Data

Being:

Americas

Brazil:

General Personal Data Protection Law (LGPD). This law regulates the processing of personal data and is enforced by the National Data Protection Authority (ANPD).

Canada:

Personal Information Protection and Electronic Documents Act (PIPEDA). A federal law that governs the collection, use, and disclosure of personal information in commercial activities. Certain provinces also maintain separate privacy legislation.

United States:

There is no single federal data privacy law; multiple federal and state laws apply.

Federal laws: Industry-specific regulations such as the Health Insurance Portability and Accountability Act (HIPAA) for health data and the Gramm-Leach-Bliley Act (GLBA) for financial data are in place.

State laws: The California Consumer Privacy Act (CCPA), amended by the California Privacy Rights Act (CPRA), grants consumers certain rights regarding their personal data. Similar laws have been enacted in Virginia, Colorado, Connecticut, and other states.

Asia and Oceania

Australia:

Privacy Act 1988. This act regulates the handling of personal information by government agencies and many private sector organizations, incorporating the Australian Privacy Principles (APPs).

China:

Personal Information Protection Law (PIPL). Introduced in 2021, this law regulates the processing of Chinese citizens’ personal information by domestic and foreign organizations.

India:

Digital Personal Data Protection Act (DPDPA) 2023. This law updates India’s approach to data privacy and replaces earlier regulations.

Japan:

Act on the Protection of Personal Information (APPI). APPI sets requirements for how businesses handle personal data, including standards for international data transfers.

Africa

Mauritius:

Data Protection Act 2017 (DPA). This law aligns with the GDPR and is intended to support Mauritius’s role in international business.

Kenya:

Data Protection Act (DPA). Inspired by the GDPR, this law applies to organizations processing the personal data of individuals located in Kenya.

South African Acts related to POPIA:

In South Africa, POPIA operates alongside several other acts to ensure comprehensive compliance.

• Promotion of Access to Information Act (PAIA): Grants the right to access information and interacts with POPIA, which focuses on the protection of personal information.
• Electronic Communications and Transactions Act (ECTA): Addresses electronic transactions, consumer protection, data messages, and cybercrime.
• National Credit Act (NCA): Regulates how credit providers process consumers’ personal and credit information.
• Consumer Protection Act (CPA): Sets requirements for direct marketing and mandates consumer consent for the use of their information in such activities.