Skip to content

Data

Data sharing, data brokers, data localisation, open data and cross-border transfers.

187

On file

144

Became law

23

Still moving

8

Moved in 30 days

Passed both 4Passed one chamber 5In committee 7Introduced 3Proposed 4Enacted 15In force 111Adopted 18Ruled 3Vetoed 4Failed 13

187 items, page 2 of 4, newest action first

MovedMeasure
Jan 18 months ago
Measures for Certification of Personal Information Export

ChinaCAC and SAMR Order No. 20Measures enter into force

In forceIn force
Dec 19, 20259 months ago
New York Health Information Privacy Act

NYNew YorkS 929 / A 2141Vetoed by the governor

VetoedVetoedD (Democrat)
Dec 17, 20259 months ago
Global Digital Compact (Pact for the Future)

United NationsA/RES/79/1 (annex I)Follow-up: WSIS+20 outcome document (resolution 80/173) adopted, referring to the objectives and commitments of the Compact

AdoptedAdopted
Dec 17, 20259 months ago
WSIS+20 review outcome document

United NationsA/RES/80/173Adopted by the General Assembly at its 68th plenary meeting, the high-level meeting on the overall WSIS review (resolution 80/173)

AdoptedAdopted
Dec 16, 20259 months ago
Danish Data Sharing Act (datadelingsloven)

DenmarkLov nr. 1618 af 16. december 2025 (L 16, 2025-26)Law no. 1618 issued

EnactedEnacted
Dec 10, 20259 months ago
Uruguay AI provisions in the 2022 Budget Accountability Law

UruguayLey 20.212 (arts. 74 and 75)Regulatory Decree 276/025 on articles 74 and 75 published in the Diario Oficial

In forceIn force
Dec 10, 20259 months ago
Uruguay decree on controlled testing environments for data and AI projects

UruguayDecreto 276/025Published in the Diario Oficial

In forceIn force
Nov 28, 202510 months ago
Launching the Genesis Mission

United States (federal)Executive Order 14363Published in the Federal Register, 90 FR 55035

In forceIn forceR (Republican)
Nov 19, 202510 months ago
Data Governance Act

European UnionRegulation (EU) 2022/868Commission proposes, in the Digital Omnibus COM(2025) 837, to repeal the regulation and move its rules into the Data Act

In forceIn force
Nov 14, 202510 months ago
Mexico Federal Law on Protection of Personal Data Held by Private Parties (2025)

MexicoLey Federal de Proteccion de Datos Personales en Posesion deAmended by decree harmonizing laws with the National Code of Civil and Family Procedures (DOF 14-11-2025)

In forceIn force
Nov 14, 202510 months ago
Mexico General Law on Protection of Personal Data Held by Obligated Subjects (2025)

MexicoLey General de Proteccion de Datos Personales en Posesion deAmended by decree published in the Diario Oficial de la Federacion (DOF 14-11-2025)

In forceIn force
Nov 13, 202510 months ago
Digital Personal Data Protection Act, 2023

IndiaAct No. 22 of 2023G.S.R. 843(E) brings definitions, the Data Protection Board provisions (sections 18 to 26) and rule-making powers into force; G.S.R. 844(E) establishes the Data Protection Board of India

In forceIn force
Nov 13, 202510 months ago
Digital Personal Data Protection Rules, 2025

IndiaG.S.R. 846(E)Final rules notified; rules 1, 2 and 17 to 21 (Data Protection Board) come into force on publication

In forceIn force
Nov 11, 202510 months ago
Personal Data Protection Act Amendment

TaiwanPresidential Order Hua-Zong-Yi-Jing-Zi No. 11400114521Amendment promulgated by presidential order; effective date to be set by the Executive Yuan

EnactedEnacted
Nov 11, 202510 months ago
Recommendation on the Ethics of Neurotechnology

United NationsUNESCO Recommendation on the Ethics of NeurotechnologyAdopted by the UNESCO General Conference at its 43rd session in Samarkand, Uzbekistan

AdoptedAdopted
Nov 2, 202510 months ago
Executive Regulations of the Personal Data Protection Law

EgyptMinisterial Decision No. 816 of 2025Entered into force

In forceIn forceUnverified
Nov 1, 202511 months ago
Personal Data Protection Law

EgyptLaw No. 151 of 2020Executive Regulations issued by Ministerial Decision No. 816 of 2025 and published in the Official Gazette

In forceIn forceUnverified
Oct 29, 202511 months ago
DSA Delegated Act on Data Access for Vetted Researchers

European UnionCommission Delegated Regulation (EU) 2025/2050Enters into force (twentieth day after publication, Article 16)

In forceIn force
Oct 8, 202511 months ago
Data Brokers: Data Collection and Deletion

CACaliforniaSB 361Signed by the governor; Chapter 466, Statutes of 2025

In forceIn forceD (Democrat)
Oct 7, 202511 months ago
Unlocking Cures for Pediatric Cancer With Artificial Intelligence

United States (federal)Executive Order 14355Published in the Federal Register, 90 FR 48153

In forceIn forceR (Republican)
Oct 6, 202511 months ago
Cartwright Act: Common Pricing Algorithms

CACaliforniaAB 325Signed by the governor; Chapter 338, Statutes of 2025

In forceIn forceD (Democrat)
Oct 1, 202512 months ago
Montana Consumer Data Privacy Act amendments

