{"items":[{"id":"us-eo-14365-ai-preemption","shortName":"AI state-law preemption EO","jurisdiction":"us","jurisdictionName":"United States","region":"us-federal","status":"in_force","url":"https://regulations.fru.dev/regulations/us-eo-14365-ai-preemption","name":"Executive Order 14365: Ensuring a National Policy Framework for Artificial Intelligence","topics":["ai"],"citation":"Executive Order 14365, 90 FR 58499","enactedDate":"2025-12-11","effectiveDate":"2025-12-11","sourceUrl":"https://www.federalregister.gov/documents/2025/12/16/2025-23092/ensuring-a-national-policy-framework-for-artificial-intelligence","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-al-apdpa","shortName":"Alabama Personal Data Protection Act (APDPA)","jurisdiction":"us-al","jurisdictionName":"Alabama","region":"us-states","status":"enacted","url":"https://regulations.fru.dev/regulations/us-al-apdpa","name":"Alabama Personal Data Protection Act (HB 351, 2026 Regular Session)","topics":["privacy"],"citation":"HB 351 (2026 RS), Act 2026-552","enactedDate":"2026-04-17","effectiveDate":"2027-05-01","sourceUrl":"https://alison.legislature.state.al.us/files/pdf/SearchableInstruments/2026RS/HB351-enr.pdf","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-05-01","title":"APDPA takes effect"}},{"id":"ca-ab-popa","shortName":"Alberta POPA","jurisdiction":"ca-ab","jurisdictionName":"Alberta, Canada","region":"americas","status":"in_force","url":"https://regulations.fru.dev/regulations/ca-ab-popa","name":"Protection of Privacy Act","topics":["privacy","breach-notification","ai"],"citation":"SA 2024, c P-28.5","enactedDate":"","effectiveDate":"2025-06-11","sourceUrl":"https://kings-printer.alberta.ca/1266.cfm?page=p28p5.cfm&leg_type=Acts&isbncln=9780779861309&display=html","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"ar-pdpl","shortName":"Argentina Law 25.326","jurisdiction":"ar","jurisdictionName":"Argentina","region":"americas","status":"in_force","url":"https://regulations.fru.dev/regulations/ar-pdpl","name":"Ley 25.326 de Protección de los Datos Personales","topics":["privacy","data-residency"],"citation":"Ley 25.326","enactedDate":"2000-10-04","effectiveDate":"","sourceUrl":"https://servicios.infoleg.gob.ar/infolegInternet/anexos/60000-64999/64790/norma.htm","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-ar-cttoppa","shortName":"Arkansas COPPA 2.0","jurisdiction":"us-ar","jurisdictionName":"Arkansas","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ar-cttoppa","name":"Arkansas Children and Teens' Online Privacy Protection Act (Act 952 of 2025, HB 1717)","topics":["children","privacy"],"citation":"2025 Ark. Acts 952; Ark. Code section 4-88-1501 et seq.","enactedDate":"2025-04-21","effectiveDate":"2026-07-01","sourceUrl":"https://arkleg.state.ar.us/Bills/Detail?id=HB1717&ddBienniumSession=2025%2F2025R","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"au-cyber-security-act","shortName":"Australia Cyber Security Act (ransomware reporting)","jurisdiction":"au","jurisdictionName":"Australia","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/au-cyber-security-act","name":"Cyber Security Act 2024 (Cth) and Cyber Security (Ransomware Payment Reporting) Rules 2025","topics":["cybersecurity","breach-notification"],"citation":"Act No. 98, 2024","enactedDate":"2024-11-29","effectiveDate":"2024-11-30","sourceUrl":"https://www.legislation.gov.au/C2024A00098/asmade","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"au-online-safety-act","shortName":"Australia Online Safety Act","jurisdiction":"au","jurisdictionName":"Australia","region":"apac","status":"amended","url":"https://regulations.fru.dev/regulations/au-online-safety-act","name":"Online Safety Act 2021","topics":["online-safety","children"],"citation":"Act No. 76, 2021","enactedDate":"2021-07-23","effectiveDate":"2022-01-23","sourceUrl":"https://www.legislation.gov.au/C2021A00076/asmade","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"au-privacy-act","shortName":"Australia Privacy Act","jurisdiction":"au","jurisdictionName":"Australia","region":"apac","status":"amended","url":"https://regulations.fru.dev/regulations/au-privacy-act","name":"Privacy Act 1988 (Cth), as amended by the Privacy and Other Legislation Amendment Act 2024","topics":["privacy","children","breach-notification","ai"],"citation":"Privacy Act 1988 (Cth); Privacy and Other Legislation Amendment Act 2024 (No. 128, 2024)","enactedDate":"2024-12-10","effectiveDate":"2024-12-11","sourceUrl":"https://www.legislation.gov.au/C2024A00128/asmade","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2026-12-10","title":"Children's Online Privacy Code must be registered"}},{"id":"au-soci-act","shortName":"Australia SOCI Act","jurisdiction":"au","jurisdictionName":"Australia","region":"apac","status":"amended","url":"https://regulations.fru.dev/regulations/au-soci-act","name":"Security of Critical Infrastructure Act 2018","topics":["cybersecurity","breach-notification"],"citation":"Act No. 29, 2018; amended by Acts of 2021, 2022 and 2024","enactedDate":"2018-04-11","effectiveDate":"2018-07-11","sourceUrl":"https://www.legislation.gov.au/C2018A00029/asmade","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"au-social-media-min-age","shortName":"Australia Social Media Minimum Age","jurisdiction":"au","jurisdictionName":"Australia","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/au-social-media-min-age","name":"Online Safety Amendment (Social Media Minimum Age) Act 2024","topics":["children","online-safety"],"citation":"Act No. 127, 2024 (amending the Online Safety Act 2021)","enactedDate":"2024-12-10","effectiveDate":"2025-12-10","sourceUrl":"https://www.legislation.gov.au/C2024A00127/asmade","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"bh-pdpl","shortName":"Bahrain PDPL","jurisdiction":"bh","jurisdictionName":"Bahrain","region":"mea","status":"in_force","url":"https://regulations.fru.dev/regulations/bh-pdpl","name":"Law