Legislationsby Glyph
SwitzerlandSwitzerlandSR 235.1
Revised Federal Act on Data Protection (FADP)
Totally revised Swiss data protection act governing processing of personal data by private persons and federal bodies, aligned more closely with European standards.
Data
202 on file · 147 became law · 33 still moving · 5 moved in 30 days
Switzerland
VietnamVietnamLaw No. 60/2024/QH15
Law on Data
Establishes a legal framework for the generation, management, processing, sharing and protection of digital data in Viet Nam.
ConnecticutConnecticutSB 1295
An Act Concerning Broadband Internet, Gaming, Social Media, Online Services and Consumer Contracts
Omnibus act that amends the Connecticut Data Privacy Act and adds rules for social media platforms, online services, gaming and consumer contracts.
OregonOregonHB 2008
Ban on sale of precise geolocation data and minors' data
Amends the Oregon Consumer Privacy Act to bar controllers from selling precise geolocation data and the personal data of consumers under 16.
MichiganMichiganSB 359
Personal Data Privacy Act
Would create a comprehensive Personal Data Privacy Act governing how businesses collect and process consumer personal data.
United States (federal)United States (federal)H.R. 3916
My Body, My Data Act of 2025
A House bill in Congress, now in committee. Latest step: Referred to the House Committee on Energy and Commerce.
OregonOregonHB 3875
Privacy act coverage of motor vehicle manufacturers
Extends the Oregon Consumer Privacy Act to motor vehicle manufacturers and their affiliates that control or process personal data obtained from a consumer's use of a vehicle, regardless of volume thresholds.
AustraliaAustraliaAct No. 128, 2024
Privacy and Other Legislation Amendment Act 2024
Amends the Privacy Act 1988 to require a Children's Online Privacy Code, add transparency duties for automated decisions, create a statutory tort for serious invasions of privacy and a criminal offence for doxxing.
HawaiiHawaiiSB 742
Relating to Data Sharing (Data Sharing and Governance Working Group)
Establishes a Data Sharing and Governance Working Group in the Office of Enterprise Technology Services and requires a report to the Legislature.
ColoradoColoradoHB 25-1004
No Pricing Coordination Between Landlords
Would have barred landlords from using algorithmic software that coordinates rental pricing across properties in the same market.
Saudi ArabiaSaudi Arabiaunverified
Draft Global AI Hub Law
Draft law that would let foreign governments and companies host data and AI services in Saudi data centers under their own laws through private, extended and virtual hub models, subject to Saudi oversight.
New YorkNew YorkS 3008-C, Part X
Algorithmic Pricing Disclosure (FY2026 budget)
Requires businesses to disclose when a price for goods or services was set by an algorithm using the consumer's personal data.
United States (federal)United States (federal)S.J.Res. 28
Disapproval of the CFPB digital payment apps supervision rule
Nullifies the CFPB rule that would have placed large digital consumer payment apps under federal supervision.
ChinaChinaCAC Order No. 18
Measures for Personal Information Protection Compliance Audits
Requires personal information handlers to conduct regular compliance audits, with those processing data on more than 10 million people auditing at least every two years, and lets regulators order audits when risks arise.
AlaskaAlaskaSB 2
AI, Deepfakes, Cybersecurity, Data Transfers
Would have required disclosure of election-related deepfakes, regulated state agency use of artificial intelligence, and governed data transfers between agencies.
North CarolinaNorth CarolinaHB 462
Personal Data Privacy/Social Media Safety
Would create a comprehensive consumer data privacy law with added social media safety protections for minors.
AlabamaAlabamaHB 283
Data Privacy: Consumer Data Processing and Rights (2025)
Would have created consumer data privacy rights and regulated how businesses process personal data.
ArkansasArkansasHB 1717
Arkansas Children and Teens' Online Privacy Protection Act
Restricts collection and use of personal information of children and teens by online services, including limits on targeted advertising, and gives parents and teens data rights.
MississippiMississippiHB 1491
Cloud Center of Excellence
Establishes a Cloud Center of Excellence in the Department of Information Technology Services to manage phased cloud adoption, security and governance across state agencies.
United States (federal)United States (federal)S. 1418
Improving Law Enforcement Officer Safety and Wellness Through Data Act
A Senate bill in Congress, now in committee. Latest step: Read twice and referred to the Committee on the Judiciary.
United NationsUnited NationsA/HRC/RES/58/6
Neurotechnology and human rights
Asks the Human Rights Council Advisory Committee to draft recommended guidelines on applying the existing human rights framework to the design, development and use of neurotechnologies, for presentation at the Council's 64th session.
KenyaKenya National Artificial Intelligence Strategy 2025-2030
Sets Kenya's national AI plan built on three pillars: AI digital infrastructure, data and AI governance, and AI research, innovation and commercialisation.
UtahUtahHB 418
Digital Choice Act (Data Sharing Amendments)
Requires social media platforms to let Utah users export their data and to support interoperability so users can move their content and connections to other services.
North CarolinaNorth CarolinaSB 757
Consumer Privacy Act
Would create a comprehensive consumer data privacy law for North Carolina.
European UnionEuropean UnionRegulation (EU) 2025/327
European Health Data Space Regulation
Gives people control over and cross-border access to their electronic health data and sets a framework for the secondary use of health data for research, innovation and policy making.
NigeriaNigeriaNDPC/NDP ACT-GAID/01/2025
General Application and Implementation Directive (GAID) 2025
Sets detailed compliance rules under the Nigeria Data Protection Act 2023, covering registration of major data controllers, compliance audit returns, data protection officers, impact assessments and fees.
