Skip to content

Data

Data sharing, data brokers, data localisation, open data and cross-border transfers.

187

On file

144

Became law

23

Still moving

8

Moved in 30 days

Passed both 4Passed one chamber 5In committee 7Introduced 3Proposed 4Enacted 15In force 111Adopted 18Ruled 3Vetoed 4Failed 13

187 items, page 1 of 4, newest action first

MovedMeasure
Sep 252 days ago
UN Convention against Cybercrime

United NationsA/RES/79/243Signatures reach 95 and parties 3 (per UN Treaty Collection, 26 September 2026); not yet in force, 40 ratifications needed

AdoptedAdopted
Sep 234 days ago
Always Watching: Flock's Nationwide AI Surveillance Network

United States (federal)Hearing held

In committeeIn committeeR (Republican)
Sep 1611 days ago
Act on the Protection of Personal Information Amendment

JapanAct No. 56 of 2026Personal Information Protection Commission adopts its first basic approach for the implementing cabinet orders and commission rules

In forceIn force
Sep 122 weeks ago
Data Act

European UnionRegulation (EU) 2023/2854Product and service design obligations for data access (Article 3(1)) apply to products placed on the market after this date

In forceIn force
Sep 112 weeks ago
Personal Information Protection Act Amendment

South KoreaAct No. 21445Amendment enters into force

In forceIn force
Sep 72 weeks ago
Sep 43 weeks ago
Data Brokers: Deletion Mechanism: Elected Officials and Judges

CACaliforniaAB 883Enrolled and presented to the governor

Passed bothPassed bothD (Democrat)
Sep 23 weeks ago
Delaware Personal Data Privacy Act Amendments

DEDelawareHB 380Signed by Governor

EnactedEnactedD (Democrat)
Aug 47 weeks ago
Your Data, Their Profit: The Consumer Cost of AI Surveillance Pricing

United States (federal)Hearing held

In committeeIn committeeR (Republican)
Aug 18 weeks ago
Delete Act

CACaliforniaSB 362Data brokers required to begin processing deletion requests through the Delete Request and Opt-out Platform (DROP)

In forceIn forceD (Democrat)
Jul 272 months ago
Digital Omnibus (data, GDPR, ePrivacy, NIS2 simplification)

European UnionCOM(2025) 837Amendments tabled in committee

ProposedProposed
Jul 232 months ago
Digital Markets Act

European UnionRegulation (EU) 2022/1925Commission fines Google 890 million euros for DMA breaches

In forceIn force
Jul 142 months ago
Relating to Social Media (account deletion)

HIHawaiiHB 1753Act 252

EnactedEnacted
Jul 112 months ago
National Artificial Intelligence Strategy (NAIS)

NigeriaFinal strategy document, dated September 2025, posted on the NCAIR website

AdoptedAdoptedUnverified
Jul 12 months ago
Georgia Consumer Privacy Protection Act

GAGeorgiaSB 111Effective date (signed as Act 462 on 2026-05-11)

In forceIn forceR (Republican)
Jun 293 months ago
Chatrie v. United States

United States (federal)No. 25-112Opinion issued

RuledRuled
Jun 253 months ago
Consumer Data Privacy Act

PAPennsylvaniaHB 78Second consideration in the Senate

Passed one chamberPassed one chamberD (Democrat)
Jun 253 months ago
Health and Location Data Protection Act of 2026

United States (federal)H.R. 9482Referred to the House Committee on Energy and Commerce.

In committeeIn committee
Jun 193 months ago
Prohibiting the sale of a child's personal data

NHNew HampshireHB 1460Signed by the governor, Chapter 168

EnactedEnactedR (Republican)
Jun 183 months ago
Lawful Access Act, 2026

CanadaBill C-22 (45th Parliament, 1st Session)Committee stage completed and third reading in the House of Commons; first reading in the Senate

Passed one chamberPassed one chamber
Jun 173 months ago
Massachusetts Data Privacy Act

MAMassachusettsS 2619House insisted on its amendment; committee of conference appointed (the Senate non-concurred on June 11)

Passed bothPassed both
Jun 163 months ago
Vermont Data Privacy and Online Surveillance Act (Act 145 of 2026)

VTVermontS.71Signed by the Governor; Act 145 of 2026

EnactedEnactedD (Democrat)
Jun 153 months ago
Protecting Privacy and Consumer Data Act (Bill C-36)

CanadaBill C-36 (45th Parliament, 1st Session)First reading in the House of Commons

IntroducedIntroduced
Jun 43 months ago
Artificial Intelligence Training Data Transparency Act

NYNew YorkA 6578-B / S 6955-APassed Senate 54-6; awaiting action by the governor

Passed bothPassed bothD (Democrat)
Jun 43 months ago
Surveillance Pricing Prohibition