No. 30 of 2018 on the Protection of Personal Data","topics":["privacy"],"citation":"Law No. (30) of 2018","enactedDate":"2018-07-12","effectiveDate":"2019-08-01","sourceUrl":"https://www.lloc.gov.bh/Legislation/HTM/K3018","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"br-ai-bill","shortName":"Brazil AI Bill (PL 2338/2023)","jurisdiction":"br","jurisdictionName":"Brazil","region":"americas","status":"proposed","url":"https://regulations.fru.dev/regulations/br-ai-bill","name":"Projeto de Lei nº 2338/2023 (Brazilian AI Legal Framework)","topics":["ai"],"citation":"PL 2338/2023","enactedDate":"","effectiveDate":"","sourceUrl":"https://www25.senado.leg.br/web/atividade/materias/-/materia/157233","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"br-eca-digital","shortName":"Brazil ECA Digital","jurisdiction":"br","jurisdictionName":"Brazil","region":"americas","status":"in_force","url":"https://regulations.fru.dev/regulations/br-eca-digital","name":"Estatuto Digital da Criança e do Adolescente (Law No. 15.211/2025)","topics":["children","online-safety","privacy"],"citation":"Lei nº 15.211/2025","enactedDate":"2025-09-17","effectiveDate":"2026-03-17","sourceUrl":"https://www.planalto.gov.br/ccivil_03/_ato2023-2026/2025/lei/L15211.htm","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"br-lgpd","shortName":"Brazil LGPD","jurisdiction":"br","jurisdictionName":"Brazil","region":"americas","status":"in_force","url":"https://regulations.fru.dev/regulations/br-lgpd","name":"Lei Geral de Proteção de Dados Pessoais (Law No. 13.709/2018)","topics":["privacy","breach-notification","data-residency"],"citation":"Lei nº 13.709, de 14 de agosto de 2018","enactedDate":"2018-08-14","effectiveDate":"2020-09-18","sourceUrl":"https://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/l13709.htm","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-ca-ab2013","shortName":"California AB 2013 (AI training data transparency)","jurisdiction":"us-ca","jurisdictionName":"California","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ca-ab2013","name":"California AB 2013, Generative Artificial Intelligence: Training Data Transparency (Stats. 2024, ch. 817)","topics":["ai","privacy"],"citation":"AB 2013 (2024), Stats. 2024, ch. 817; Civ. Code 3110-3111","enactedDate":"2024-09-28","effectiveDate":"2026-01-01","sourceUrl":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240AB2013","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-ca-ads-regs","shortName":"California ADS employment regulations","jurisdiction":"us-ca","jurisdictionName":"California","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ca-ads-regs","name":"Civil Rights Council Regulations on Automated-Decision Systems in Employment (FEHA)","topics":["ai"],"citation":"Cal. Code Regs., tit. 2, section 11008 et seq. (amended)","enactedDate":"2025-06-27","effectiveDate":"2025-10-01","sourceUrl":"https://calcivilrights.ca.gov/2025/06/30/civil-rights-council-secures-approval-for-regulations-to-protect-against-employment-discrimination-related-to-artificial-intelligence/","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-ca-ab1405","shortName":"California AI Auditor Registry","jurisdiction":"us-ca","jurisdictionName":"California","region":"us-states","status":"enacted","url":"https://regulations.fru.dev/regulations/us-ca-ab1405","name":"Artificial Intelligence: Auditors: Registration (AB 1405)","topics":["ai"],"citation":"Stats. 2026, ch. 178; Cal. Gov. Code section 11549.8 et seq.","enactedDate":"2026-09-09","effectiveDate":"2027-01-01","sourceUrl":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260AB1405","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2027-01-01","title":"Act takes effect"}},{"id":"us-ca-ab316","shortName":"California AI autonomous-harm defense ban","jurisdiction":"us-ca","jurisdictionName":"California","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ca-ab316","name":"Artificial Intelligence: Defenses (AB 316)","topics":["ai"],"citation":"Stats. 2025, ch. 672; Cal. Civ. Code section 1714.46","enactedDate":"2025-10-13","effectiveDate":"2026-01-01","sourceUrl":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260AB316","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-ca-sb942","shortName":"California AI Transparency Act (SB 942)","jurisdiction":"us-ca","jurisdictionName":"California","region":"us-states","status":"amended","url":"https://regulations.fru.dev/regulations/us-ca-sb942","name":"California AI Transparency Act (SB 942, Stats. 2024, ch. 291), as amended by AB 853 (Stats. 2025, ch. 674)","topics":["ai"],"citation":"Bus. & Prof. Code 22757 et seq.; SB 942 (2024) ch. 291; AB 853 (2025) ch. 674","enactedDate":"2024-09-19","effectiveDate":"2026-08-02","sourceUrl":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260AB853","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-01-01","title":"Large online platform and hosting platform duties"}},{"id":"us-ca-delete-act","shortName":"California Delete Act / DROP","jurisdiction":"us-ca","jurisdictionName":"California","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ca-delete-act","name":"California Delete Act (SB 362, 2023), Cal. Civ. Code 1798.99.80 et seq., and DROP regulations","topics":["privacy","data-access"],"citation":"SB 362 (Stats. 2023, ch. 709); Cal. Civ. Code 1798.99.80-1798.99.89","enactedDate":"2023-10-10","effectiveDate":"2024-01-01","sourceUrl":"https://www.cppa.ca.gov/data_brokers/","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-01-31","title":"Annual data broker registration deadline"}},{"id":"us-ca-ab1043","shortName":"California Digital Age Assurance Act","jurisdiction":"us-ca","jurisdictionName":"California","region":"us-states","status":"enacted","url":"https://regulations.fru.dev/regulations/us-ca-ab1043","name":"Digital Age Assurance Act (AB 1043)","topics":["children","privacy","online-safety"],"citation":"Stats. 