AI and data laws

311 moving · 704 enacted

South KoreaSouth KoreaLawAct No. 21445

Personal Information Protection Act Amendment

Amends PIPA after large data breaches to make company heads ultimately responsible for data protection, require notice of possible breaches, mandate privacy certification for large handlers, and allow fines of up to 10 percent of total revenue for repeated or massive violations.

In forceIntroducedCommitteeFloorLawIn force

Amendment enters into forceSep 11 2 months ago

Body
National Assembly of the Republic of Korea
Session
22nd National Assembly
In effect since
Sep 112 months ago

Timeline

  1. Jul 1, 2027 in 7 months

    Mandatory privacy certification for designated large handlers scheduled to apply

  2. Sep 11 2 months ago

    Amendment enters into force

  3. Mar 10 8 months ago

    Promulgated as Act No. 21445

Delaware
DelawareHB 380

Delaware Personal Data Privacy Act Amendments

Amends the Delaware Personal Data Privacy Act to align it with other states' laws, including lowering the applicability threshold to entities processing data of at least 15,000 consumers.

Enacted
California

Consumer Privacy: Deletion Requests

Would expand the CCPA right to delete to all personal information a business has collected about a consumer and require businesses to offer an online method for submitting privacy requests.

Enacted
Japan
JapanAct No. 56 of 2026

Act on the Protection of Personal Information Amendment

Amends Japan's personal information law to allow data sharing without consent for statistics and AI development, strengthen protections for children under 16 and facial feature data, and introduce administrative surcharges for serious violations.

In force

Change log

  • AddedAdded to the list. Set by hand from the official record.Sep 27

Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.