Skip to content

Data

Data sharing, data brokers, data localisation, open data and cross-border transfers.

187

On file

144

Became law

23

Still moving

8

Moved in 30 days

Passed both 4Passed one chamber 5In committee 7Introduced 3Proposed 4Enacted 15In force 111Adopted 18Ruled 3Vetoed 4Failed 13

187 items, page 3 of 4, newest action first

MovedMeasure
May 1, 20251 year ago
Measures for Personal Information Protection Compliance Audits

ChinaCAC Order No. 18Measures enter into force

In forceIn force
Apr 29, 20251 year ago
AI, Deepfakes, Cybersecurity, Data Transfers

AKAlaskaSB 2Heard in Senate State Affairs; not passed before the Legislature adjourned in 2026

FailedFailedR (Republican)
Apr 29, 20251 year ago
Personal Data Privacy/Social Media Safety

NCNorth CarolinaHB 462Re-referred to House Committee on Commerce and Economic Development

In committeeIn committeeBipartisan
Apr 24, 20251 year ago
Data Privacy: Consumer Data Processing and Rights (2025)

ALAlabamaHB 283Referred to Senate Fiscal Responsibility and Economic Development; died at adjournment

FailedFailedR (Republican)
Apr 21, 20251 year ago
Arkansas Children and Teens' Online Privacy Protection Act

ARArkansasHB 1717Became Act 952

In forceIn forceR (Republican)
Apr 17, 20251 year ago
Cloud Center of Excellence

MSMississippiHB 1491Approved by the governor (Chapter 500)

In forceIn forceR (Republican)
Apr 2, 20251 year ago
Neurotechnology and human rights

United NationsA/HRC/RES/58/6Adopted by the Human Rights Council without a vote at its 55th meeting (resolution 58/6)

AdoptedAdopted
Mar 27, 20251 year ago
Kenya National Artificial Intelligence Strategy 2025-2030

KenyaLaunched at the KICC, Nairobi, by Cabinet Secretary William Kabogo Gitau

AdoptedAdopted
Mar 27, 20251 year ago
Digital Choice Act (Data Sharing Amendments)

UTUtahHB 418Signed by the governor

In forceIn forceR (Republican)
Mar 26, 20251 year ago
Consumer Privacy Act

NCNorth CarolinaSB 757Referred to Senate Committee on Rules and Operations

In committeeIn committeeR (Republican)
Mar 25, 20251 year ago
European Health Data Space Regulation

European UnionRegulation (EU) 2025/327Enters into force (EUR-Lex date; the Commission page gives 26 March 2025)

In forceIn force
Mar 20, 20251 year ago
General Application and Implementation Directive (GAID) 2025

NigeriaNDPC/NDP ACT-GAID/01/2025Issued by the National Commissioner of the Nigeria Data Protection Commission

AdoptedAdopted
Mar 15, 20251 year ago
Consumer data privacy amendments

KYKentuckyHB 473Signed by the governor (Acts Ch. 13)

In forceIn forceR (Republican)
Jan 17, 20251 year ago
TikTok Inc. v. Garland

United States (federal)No. 24-656Opinion issued

RuledRuled
Jan 15, 20251 year ago
New Jersey Data Privacy Act

NJNew JerseyS332Took effect

In forceIn forceD (Democrat)
Jan 6, 20251 year ago
Digital Charter Implementation Act, 2022 (including AIDA)

CanadaBill C-27 (44th Parliament, 1st Session)Parliament prorogued; bill dies at committee stage

FailedFailed
Jan 1, 20251 year ago
Nebraska Data Privacy Act (in banking and finance omnibus)

NENebraskaLB 1074Data Privacy Act took effect

In forceIn forceR (Republican)
Jan 1, 20251 year ago
Network Data Security Management Regulations

ChinaState Council Order No. 790Regulations enter into force

In forceIn force
Jan 1, 20251 year ago
New Hampshire consumer data privacy law

NHNew HampshireSB 255Took effect

In forceIn forceR (Republican)
Dec 23, 20241 year ago
Law relating to personal data protection in Cameroon

CameroonLaw No. 2024/017 of 23 December 2024Promulgated as Law No. 2024/017 of 23 December 2024

EnactedEnacted
Dec 17, 20241 year ago
The right to privacy in the digital age (2024)

United NationsA/RES/79/175Adopted by the General Assembly at its 53rd plenary meeting on the report of the Third Committee (resolution 79/175)

AdoptedAdopted
Dec 13, 20241 year ago
Chile Personal Data Protection Law (Ley 21.719)

ChileLey 21.719Published in the Diario Oficial

EnactedEnacted
Dec 1, 20241 year ago
Platform Work Directive

European UnionDirective (EU) 2024/2831Enters into force

In forceIn force
Oct 29, 20241 year ago
Data Protection Act, 2024

BotswanaAct No. 18 of 2024Came into effect

In forceIn forceUnverified
Oct 17, 20241 year ago
Personal Data Protection Law (UU PDP)