2025, ch. 675; Cal. Civ. Code section 1798.500 et seq.","enactedDate":"2025-10-13","effectiveDate":"2027-01-01","sourceUrl":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260AB1043","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2027-01-01","title":"Age signal duties begin"}},{"id":"us-ca-sb243","shortName":"California SB 243 (companion chatbots)","jurisdiction":"us-ca","jurisdictionName":"California","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ca-sb243","name":"California SB 243, Companion Chatbots (Stats. 2025, ch. 677)","topics":["ai","children","online-safety"],"citation":"SB 243 (2025), Stats. 2025, ch. 677","enactedDate":"2025-10-13","effectiveDate":"2026-01-01","sourceUrl":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB243","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-07-01","title":"First annual report to Office of Suicide Prevention"}},{"id":"us-ca-sb53","shortName":"California SB 53 (TFAIA)","jurisdiction":"us-ca","jurisdictionName":"California","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ca-sb53","name":"California SB 53, Transparency in Frontier Artificial Intelligence Act (Stats. 2025, ch. 138)","topics":["ai"],"citation":"SB 53 (2025), Stats. 2025, ch. 138","enactedDate":"2025-09-29","effectiveDate":"2026-01-01","sourceUrl":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260SB53","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-01-01","title":"First OES anonymized incident report and CDT definition review"}},{"id":"us-ca-sb976","shortName":"California SB 976 addictive feeds","jurisdiction":"us-ca","jurisdictionName":"California","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ca-sb976","name":"Protecting Our Kids from Social Media Addiction Act (SB 976)","topics":["children","online-safety"],"citation":"Stats. 2024, ch. 321; Cal. Health & Safety Code section 27000 et seq.","enactedDate":"2024-09-20","effectiveDate":"2025-01-01","sourceUrl":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202320240SB976","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2027-01-01","title":"Age assurance duty and AG rules"}},{"id":"us-ca-us-ca-sb813","shortName":"California Senate Bill 813","jurisdiction":"us-ca","jurisdictionName":"California","region":"us-states","status":"enacted","url":"https://regulations.fru.dev/regulations/us-ca-us-ca-sb813","name":"California Senate Bill 813","topics":["ai"],"citation":"","enactedDate":"2026-09-09","effectiveDate":"","sourceUrl":"https://www.gov.ca.gov/2026/09/09/governor-newsom-signs-first-in-the-nation-ai-safeguards-to-protect-californians-calls-on-the-federal-government-to-do-its-part/","lastVerified":"2026-09-28","unverified":true,"nextDeadline":null},{"id":"us-ca-ab656","shortName":"California social media account deletion","jurisdiction":"us-ca","jurisdictionName":"California","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ca-ab656","name":"Account Cancellation (AB 656)","topics":["privacy"],"citation":"Stats. 2025, ch. 464","enactedDate":"2025-10-08","effectiveDate":"2026-01-01","sourceUrl":"https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202520260AB656","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"ca-c36-ppcda","shortName":"Canada Bill C-36 (PPCDA)","jurisdiction":"ca","jurisdictionName":"Canada","region":"americas","status":"proposed","url":"https://regulations.fru.dev/regulations/ca-c36-ppcda","name":"Bill C-36, An Act to enact the Protecting Privacy and Consumer Data Act","topics":["privacy","breach-notification"],"citation":"Bill C-36 (45th Parliament, 1st Session)","enactedDate":"","effectiveDate":"","sourceUrl":"https://www.parl.ca/DocumentViewer/en/45-1/bill/C-36/first-reading","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"ca-ccspa","shortName":"Canada Bill C-8 / CCSPA","jurisdiction":"ca","jurisdictionName":"Canada","region":"americas","status":"enacted","url":"https://regulations.fru.dev/regulations/ca-ccspa","name":"Critical Cyber Systems Protection Act (enacted by Bill C-8, An Act respecting cyber security)","topics":["cybersecurity","breach-notification"],"citation":"S.C. 2026, c. 9 (Bill C-8, 45th Parl., 1st Sess.)","enactedDate":"2026-06-15","effectiveDate":"","sourceUrl":"https://www.parl.ca/legisinfo/en/bill/45-1/c-8","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-ca-ccpa","shortName":"CCPA / CPRA","jurisdiction":"us-ca","jurisdictionName":"California","region":"us-states","status":"amended","url":"https://regulations.fru.dev/regulations/us-ca-ccpa","name":"California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (Cal. Civ. Code 1798.100 et seq.) and CPPA regulations (Cal. Code Regs. tit. 11, 7000 et seq.)","topics":["privacy","ai","cybersecurity","children"],"citation":"Cal. Civ. Code 1798.100-1798.199.100 (AB 375, Stats. 2018 ch. 55; Proposition 24 (2020)); 11 CCR 7000 et seq.","enactedDate":"2018-06-28","effectiveDate":"2020-01-01","sourceUrl":"https://cppa.ca.gov/regulations/ccpa_updates.html","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-01-01","title":"ADMT requirements compliance date"}},{"id":"us-cfpb-1033","shortName":"CFPB Open Banking Rule (Section 1033)","jurisdiction":"us","jurisdictionName":"United States","region":"us-federal","status":"enacted","url":"https://regulations.fru.dev/regulations/us-cfpb-1033","name":"Required Rulemaking on Personal Financial Data Rights (12 CFR Part 1033)","topics":["data-access","financial","privacy","cybersecurity"],"citation":"89 FR 90838; 12 CFR Part 1033","enactedDate":"2024-11-18","effectiveDate":"2025-01-17","sourceUrl":"https://www.federalregister.gov/documents/2024/11/18/2024-25079/required-rulemaking-on-personal-financial-data-rights","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2027-04-01","title":"Tier 2 compliance date (original)"}},{"id":"cl-pdpl","shortName":"Chile Personal Data Protection Law (Ley 21.719)","jurisdiction":"cl","jurisdictionName":"Chile","region":"americas","status":"enacted","url":"https://regulations.fru.dev/regulations/cl-pdpl","name":"Ley