MTMontanaSB 297Took effect

In forceIn forceR (Republican)
Oct 1, 202512 months ago
Privacy protections for biometric, genetic and neural data

MTMontanaSB 163Took effect

In forceIn forceR (Republican)
Sep 30, 202512 months ago
Saving TikTok While Protecting National Security

United States (federal)Executive Order 14352Published in the Federal Register, 90 FR 47219

In forceIn forceR (Republican)
Sep 17, 20251 year ago
Strong Borders Act

CanadaBill C-2 (45th Parliament, 1st Session)Latest debate at second reading

IntroducedIntroduced
Sep 5, 20251 year ago
Homebuyers Privacy Protection Act

United States (federal)H.R. 2808Became Public Law 119-36

EnactedEnactedBipartisan
Sep 4, 20251 year ago
EDPS v SRB (pseudonymised data)

European UnionC-413/23 P (ECLI:EU:C:2025:645)Court of Justice (First Chamber) sets aside the General Court judgment and refers the case back

RuledRuled
Sep 1, 20251 year ago
Electronic health records and AI in health care

TXTexasSB 1188Took effect

In forceIn forceR (Republican)
Sep 1, 20251 year ago
Genetic information security

TXTexasHB 130Took effect

In forceIn forceR (Republican)
Sep 1, 20251 year ago
Government use of artificial intelligence

TXTexasSB 1964Took effect

In forceIn forceR (Republican)
Sep 1, 20251 year ago
Data broker notice requirements

TXTexasSB 1343Took effect

In forceIn forceBipartisan
Sep 1, 20251 year ago
Data broker regulation amendments

TXTexasSB 2121Took effect

In forceIn forceBipartisan
Aug 23, 20251 year ago
ANPD International Data Transfer Regulation

BrazilResolucao CD/ANPD No. 19/2024Twelve-month deadline for agents using contractual clauses to incorporate the ANPD standard contractual clauses ends

In forceIn force
Aug 14, 20251 year ago
Israel Privacy Protection Law Amendment No. 13

IsraelPrivacy Protection Law (Amendment No. 13), 5784-2024Law enters into force, one year after publication

In forceIn force
Jul 31, 20251 year ago
Minnesota Consumer Data Privacy Act (2024 commerce omnibus)

MNMinnesotaHF 4757Consumer Data Privacy Act took effect (postsecondary institutions must comply by 2029-07-31)

In forceIn forceD (Democrat)
Jul 24, 20251 year ago
Template for the public summary of training content of general-purpose AI models

European UnionCommission publishes the explanatory notice and template

AdoptedAdopted
Jul 16, 20251 year ago
Mexico constitutional reform on organic simplification (INAI and IFT dissolution)

MexicoDecree reforming the Constitution on organic simplification New Telecommunications and Broadcasting Law published, providing that the telecom-related constitutional changes take effect once the Comision Reguladora de Telecomunicaciones plenary is constituted

In forceIn force
Jul 15, 20251 year ago
Measures for the Administration of National Network Identity Authentication Public Services

ChinaMPS Order No. 173Measures enter into force

In forceIn force
Jul 7, 20251 year ago
Revised Federal Act on Data Protection (FADP)

SwitzerlandSR 235.1Last amended

In forceIn force
Jul 1, 20251 year ago
Law on Data

VietnamLaw No. 60/2024/QH15Law takes effect

In forceIn force
Jun 24, 20251 year ago
An Act Concerning Broadband Internet, Gaming, Social Media, Online Services and Consumer Contracts

CTConnecticutSB 1295Signed by the governor (Public Act 25-113)

In forceIn force
Jun 19, 20251 year ago
Ban on sale of precise geolocation data and minors' data

OROregonHB 2008Chapter 251, 2025 Laws

In forceIn forceD (Democrat)
Jun 12, 20251 year ago
Personal Data Privacy Act

MIMichiganSB 359Reported favorably without amendment and referred to Committee of the Whole

In committeeIn committeeD (Democrat)
Jun 11, 20251 year ago
Privacy act coverage of motor vehicle manufacturers

OROregonHB 3875Chapter 163, 2025 Laws, effective on the 91st day after adjournment sine die

In forceIn force
Jun 10, 20251 year ago
Privacy and Other Legislation Amendment Act 2024

AustraliaAct No. 128, 2024Schedule 2 statutory tort for serious invasions of privacy commences (6 months after Royal Assent unless proclaimed earlier)

In forceIn force
Jun 3, 20251 year ago
Relating to Data Sharing (Data Sharing and Governance Working Group)

HIHawaiiSB 742Act 154

In forceIn forceD (Democrat)
May 29, 20251 year ago
No Pricing Coordination Between Landlords

COColoradoHB 25-1004Vetoed by the governor

VetoedVetoedD (Democrat)
May 14, 20251 year ago
Draft Global AI Hub Law

Saudi ArabiaPublic consultation on Istitlaa closed

ProposedProposedUnverified
May 9, 20251 year ago
Algorithmic Pricing Disclosure (FY2026 budget)

NYNew YorkS 3008-C, Part XSigned by the governor as part of the FY2026 budget (Chapter 58 of 2025)

In forceIn force
May 9, 20251 year ago
Disapproval of the CFPB digital payment apps supervision rule

United States (federal)S.J.Res. 28Became Public Law 119-11

EnactedEnactedR (Republican)