NYNew YorkA 9349-B / S 8623-BPassed both houses; awaiting action by the governor

Passed bothPassed both
Jun 23 months ago
Prohibit Surveillance Price and Wage Setting

COColoradoHB 26-1210Vetoed by the governor

VetoedVetoedD (Democrat)
May 274 months ago
An Act Concerning Consumer Privacy and Protection

CTConnecticutSB 4Signed by the governor (Public Act 26-64)

EnactedEnacted
May 134 months ago
Ohio Privacy Act

OHOhioHB 801Referred to House committee

In committeeIn committeeD (Democrat)
May 74 months ago
Consumer health data amendments to the Minnesota Consumer Data Privacy Act

MNMinnesotaHF 2700Author added after second reading; Died when the 2025-2026 biennium ended without final passage

FailedFailedD (Democrat)
Apr 175 months ago
Data Privacy: Consumer Data Processing and Rights

ALAlabamaHB 351Enacted as Act 2026-552

EnactedEnactedR (Republican)
Apr 135 months ago
Maine Online Data Privacy Act

MEMaineLD 1822House failed to enact 70-79; Senate insisted; placed in legislative files (dead)

FailedFailedD (Democrat)
Apr 135 months ago
Automatic content recognition data consent

KYKentuckyHB 692Signed by the governor (Acts Ch. 118)

EnactedEnactedR (Republican)
Apr 135 months ago
Consumer Data Protection Act; precise geolocation data

VAVirginiaSB 338Approved by the governor (Chapter 820)

In forceIn forceD (Democrat)
Apr 75 months ago
Genetic information in long-term care, life and disability insurance

MNMinnesotaHF 3701Author added; Died when the 2025-2026 biennium ended without final passage

FailedFailedD (Democrat)
Apr 65 months ago
Limits on public body data sharing with data brokers

OROregonSB 1587Chapter 96, 2026 Laws, effective June 5, 2026

In forceIn forceD (Democrat)
Mar 306 months ago
Driver privacy protections (license plate readers)

WAWashingtonSB 6002Governor signed; Chapter 239, 2026 Laws

In forceIn forceD (Democrat)
Mar 256 months ago
Ban on surveillance-based price and wage discrimination

MNMinnesotaHF 3794Heard again in House Commerce Finance and Policy Committee; Died when the 2025-2026 biennium ended without final passage

FailedFailedD (Democrat)Unverified
Mar 206 months ago
Oklahoma consumer data privacy law

OKOklahomaSB 546Approved by Governor

EnactedEnactedR (Republican)
Mar 186 months ago
Data broker registration

MNMinnesotaHF 4456Referred to Commerce Finance and Policy; Died when the 2025-2026 biennium ended without final passage

FailedFailedD (Democrat)
Mar 66 months ago
Data privacy for government entities

WYWyomingSF 20Signed by the Governor; assigned Chapter 48

In forceIn force
Mar 46 months ago
Driver Privacy and Safety Act

NMNew MexicoSB 40Signed by the governor, Chapter 20

In forceIn forceD (Democrat)
Feb 267 months ago
Biological and Neural Data Protection

ALAlabamaHB 263Read second time in the Senate; no final passage before adjournment

FailedFailedR (Republican)
Feb 257 months ago
Law restructuring the ANPD as the National Data Protection Agency

BrazilLei 15.352/2026 (conversion of Medida Provisoria 1.317/2025)Converted into Law 15.352/2026, published in an extra edition of the Diario Oficial da Uniao and in force on publication

In forceIn force
Feb 67 months ago
Data (Use and Access) Act 2025

United Kingdom2025 c. 18Section 138 offences on creating or requesting purported intimate images of adults without consent in force

In forceIn force
Feb 37 months ago
Mississippi Consumer Data Privacy Act

MSMississippiSB 2015Died in committee

FailedFailedD (Democrat)Unverified
Jan 128 months ago
Protecting personal data privacy

WAWashingtonHB 1671Reintroduced and retained in House Appropriations; not passed before the 2026 session ended

FailedFailedD (Democrat)
Jan 18 months ago
Decision Amending the Cybersecurity Law

ChinaPresidential Order No. 61Amended Cybersecurity Law enters into force

In forceIn force
Jan 18 months ago
Law on Personal Data Protection

VietnamLaw No. 91/2025/QH15Law takes effect

In forceIn force
Jan 18 months ago
DAC8 (crypto-asset tax reporting)

European UnionCouncil Directive (EU) 2023/2226Transposed rules apply

In forceIn force
Jan 18 months ago
GDPR Procedural Regulation (cross-border enforcement)

European UnionRegulation (EU) 2025/2518Enters into force

In forceIn force