Nº 21.719 que regula la protección y el tratamiento de los datos personales y crea la Agencia de Protección de Datos Personales","topics":["privacy","breach-notification"],"citation":"Ley Nº 21.719 (Diario Oficial 13 Dec 2024)","enactedDate":"2024-11-25","effectiveDate":"2026-12-01","sourceUrl":"https://www.bcn.cl/leychile/navegar?idNorma=1209272","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2026-12-01","title":"Law in force"}},{"id":"cn-ai-labeling","shortName":"China AI Content Labeling Measures","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-ai-labeling","name":"Measures for Labeling AI-Generated Synthetic Content","topics":["ai","online-safety"],"citation":"Joint notice of CAC, MIIT, Ministry of Public Security and NRTA (14 Mar 2025)","enactedDate":"2025-03-14","effectiveDate":"2025-09-01","sourceUrl":"https://www.cac.gov.cn/2025-03/14/c_1743654684782215.htm","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"cn-algorithm-recommendation","shortName":"China Algorithmic Recommendation Provisions","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-algorithm-recommendation","name":"Provisions on the Administration of Algorithmic Recommendation in Internet Information Services","topics":["ai","online-safety","privacy"],"citation":"CAC Order No. 9 (joint with MIIT, MPS, SAMR)","enactedDate":"2021-11-16","effectiveDate":"2022-03-01","sourceUrl":"https://www.cac.gov.cn/2022-01/04/c_1642894606364259.htm","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"cn-anthropomorphic-ai","shortName":"China Anthropomorphic AI Measures","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-anthropomorphic-ai","name":"Interim Measures for the Management of Anthropomorphic AI Interaction Services","topics":["ai","children","online-safety","privacy"],"citation":"CAC Order No. 21 (joint with NDRC, MIIT, MPS, SAMR)","enactedDate":"2026-04-10","effectiveDate":"2026-07-15","sourceUrl":"https://www.cac.gov.cn/2026-04/10/c_1777558395078289.htm","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"cn-cross-border","shortName":"China Cross-Border Data Flow Provisions","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-cross-border","name":"Provisions on Promoting and Regulating Cross-Border Data Flows (CAC Order No. 16)","topics":["data-residency","privacy"],"citation":"CAC Order No. 16","enactedDate":"2024-03-22","effectiveDate":"2024-03-22","sourceUrl":"https://www.cac.gov.cn/2024-03/22/c_1712776611775634.htm","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"cn-incident-reporting","shortName":"China Cyber Incident Reporting Measures","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-incident-reporting","name":"Administrative Measures for National Cybersecurity Incident Reporting","topics":["cybersecurity","breach-notification"],"citation":"CAC measures of 11 September 2025","enactedDate":"2025-09-11","effectiveDate":"2025-11-01","sourceUrl":"https://www.cac.gov.cn/2025-09/15/c_1759583017717009.htm","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"cn-csl","shortName":"China Cybersecurity Law","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"amended","url":"https://regulations.fru.dev/regulations/cn-csl","name":"Cybersecurity Law of the People's Republic of China (as amended by the NPC Standing Committee Decision of 28 October 2025)","topics":["cybersecurity","data-residency","ai","privacy"],"citation":"Order of the President No. 53 (2016); amended by Decision of the 14th NPC Standing Committee, 18th session, 28 Oct 2025","enactedDate":"2016-11-07","effectiveDate":"2017-06-01","sourceUrl":"https://www.gov.cn/yaowen/liebiao/202510/content_7046194.htm","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"cn-sa-measures","shortName":"China Data Export Security Assessment Measures","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-sa-measures","name":"Measures for the Security Assessment of Outbound Data Transfers","topics":["data-residency","privacy","cybersecurity"],"citation":"CAC Order No. 11","enactedDate":"2022-07-07","effectiveDate":"2022-09-01","sourceUrl":"https://www.cac.gov.cn/2022-07/07/c_1658811536396503.htm","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"cn-dsl","shortName":"China Data Security Law","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-dsl","name":"Data Security Law of the People's Republic of China","topics":["cybersecurity","data-residency","data-access"],"citation":"Order of the President of the PRC No. 84","enactedDate":"2021-06-10","effectiveDate":"2021-09-01","sourceUrl":"http://www.cac.gov.cn/2021-06/11/c_1624994566919140.htm","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"cn-data-risk-assessment","shortName":"China Data Security Risk Assessment Measures","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-data-risk-assessment","name":"Measures for Network Data Security Risk Assessment","topics":["cybersecurity","privacy"],"citation":"CAC Order No. 24 (joint with MIIT, MPS)","enactedDate":"2026-06-18","effectiveDate":"2026-08-20","sourceUrl":"https://www.cac.gov.cn/2026-06/18/c_1783525609815499.htm","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"cn-deep-synthesis","shortName":"China Deep Synthesis Provisions","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-deep-synthesis","name":"Provisions on the Administration of Deep Synthesis in Internet Information Services","topics":["ai","online-safety","biometrics"],"citation":"CAC Order No. 12 (joint with MIIT, MPS)","enactedDate":"2022-11-25","effectiveDate":"2023-01-10","sourceUrl":"https://www.cac.gov.cn/2022-12/11/c_1672221949354811.htm","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"cn-facial-recognition","shortName":"China Facial Recognition Measures","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-facial-recognition","name":"Measures for the Security Management of Facial Recognition Technology