IndonesiaLaw No. 27 of 2022Two-year transition period ends and the law applies in full

In forceIn forceUnverified
Oct 1, 20241 year ago
Montana Consumer Data Privacy Act

MTMontanaSB 384Took effect

In forceIn forceR (Republican)
Sep 28, 20241 year ago
Generative AI Training Data Transparency

CACaliforniaAB 2013Signed by the governor; Chapter 817, Statutes of 2024

In forceIn forceD (Democrat)
Sep 22, 20242 years ago
Sep 14, 20242 years ago
Personal Data Protection Law (PDPL)

Saudi ArabiaRoyal Decree No. M/19 of 9/2/1443H, amended by Royal Decree One-year compliance grace period ended

In forceIn forceUnverified
Sep 13, 20242 years ago
Cyber and Data Protection Act, 2021

ZimbabweAct No. 5 of 2021Cyber and Data Protection (Licensing of Data Controllers and Appointment of Data Protection Officers) Regulations published as SI 155 of 2024

In forceIn forceUnverified
Aug 9, 20242 years ago
Continental Artificial Intelligence Strategy

AUAfrican UnionStrategy document published by the African Union

AdoptedAdopted
Jul 24, 20242 years ago
Personal Data Protection Proclamation

EthiopiaProclamation No. 1321/2024Proclamation No. 1321/2024 published (Ministry of Justice law database date)

In forceIn force
Jul 8, 20242 years ago
Malabo Convention (AU Convention on Cyber Security and Personal Data Protection)

AUAfrican UnionAU status list records 21 signatures and 16 ratifications deposited

In forceIn forceUnverified
Jul 1, 20242 years ago
Texas Data Privacy and Security Act (TDPSA)

TXTexasHB 4Took effect

In forceIn forceR (Republican)
Jul 1, 20242 years ago
Digital Fair Repair Act and Genetic Information Privacy Act (2023 commerce omnibus)

MNMinnesotaSF 2744Digital Fair Repair Act took effect

In forceIn forceD (Democrat)
Jun 29, 20242 years ago
Rhode Island Data Transparency and Privacy Protection Act

RIRhode IslandH 7787Effective without Governor's signature; Chapter 453

In forceIn forceD (Democrat)
Jun 28, 20242 years ago
Rhode Island Data Transparency and Privacy Protection Act (Senate bill)

RIRhode IslandS 2500Effective without Governor's signature; Chapter 430

In forceIn forceD (Democrat)
Jun 25, 20242 years ago
American Privacy Rights Act of 2024

United States (federal)H.R. 8818Referred to the House Committee on Energy and Commerce.

IntroducedIntroducedBipartisan
Jun 20, 20242 years ago
New York Child Data Protection Act

NYNew YorkS 7695-B / A 8149-ASigned by the governor (Chapter 121 of 2024)

In forceIn forceD (Democrat)
Jun 17, 20242 years ago
Vermont Data Privacy Act and age-appropriate design code (2024)

VTVermontH.121Governor's veto sustained in the Senate 14-15

VetoedVetoedR (Republican)
May 31, 20242 years ago
Data Protection Act, 2024

MalawiData Protection Act, 2024Commencement notice published (Government Notice No. 40 of 2024)

In forceIn forceUnverified
May 20, 20242 years ago
European Digital Identity Framework (eIDAS 2)

European UnionRegulation (EU) 2024/1183Enters into force

In forceIn force
May 9, 20242 years ago
Maryland Online Data Privacy Act of 2024

MDMarylandSB 541Approved by the governor (Chapter 455)

In forceIn forceD (Democrat)
Apr 24, 20242 years ago
Apr 18, 20242 years ago
Fourth Amendment Is Not For Sale Act

United States (federal)H.R. 4639Received in the Senate.

Passed one chamberPassed one chamberBipartisan
Apr 17, 20242 years ago
Data Privacy and Protection Act

MEMaineLD 1977Senate insisted on Ought Not to Pass report; placed in legislative files (dead)

FailedFailedD (Democrat)
Apr 7, 20242 years ago
American Privacy Rights Act discussion draft

United States (federal)Discussion draft released by Sen. Maria Cantwell and Rep. Cathy McMorris Rodgers

ProposedProposedBipartisan
Apr 4, 20242 years ago
Kentucky Consumer Data Protection Act

KYKentuckyHB 15Signed by the governor (Acts Ch. 72)

In forceIn forceR (Republican)
Mar 31, 20242 years ago
Consumer health data privacy

NVNevadaSB 370Took effect

In forceIn forceD (Democrat)
Mar 22, 20242 years ago
Provisions on Promoting and Regulating Cross-Border Data Flows

ChinaCAC Order No. 16Promulgated as CAC Order No. 16 and enters into force on publication

In forceIn force