacific | In effect | Comprehensive | 2 | 0 | Nov 25, 2013 |
| Kentucky | United States | In effect | Comprehensive (US state) | 2 | 6 | January 1, 2026 |
| Kenya | Africa | In effect | Comprehensive | 4 | 0 | Nov 25, 2019 |
| Kosovo | Europe | In effect | Comprehensive | 1 | 0 | Mar 12, 2019 |
| Kyrgyzstan | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Apr 14, 2008 |
| Laos | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Jun 23, 2017 |
| Latvia | Europe | In effect | GDPR-style | 2 | 227 | Jul 5, 2018 |
| Lebanon | Middle East | In effect | Sector laws only | 1 | 0 | Jan 18, 2019 |
| Lesotho | Africa | In effect | Comprehensive | 1 | 0 | Feb 22, 2012 |
| Libya | Africa | In effect | Sector laws only | 1 | 0 | Oct 4, 2022 |
| Liechtenstein | Europe | In effect | GDPR-style | 2 | 8 | Jan 1, 2019 |
| Lithuania | Europe | In effect | GDPR-style | 2 | 458 | Jul 16, 2018 |
| Louisiana | United States | Signed, not yet in effect | Enacted | 3 | 0 | January 1, 2027 |
| Luxembourg | Europe | In effect | GDPR-style | 2 | 102 | Aug 20, 2018 |
| Macao | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Feb 18, 2006 |
| Madagascar | Africa | In effect | Comprehensive | 1 | 0 | Jan 9, 2015 |
| Malawi | Africa | In effect | Comprehensive | 1 | 0 | Jun 3, 2024 |
| Malaysia | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Nov 15, 2013 |
| Mali | Africa | In effect | Comprehensive | 1 | 0 | May 21, 2013 |
| Malta | Europe | In effect | GDPR-style | 3 | 135 | May 28, 2018 |
| Marshall Islands | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Oct 7, 2025 |
| Maryland | United States | In effect | Comprehensive (US state) | 4 | 24 | October 1, 2025 |
| Massachusetts | United States | Bill progressing | Bill progressing | 3 | 12 | |
| Mauritania | Africa | In effect | Comprehensive | 1 | 0 | Jul 22, 2017 |
| Mauritius | Africa | In effect | Comprehensive | 1 | 0 | Jan 15, 2018 |
| Mexico | Americas | In effect | Comprehensive | 2 | 0 | Mar 21, 2025 |
| Michigan | United States | Bill progressing | Bill progressing | 2 | 22 | |
| Minnesota | United States | In effect | Comprehensive (US state) | 2 | 3 | July 31, 2025 |
| Mississippi | United States | Other privacy laws only | Sector laws only | 1 | 5 | |
| Moldova | Europe | In effect | Comprehensive | 1 | 0 | Aug 23, 2026 |
| Monaco | Europe | In effect | Comprehensive | 1 | 0 | Dec 13, 2024 |
| Mongolia | Asia-Pacific | In effect | Comprehensive | 1 | 0 | May 1, 2022 |
| Montana | United States | In effect | Comprehensive (US state) | 2 | 1 | October 1, 2024 |
| Montenegro | Europe | In effect | Comprehensive | 2 | 0 | 2008 |
| Morocco | Africa | In effect | Comprehensive | 1 | 0 | Feb 23, 2009 |
| Nebraska | United States | In effect | Comprehensive (US state) | 2 | 3 | January 1, 2025 |
| Nepal | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Sep 18, 2018 |
| Netherlands | Europe | In effect | GDPR-style | 2 | 14 | Dec 15, 1998 |
| Nevada | United States | Other privacy laws only | Sector laws only | 1 | 0 | |
| New Hampshire | United States | In effect | Comprehensive (US state) | 4 | 3 | January 1, 2025 |
| New Jersey | United States | In effect | Comprehensive (US state) | 1 | 0 | January 15, 2025 |