Applications","topics":["biometrics","privacy"],"citation":"CAC and MPS Order No. 19","enactedDate":"2025-03-13","effectiveDate":"2025-06-01","sourceUrl":"https://www.cac.gov.cn/2025-03/21/c_1744174262156096.htm","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"cn-genai-measures","shortName":"China Generative AI Measures","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-genai-measures","name":"Interim Measures for the Management of Generative Artificial Intelligence Services","topics":["ai","online-safety","privacy"],"citation":"CAC Order No. 15 (joint with NDRC, MOE, MOST, MIIT, MPS, NRTA)","enactedDate":"2023-07-10","effectiveDate":"2023-08-15","sourceUrl":"https://www.cac.gov.cn/2023-07/13/c_1690898327029107.htm","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"cn-minors-online-protection","shortName":"China Minors Online Protection Regulations","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-minors-online-protection","name":"Regulations on the Protection of Minors Online","topics":["children","privacy","online-safety"],"citation":"State Council Decree No. 766","enactedDate":"2023-10-16","effectiveDate":"2024-01-01","sourceUrl":"https://www.cac.gov.cn/2023-10/24/c_1699806932316206.htm","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"cn-network-data-regs","shortName":"China Network Data Security Regulations","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-network-data-regs","name":"Regulations on Network Data Security Management (State Council Order No. 790)","topics":["privacy","cybersecurity","data-residency"],"citation":"State Council Order No. 790","enactedDate":"2024-09-24","effectiveDate":"2025-01-01","sourceUrl":"https://www.gov.cn/zhengce/content/202409/content_6977766.htm","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"cn-pi-compliance-audit","shortName":"China PI Compliance Audit Measures","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-pi-compliance-audit","name":"Administrative Measures for Personal Information Protection Compliance Audits (CAC Order No. 18)","topics":["privacy"],"citation":"CAC Order No. 18","enactedDate":"2025-02-14","effectiveDate":"2025-05-01","sourceUrl":"https://www.cac.gov.cn/2025-02/14/c_1741233507681519.htm","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"cn-pi-certification","shortName":"China PI Export Certification Measures","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-pi-certification","name":"Measures for Personal Information Outbound Transfer Certification","topics":["data-residency","privacy"],"citation":"CAC and SAMR Order No. 20","enactedDate":"2025-10-14","effectiveDate":"2026-01-01","sourceUrl":"https://www.cac.gov.cn/2025-10/17/c_1762449728720008.htm","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"cn-scc-measures","shortName":"China PI Export Standard Contract Measures","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-scc-measures","name":"Measures on the Standard Contract for Outbound Transfer of Personal Information","topics":["data-residency","privacy"],"citation":"CAC Order No. 13","enactedDate":"2023-02-22","effectiveDate":"2023-06-01","sourceUrl":"https://www.cac.gov.cn/2023-02/24/c_1678884830036813.htm","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"cn-pipl","shortName":"China PIPL","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-pipl","name":"Personal Information Protection Law of the People's Republic of China","topics":["privacy","data-residency","biometrics","children"],"citation":"Order of the President of the PRC No. 91 (adopted by the 13th NPC Standing Committee, 30th session)","enactedDate":"2021-08-20","effectiveDate":"2021-11-01","sourceUrl":"http://www.cac.gov.cn/2021-08/20/c_1631050028355286.htm","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"cn-small-pi-handlers","shortName":"China Small PI Handler Simplified Measures","jurisdiction":"cn","jurisdictionName":"China","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/cn-small-pi-handlers","name":"Provisions on Simplified Personal Information Protection Measures for Small Personal Information Handlers","topics":["privacy","data-residency"],"citation":"CAC and MPS Order No. 25","enactedDate":"2026-07-22","effectiveDate":"2026-09-01","sourceUrl":"https://www.cac.gov.cn/2026-07/24/c_1786638889704872.htm","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-circia","shortName":"CIRCIA","jurisdiction":"us","jurisdictionName":"United States (Federal)","region":"us-federal","status":"enacted","url":"https://regulations.fru.dev/regulations/us-circia","name":"Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) and proposed implementing rule (6 CFR Part 226)","topics":["cybersecurity","breach-notification"],"citation":"6 U.S.C. 681-681g; Pub. L. 117-103, div. Y; NPRM 89 FR 23644 (Apr. 4, 2024), RIN 1670-AA04","enactedDate":"2022-03-15","effectiveDate":"","sourceUrl":"https://www.federalregister.gov/documents/2024/04/04/2024-06526/cyber-incident-reporting-for-critical-infrastructure-act-circia-reporting-requirements","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-cmmc","shortName":"CMMC 2.0","jurisdiction":"us","jurisdictionName":"United States (Federal)","region":"us-federal","status":"in_force","url":"https://regulations.fru.dev/regulations/us-cmmc","name":"Cybersecurity Maturity Model Certification (CMMC) Program (32 CFR Part 170) and DFARS acquisition rule (48 CFR Parts 204, 212, 217, 252)","topics":["cybersecurity"],"citation":"32 CFR Part 170 (89 FR 83092, Oct. 15, 2024); DFARS Case 2019-D041, 90 FR 43560 (Sept. 10, 2025)","enactedDate":"2024-10-15","effectiveDate":"2024-12-16","sourceUrl":"https://www.federalregister.gov/documents/2025/09/10/2025-17359/defense-federal-acquisition-regulation-supplement-assessing-contractor-implementation-of","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2026-11-10","title":"Phase 2: Level 2 C3PAO certification"}},{"id":"coe-ai-convention","shortName":"CoE AI Framework