KentuckyKentuckyHB 473
Consumer data privacy amendments
Amends the Kentucky Consumer Data Protection Act to exempt certain HIPAA-covered health care information and limited data sets and to clarify data protection assessments for profiling.
United States (federal)United States (federal)H.R. 1877
Protecting Americans’ Social Security Data Act
A House bill in Congress, now in committee. Latest step: Referred to the House Committee on Ways and Means.
United States (federal)United States (federal)No. 24-656
TikTok Inc. v. Garland
The Supreme Court upheld the Protecting Americans from Foreign Adversary Controlled Applications Act, rejecting TikTok's First Amendment challenge to the divest-or-ban law.
New JerseyNew JerseyS332
New Jersey Data Privacy Act
Creates a comprehensive consumer data privacy law requiring notice of data collection and giving residents rights to access, correct, delete and opt out of the sale, targeted advertising and profiling uses of their personal data.
CanadaCanadaBill C-27 (44th Parliament, 1st Session)
Digital Charter Implementation Act, 2022 (including AIDA)
Government bill that would have enacted the Consumer Privacy Protection Act, the Personal Information and Data Protection Tribunal Act and the Artificial Intelligence and Data Act; it died when Parliament was prorogued.
NebraskaNebraskaLB 1074
Nebraska Data Privacy Act (in banking and finance omnibus)
Omnibus banking bill that adopted the Nebraska Data Privacy Act, a comprehensive consumer privacy law with rights to access, delete and opt out of sale, targeted advertising and profiling.
ChinaChinaState Council Order No. 790
Network Data Security Management Regulations
Implements the Cybersecurity Law, Data Security Law and Personal Information Protection Law with detailed rules on personal information handling, important data protection, cross-border data transfers and obligations of large online platforms.
New HampshireNew HampshireSB 255
New Hampshire consumer data privacy law
Creates a comprehensive consumer data privacy law giving residents rights to access, correct, delete and opt out of the sale, targeted advertising and profiling uses of their personal data.
CameroonCameroonLaw No. 2024/017 of 23 December 2024
Law relating to personal data protection in Cameroon
Sets Cameroon's first general framework for the protection of personal data.
United NationsUnited NationsA/RES/79/175
The right to privacy in the digital age (2024)
Calls on States to respect and protect the right to privacy in the digital age, including in the context of surveillance, data collection and the design, use and governance of artificial intelligence.
ChileChileLey 21.719
Chile Personal Data Protection Law (Ley 21.719)
Overhauls Chile's personal data protection regime by amending Law 19.628, adding data subject rights such as portability, and creating an independent Personal Data Protection Agency.
European UnionEuropean UnionDirective (EU) 2024/2831
Platform Work Directive
Creates a legal presumption of employment for people working through digital labour platforms and sets the first EU rules on algorithmic management, including human oversight of automated decisions and limits on processing workers' personal data.
BotswanaData Protection Act, 2024
Botswana's updated data protection law governing the processing of personal data and the rights of data subjects.
IndonesiaPersonal Data Protection Law (UU PDP)
Sets rules on personal data types, data subject rights, processing, controller and processor obligations, cross-border transfers, administrative sanctions and a supervisory institution in Indonesia.
MontanaMontanaSB 384
Montana Consumer Data Privacy Act
Creates a comprehensive consumer data privacy law giving Montana residents rights to access, correct, delete and opt out of the sale and targeted advertising use of their personal data.
CaliforniaCaliforniaAB 2013
Generative AI Training Data Transparency
Requires developers of generative AI systems released since January 1, 2022 to post documentation on their websites summarizing the data used to train them, by January 1, 2026.
CanadaCanadaS.Q. 2021, c. 25
Quebec Law 25 (Act to modernize legislative provisions as regards the protection of personal information)
Quebec law modernizing public and private sector privacy rules in phases, adding privacy governance duties, privacy impact assessments, consent and transparency requirements and a data portability right.
Saudi ArabiaPersonal Data Protection Law (PDPL)
Saudi Arabia's comprehensive personal data protection law, supervised by SDAIA, governing processing and cross-border transfer of personal data with fines of up to SAR 5 million.
ZimbabweCyber and Data Protection Act, 2021
Sets Zimbabwe's rules on personal data protection and cybercrime, with 2024 regulations on licensing data controllers and appointing data protection officers.
Continental Artificial Intelligence Strategy
Sets a continental framework for African Union member states to develop and govern artificial intelligence in support of Agenda 2063 and the Sustainable Development Goals.
EthiopiaEthiopiaProclamation No. 1321/2024
Personal Data Protection Proclamation
Ethiopia's first comprehensive data protection law, setting rules for collecting and processing personal data, data subject rights, and a supervisory authority.
African Unionunverified
Malabo Convention (AU Convention on Cyber Security and Personal Data Protection)
Sets common rules for African Union member states on electronic transactions, personal data protection, cybersecurity and cybercrime.
TexasTexasHB 4
Texas Data Privacy and Security Act (TDPSA)
Comprehensive consumer data privacy law giving Texans rights to access, correct, delete and opt out of the sale, targeted advertising and profiling uses of their personal data, enforced by the attorney general.
MinnesotaMinnesotaSF 2744
Digital Fair Repair Act and Genetic Information Privacy Act (2023 commerce omnibus)
Commerce omnibus that enacted the Digital Fair Repair Act requiring manufacturers to provide parts, tools and documentation for digital electronic equipment, and the Genetic Information Privacy Act governing direct-to-consumer genetic testing data.