| New Mexico | United States | Other privacy laws only | Sector laws only | 1 | 3 | |
| New York | United States | Other privacy laws only | Sector laws only | 5 | 11 | |
| New Zealand | Asia-Pacific | In effect | Comprehensive | 1 | 0 | May 1, 2026 |
| Nicaragua | Americas | In effect | Comprehensive | 1 | 0 | Mar 29, 2012 |
| Niger | Africa | In effect | Comprehensive | 1 | 0 | Dec 16, 2022 |
| Nigeria | Africa | In effect | Comprehensive | 3 | 0 | Jan 25, 2019 |
| North Carolina | United States | Bill progressing | Bill progressing | 0 | 0 | |
| North Macedonia | Europe | In effect | Comprehensive | 1 | 0 | Feb 24, 2020 |
| Norway | Europe | In effect | GDPR-style | 2 | 59 | Jul 20, 2018 |
| Ohio | United States | Other privacy laws only | Sector laws only | 2 | 4 | |
| Oklahoma | United States | Signed, not yet in effect | Enacted | 2 | 2 | January 1, 2027 |
| Oman | Middle East | In effect | Comprehensive | 1 | 0 | Feb 13, 2023 |
| Oregon | United States | In effect | Comprehensive (US state) | 1 | 1 | July 1, 2024 |
| Panama | Americas | In effect | Comprehensive | 2 | 0 | Mar 29, 2021 |
| Paraguay | Americas | In effect | Comprehensive | 2 | 0 | Oct 27, 2020 |
| Pennsylvania | United States | Bill progressing | Bill progressing | 1 | 50 | |
| Peru | Americas | In effect | Comprehensive | 2 | 0 | Mar 30, 2025 |
| Philippines | Asia-Pacific | In effect | Comprehensive | 2 | 0 | Sep 8, 2012 |
| Poland | Europe | In effect | GDPR-style | 2 | 311 | May 25, 2018 |
| Portugal | Europe | In effect | GDPR-style | 2 | 7 | Aug 19, 2004 |
| Qatar | Middle East | In effect | Comprehensive | 2 | 0 | Jun 19, 2022 |
| Republic of the Congo | Africa | In effect | Comprehensive | 1 | 0 | Oct 10, 2019 |
| Rhode Island | United States | In effect | Comprehensive (US state) | 1 | 1 | January 1, 2026 |
| Romania | Europe | Enacted, start date not confirmed | GDPR-style | 3 | 47 | |
| Russia | Europe | In effect | Comprehensive | 1 | 1 | Jan 26, 2007 |
| Rwanda | Africa | In effect | Comprehensive | 1 | 0 | Oct 15, 2021 |
| Saint Kitts and Nevis | Americas | Enacted, start date not confirmed | Enacted | 1 | 0 | |
| Saint Lucia | Americas | Partly in effect | Comprehensive | 1 | 0 | |
| San Marino | Europe | In effect | Comprehensive | 1 | 0 | Jan 5, 2019 |
| São Tomé and Príncipe | Africa | In effect | Comprehensive | 1 | 0 | May 10, 2016 |
| Saudi Arabia | Middle East | In effect | Comprehensive | 1 | 0 | Sep 14, 2023 |
| Senegal | Africa | In effect | Comprehensive | 1 | 0 | Jan 25, 2008 |
| Serbia | Europe | In effect | Comprehensive | 1 | 0 | Nov 21, 2018 |
| Seychelles | Africa | In effect | Comprehensive | 1 | 0 | Dec 22, 2023 |
| Singapore | Asia-Pacific | In effect | Comprehensive | 1 | 1 | Dec 5, 2025 |
| Sint Maarten | Americas | In effect | Comprehensive | 1 | 0 | Oct 10, 2010 |
| Slovakia | Europe | In effect | GDPR-style | 2 | 2 | May 25, 2018 |
| Slovenia | Europe | In effect | GDPR-style | 2 | 96 | Jan 26, 2023 |
| Somalia | Africa | In effect | Comprehensive | 1 | 0 | Mar 23, 2023 |
| South Africa | Africa | In effect | Comprehensive | 3 | 0 | Jul 1, 2020 |
| South Carolina | United States | Other privacy laws only | Sector laws only | 1 | 0 | |
| South Korea | Asia-Pacific | In effect | GDPR-style | 2 | 0 | Sep 11, 2026 |