Convention","jurisdiction":"coe","jurisdictionName":"Council of Europe","region":"uk-europe","status":"enacted","url":"https://regulations.fru.dev/regulations/coe-ai-convention","name":"Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law","topics":["ai"],"citation":"CETS No. 225","enactedDate":"2024-09-05","effectiveDate":"","sourceUrl":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:22026A01081","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-co-ai-act","shortName":"Colorado AI Act","jurisdiction":"us-co","jurisdictionName":"Colorado","region":"us-states","status":"enacted","url":"https://regulations.fru.dev/regulations/us-co-ai-act","name":"Colorado SB 24-205 (Consumer Protections for Artificial Intelligence), as delayed by SB 25B-004 and repealed and reenacted by SB 26-189 (Automated Decision-Making Technology)","topics":["ai","privacy"],"citation":"SB 24-205 (2024); SB 25B-004 (2025 1st Extraordinary Session); SB 26-189 (2026); C.R.S. Title 6, Art. 1, Part 17","enactedDate":"2024-05-17","effectiveDate":"2027-01-01","sourceUrl":"https://leg.colorado.gov/bills/sb26-189","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-01-01","title":"ADMT obligations apply"}},{"id":"us-co-cpa","shortName":"Colorado Privacy Act (CPA)","jurisdiction":"us-co","jurisdictionName":"Colorado","region":"us-states","status":"amended","url":"https://regulations.fru.dev/regulations/us-co-cpa","name":"Colorado Privacy Act (SB 21-190), C.R.S. 6-1-1301 et seq., as amended by HB 24-1130, SB 24-041 and SB 25-276","topics":["privacy","children","biometrics"],"citation":"SB 21-190 (2021 Colo. Sess. Laws ch. 483); C.R.S. 6-1-1301 to 6-1-1313; 4 CCR 904-3 (CPA Rules)","enactedDate":"2021-07-07","effectiveDate":"2023-07-01","sourceUrl":"https://leg.colorado.gov/bills/sb21-190","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-ct-ctdpa","shortName":"Connecticut Data Privacy Act (CTDPA)","jurisdiction":"us-ct","jurisdictionName":"Connecticut","region":"us-states","status":"amended","url":"https://regulations.fru.dev/regulations/us-ct-ctdpa","name":"Connecticut Data Privacy Act (Public Act 22-15), Conn. Gen. Stat. 42-515 et seq., as amended by Public Act 25-113 (SB 1295) and Public Act 26-64 (SB 4)","topics":["privacy","children","ai","health"],"citation":"Public Act 22-15 (SB 6, 2022); Conn. Gen. Stat. 42-515 to 42-526; PA 25-113; PA 26-64","enactedDate":"2022-05-10","effectiveDate":"2023-07-01","sourceUrl":"https://www.cga.ct.gov/2025/ACT/PA/PDF/2025PA-00113-R00SB-01295-PA.PDF","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-01-01","title":"Data broker registration required"}},{"id":"us-coppa","shortName":"COPPA Rule","jurisdiction":"us","jurisdictionName":"United States (Federal)","region":"us-federal","status":"amended","url":"https://regulations.fru.dev/regulations/us-coppa","name":"Children's Online Privacy Protection Rule (16 CFR Part 312), as amended April 2025","topics":["privacy","children"],"citation":"15 U.S.C. 6501-6506; 16 CFR Part 312; amendments at 90 FR 16918 (Apr. 22, 2025)","enactedDate":"1998-10-21","effectiveDate":"2000-04-21","sourceUrl":"https://www.federalregister.gov/documents/2025/04/22/2025-05904/childrens-online-privacy-protection-rule","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"eu-cra","shortName":"Cyber Resilience Act","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"enacted","url":"https://regulations.fru.dev/regulations/eu-cra","name":"Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act)","topics":["cybersecurity","breach-notification"],"citation":"OJ L, 2024/2847, 20.11.2024","enactedDate":"2024-10-23","effectiveDate":"2024-12-10","sourceUrl":"https://eur-lex.europa.eu/eli/reg/2024/2847/oj","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-12-11","title":"CRA fully applies"}},{"id":"uk-duaa","shortName":"Data (Use and Access) Act","jurisdiction":"uk","jurisdictionName":"United Kingdom","region":"uk-europe","status":"in_force","url":"https://regulations.fru.dev/regulations/uk-duaa","name":"Data (Use and Access) Act 2025","topics":["privacy","data-access","ai"],"citation":"2025 c. 18","enactedDate":"2025-06-19","effectiveDate":"2025-08-20","sourceUrl":"https://www.legislation.gov.uk/ukpga/2025/18/contents","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"eu-dga","shortName":"Data Governance Act","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"amended","url":"https://regulations.fru.dev/regulations/eu-dga","name":"Regulation (EU) 2022/868 on European data governance (Data Governance Act)","topics":["data-access","privacy"],"citation":"OJ L 152, 3.6.2022, p. 1","enactedDate":"2022-05-30","effectiveDate":"2022-06-23","sourceUrl":"https://eur-lex.europa.eu/eli/reg/2022/868/oj","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-de-dpdpa","shortName":"Delaware Personal Data Privacy Act (DPDPA)","jurisdiction":"us-de","jurisdictionName":"Delaware","region":"us-states","status":"amended","url":"https://regulations.fru.dev/regulations/us-de-dpdpa","name":"Delaware Personal Data Privacy Act (HB 154), 6 Del. C. ch. 12D","topics":["privacy","children"],"citation":"HB 154 (152nd GA), 84 Del. Laws c. 197; amended by 85 Del. Laws c. 463; 6 Del. C. 12D-101 to 12D-111","enactedDate":"2023-09-11","effectiveDate":"2025-01-01","sourceUrl":"https://delcode.delaware.gov/title6/c012d/index.html","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-01-01","title":"Amended thresholds and third-party duties take effect"}},{"id":"eu-dma","shortName":"Digital Markets Act","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"in_force","url":"https://regulations.fru.dev/regulations/eu-dma","name":"Regulation (EU) 2022/1925 on contestable and fair markets in the digital sector (Digital Markets Act)","topics":["data-access","privacy"],"citation":"OJ L 265, 12.10.2022, p. 1","enactedDate":"2022-09-14","effectiveDate":"2022-11-01","sourceUrl":"https://eur-lex.europa.eu/eli/reg/2022/1925/oj","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"eu-digital-omnibus","shortName":"Digital