Privacy Laws

International Privacy Laws

Laws covered

APPI / PIPA / PDPA

Japan, Korea and Singapore's privacy laws. Opt-in third-party sharing in Japan, strict separate consent in Korea, PDPC enforcement in Singapore.

DPDP Act + Rules 2025

India's data protection law and 2025 Rules. Verifiable parental consent for under-18s, no tracking or targeted ads to children, penalties to ₹250 crore.

ePrivacy Directive

The EU cookie law. Prior consent before storing or reading anything on a device, enforced by national regulators like the CNIL.

FADP (revised)

Switzerland's revised data protection law (Sept 2023). GDPR-like duties, express consent for high-risk profiling, fines up to CHF 250,000 on individuals.

GDPR | EU / EEA

The EU's data protection regulation (May 2018). Consent must be freely given and withdrawable; fines reach €20M or 4% of global turnover.

LGPD

Brazil's general data protection law (2020), modeled on GDPR and enforced by the ANPD. Fines up to 2% of Brazil revenue, R$50M per violation.

PIPL (+ DSL, CSL)

China's personal information law (Nov 2021). Separate consent for sharing and sensitive data; app SDKs are the CAC's main enforcement target.

Privacy Act 1988 (+ reforms)

Australia's privacy law and its 2024 reforms: a new privacy tort, new lower penalty tiers, and a children's online privacy code. Max penalty A$50M.

Quebec Law 25 (+ PIPEDA)

Quebec's privacy law: tracking that identifies, locates or profiles must be off by default since Sept 2023. Fines up to C$25M or 4%.

UK GDPR + PECR

UK data protection and cookie rules enforced by the ICO. 2025 reforms raised PECR fines to £17.5M or 4% of global turnover.

See what your sites and apps actually send

Get a free site analysis: every tracker, mapped to the laws that apply to it.