| Spain | Europe | In effect | GDPR-style | 5 | 1,700 | Dec 7, 2018 |
| Sri Lanka | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Mar 18, 2025 |
| Sweden | Europe | In effect | GDPR-style | 3 | 58 | May 25, 2018 |
| Switzerland | Europe | In effect | GDPR-style | 3 | 17 | Sep 1, 2023 |
| Taiwan | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Nov 11, 2025 |
| Tajikistan | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Aug 3, 2018 |
| Tanzania | Africa | In effect | Comprehensive | 1 | 0 | May 1, 2023 |
| Tennessee | United States | In effect | Comprehensive (US state) | 2 | 2 | July 1, 2025 |
| Texas | United States | In effect | Comprehensive (US state) | 4 | 13 | July 1, 2024 |
| Thailand | Asia-Pacific | In effect | Comprehensive | 1 | 0 | May 28, 2019 |
| Togo | Africa | In effect | Comprehensive | 1 | 0 | Oct 29, 2019 |
| Tonga | Asia-Pacific | Enacted, start date not confirmed | Enacted | 1 | 0 | |
| Trinidad and Tobago | Americas | In effect | Comprehensive | 1 | 0 | Jun 22, 2011 |
| Tunisia | Africa | In effect | Comprehensive | 1 | 0 | Jul 27, 2004 |
| Turkey | Europe | In effect | GDPR-style | 1 | 0 | Apr 7, 2016 |
| Turkmenistan | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Jul 1, 2017 |
| Uganda | Africa | In effect | Comprehensive | 1 | 0 | May 3, 2019 |
| Ukraine | Europe | In effect | Comprehensive | 1 | 0 | Jan 1, 2011 |
| United Arab Emirates | Middle East | In effect | Comprehensive | 5 | 0 | Feb 11, 2021 |
| United Kingdom | Europe | In effect | GDPR-style | 4 | 150 | May 25, 2018 |
| Uruguay | Americas | In effect | Comprehensive | 1 | 0 | Aug 18, 2008 |
| Utah | United States | In effect | Comprehensive (US state) | 2 | 10 | December 31, 2023 |
| Uzbekistan | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Oct 1, 2019 |
| Vanuatu | Asia-Pacific | In effect | Comprehensive | 1 | 0 | Jan 2, 2025 |
| Vatican City | Europe | In effect | Comprehensive | 1 | 0 | Apr 30, 2024 |
| Vermont | United States | Signed, not yet in effect | Enacted | 3 | 3 | January 1, 2028 |
| Vietnam | Asia-Pacific | In effect | Comprehensive | 2 | 0 | Jul 1, 2023 |
| Virginia | United States | In effect | Comprehensive (US state) | 1 | 5 | January 1, 2023 |
| Washington | United States | Other privacy laws only | Sector laws only | 5 | 25 | |
| Wisconsin | United States | Other privacy laws only | Sector laws only | 1 | 1 | |
| Wyoming | United States | Other privacy laws only | Sector laws only | 1 | 1 | |
| Zambia | Africa | In effect | Comprehensive | 1 | 0 | Apr 1, 2021 |
| Zimbabwe | Africa | In effect | Comprehensive | 1 | 0 | Dec 3, 2021 |
See every law we summarize on the privacy laws page. The US state map has the full state-by-state detail.
Law names, dates, links and case counts come from the Vault JS legal library, which holds the official text of each law and 20,864 enforcement decisions and court cases citing them. Fines, private suits and opt-out signal rules are filled in for the United States, the EU and the ten international laws we summarize; the remaining countries are being extracted from the statute text and will fill in over the coming months. Coverage grows as we add laws; a country shown without a law may still have one. This map is a summary, not legal advice. Spot an error? Tell us.