Omnibus (data/GDPR)","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"proposed","url":"https://regulations.fru.dev/regulations/eu-digital-omnibus","name":"Proposal for a Regulation amending Regulations (EU) 2016/679, 2018/1724, 2018/1725, 2023/2854 and Directives 2002/58/EC, 2022/2555 and 2022/2557 as regards the simplification of the digital legislative framework (Digital Omnibus)","topics":["privacy","data-access","cybersecurity","breach-notification","ai"],"citation":"COM(2025) 837 final, 2025/0360(COD)","enactedDate":"","effectiveDate":"","sourceUrl":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52025PC0837","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"eu-dsa","shortName":"Digital Services Act","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"in_force","url":"https://regulations.fru.dev/regulations/eu-dsa","name":"Regulation (EU) 2022/2065 on a Single Market for Digital Services (Digital Services Act)","topics":["online-safety","children","privacy"],"citation":"OJ L 277, 27.10.2022, p. 1","enactedDate":"2022-10-19","effectiveDate":"2022-11-16","sourceUrl":"https://eur-lex.europa.eu/eli/reg/2022/2065/oj","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-02-18","title":"DSA SME impact report"}},{"id":"us-doj-bulk-data","shortName":"DOJ Bulk Data Rule","jurisdiction":"us","jurisdictionName":"United States (Federal)","region":"us-federal","status":"in_force","url":"https://regulations.fru.dev/regulations/us-doj-bulk-data","name":"Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons (28 CFR Part 202) - DOJ Data Security Program","topics":["privacy","data-residency","cybersecurity","biometrics","health","financial"],"citation":"28 CFR Part 202; 90 FR 1636 (Jan. 8, 2025); Executive Order 14117; IEEPA (50 U.S.C. 1701 et seq.)","enactedDate":"2025-01-08","effectiveDate":"2025-04-08","sourceUrl":"https://www.federalregister.gov/documents/2025/01/08/2024-31486/preventing-access-to-us-sensitive-personal-data-and-government-related-data-by-countries-of-concern","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"eu-dora","shortName":"DORA","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"in_force","url":"https://regulations.fru.dev/regulations/eu-dora","name":"Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (Digital Operational Resilience Act)","topics":["cybersecurity","financial","breach-notification"],"citation":"OJ L 333, 27.12.2022, p. 1","enactedDate":"2022-12-14","effectiveDate":"2023-01-16","sourceUrl":"https://eur-lex.europa.eu/eli/reg/2022/2554/oj","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"eg-pdpl","shortName":"Egypt PDPL","jurisdiction":"eg","jurisdictionName":"Egypt","region":"mea","status":"in_force","url":"https://regulations.fru.dev/regulations/eg-pdpl","name":"Law No. 151 of 2020 on the Protection of Personal Data and its Executive Regulations","topics":["privacy","data-residency","breach-notification"],"citation":"Law No. 151 of 2020; Minister of Communications and IT Decree No. 816 of 2025","enactedDate":"2020-07-13","effectiveDate":"2020-10-16","sourceUrl":"https://www.pdpc.gov.eg/assets/pdf-data/PDPL%20no.%20151%20of%202020%20(ar).pdf","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"eu-eidas2","shortName":"eIDAS 2 / EU Digital Identity Wallet","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"enacted","url":"https://regulations.fru.dev/regulations/eu-eidas2","name":"Regulation (EU) 2024/1183 amending Regulation (EU) No 910/2014 as regards establishing the European Digital Identity Framework (eIDAS 2)","topics":["privacy","data-access","biometrics"],"citation":"OJ L, 2024/1183, 30.4.2024","enactedDate":"2024-04-11","effectiveDate":"2024-05-20","sourceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1183/oj","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2026-12-24","title":"Member States must provide EU Digital Identity Wallets"}},{"id":"eu-eprivacy","shortName":"ePrivacy Directive (cookie law)","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"amended","url":"https://regulations.fru.dev/regulations/eu-eprivacy","name":"Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector (ePrivacy Directive), as amended by Directive 2009/136/EC","topics":["privacy","breach-notification"],"citation":"OJ L 201, 31.7.2002, p. 37","enactedDate":"2002-07-12","effectiveDate":"2002-07-31","sourceUrl":"https://eur-lex.europa.eu/eli/dir/2002/58/oj","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"eu-ai-act","shortName":"EU AI Act","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"amended","url":"https://regulations.fru.dev/regulations/eu-ai-act","name":"Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act), as amended by Regulation (EU) 2026/1744 (Digital Omnibus on AI)","topics":["ai","biometrics","children"],"citation":"OJ L, 2024/1689, 12.7.2024; amended by OJ L, 2026/1744, 24.7.2026","enactedDate":"2024-06-13","effectiveDate":"2024-08-01","sourceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2026-12-02","title":"New bans on sexual deepfakes and CSAM generation; Art 50(2) grace period ends"}},{"id":"eu-ccd2","shortName":"EU Consumer Credit Directive 2 (CCD2)","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"enacted","url":"https://regulations.fru.dev/regulations/eu-ccd2","name":"Directive (EU) 2023/2225 on credit agreements for consumers","topics":["financial","privacy","ai"],"citation":"Directive (EU) 2023/2225","enactedDate":"2023-10-18","effectiveDate":"2026-11-20","sourceUrl":"https://eur-lex.europa.eu/eli/dir/2023/2225/oj/eng","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2026-11-20","title":"National rules apply"}},{"id":"eu-csam-interim","shortName":"EU CSAM Interim Regulation","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"in_force","url":"https://regulations.fru.dev/regulations/eu-csam-interim","name":"Regulation (EU) 2026/1881 on a temporary derogation from certain provisions of Directive 2002/58/EC for combating online child sexual abuse","topics":["privacy","children","online-safety"],"citation":"Regulation (EU) 2026/1881 (successor to Regulation (EU) 2021/1232)","enactedDate":"2026-07-24","effectiveDate":"2026-07-31","sourceUrl":"https://eur-lex.europa.eu/eli/reg/2026/1881/oj/eng","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2028-02-01","title":"Commission implementation report"}},{"id":"eu-cyber-solidarity-act","shortName":"EU Cyber Solidarity Act","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"in_force","url":"https://regulations.fru.dev/regulations/eu-cyber-solidarity-act","name":"Regulation (EU) 2025/38 laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cyber threats and incidents (Cyber Solidarity Act)","topics":["cybersecurity"],"citation":"Regulation (EU) 2025/38","enactedDate":"2024-12-19","effectiveDate":"2025-02-04","sourceUrl":"https://eur-lex.europa.eu/eli/reg/2025/38/oj/eng","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2027-02-05","title":"First Commission evaluation"}},{"id":"eu-cybersecurity-act","shortName":"EU Cybersecurity Act","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"amended","url":"https://regulations.fru.dev/regulations/eu-cybersecurity-act","name":"Regulation (EU) 2019/881 on ENISA and on information and communications technology cybersecurity certification (Cybersecurity Act)","topics":["cybersecurity"],"citation":"Regulation (EU) 2019/881, amended by Regulation (EU) 2025/37","enactedDate":"2019-04-17","effectiveDate":"2019-06-27","sourceUrl":"https://eur-lex.europa.eu/eli/reg/2019/881/oj/eng","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"eu-data-act","shortName":"EU Data Act","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"in_force","url":"https://regulations.fru.dev/regulations/eu-data-act","name":"Regulation (EU) 2023/2854 on harmonised rules on fair access to and use of data (Data Act)","topics":["data-access","privacy"],"citation":"OJ L, 2023/2854, 22.12.2023","enactedDate":"2023-12-13","effectiveDate":"2024-01-11","sourceUrl":"https://eur-lex.europa.eu/eli/reg/2023/2854/oj","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-01-12","title":"Cloud switching charges abolished"}},{"id":"eu-e-evidence","shortName":"EU e-Evidence Package","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"in_force","url":"https://regulations.fru.dev/regulations/eu-e-evidence","name":"Regulation (EU) 2023/1543 on European Production Orders and European Preservation Orders for electronic evidence in criminal proceedings, and Directive (EU) 2023/1544 on legal representatives","topics":["privacy","data-access"],"citation":"Regulation (EU) 2023/1543; Directive (EU) 2023/1544","enactedDate":"2023-07-12","effectiveDate":"2026-08-18","sourceUrl":"https://eur-lex.europa.eu/eli/reg/2023/1543/oj/eng","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"eu-fida","shortName":"EU Financial Data Access (FIDA) proposal","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"proposed","url":"https://regulations.fru.dev/regulations/eu-fida","name":"Proposal for a Regulation on a framework for Financial Data Access (FIDA)","topics":["financial","data-access","privacy"],"citation":"COM(2023) 360 final, 2023/0205(COD)","enactedDate":"","effectiveDate":"","sourceUrl":"https://publications.europa.eu/resource/celex/52023PC0360","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"eu-eu-kids-act","shortName":"EU KIDS Act","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"proposed","url":"https://regulations.fru.dev/regulations/eu-eu-kids-act","name":"EU KIDS Act","topics":["children","online-safety","privacy"],"citation":"","enactedDate":"","effectiveDate":"","sourceUrl":"https://digital-strategy.ec.europa.eu/en/news/eu-kids-act-restrict-social-media-platforms-access-children-eu","lastVerified":"2026-09-24","unverified":true,"nextDeadline":null},{"id":"eu-platform-work","shortName":"EU Platform Work Directive","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"enacted","url":"https://regulations.fru.dev/regulations/eu-platform-work","name":"Directive (EU) 2024/2831 on improving working conditions in platform work","topics":["privacy","ai"],"citation":"Directive (EU) 2024/2831","enactedDate":"2024-10-23","effectiveDate":"2024-12-01","sourceUrl":"https://eur-lex.europa.eu/eli/dir/2024/2831/oj/eng","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2026-12-02","title":"Transposition deadline"}},{"id":"eu-ttpa","shortName":"EU Political Advertising Regulation (TTPA)","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"in_force","url":"https://regulations.fru.dev/regulations/eu-ttpa","name":"Regulation (EU) 2024/900 on the transparency and targeting of political advertising","topics":["privacy","online-safety"],"citation":"Regulation (EU) 2024/900","enactedDate":"2024-03-13","effectiveDate":"2025-10-10","sourceUrl":"https://eur-lex.europa.eu/eli/reg/2024/900/oj/eng","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"eu-us-dpf","shortName":"EU-US Data Privacy Framework","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"in_force","url":"https://regulations.fru.dev/regulations/eu-us-dpf","name":"Commission Implementing Decision (EU) 2023/1795 on the adequate level of protection of personal data under the EU-US Data Privacy Framework","topics":["privacy","data-residency"],"citation":"OJ L 231, 20.9.2023, p. 118 (notified under document C(2023)4745)","enactedDate":"2023-07-10","effectiveDate":"2023-07-10","sourceUrl":"https://eur-lex.europa.eu/eli/dec_impl/2023/1795/oj","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"eu-ehds","shortName":"European Health Data Space (EHDS)","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"enacted","url":"https://regulations.fru.dev/regulations/eu-ehds","name":"Regulation (EU) 2025/327 on the European Health Data Space","topics":["health","privacy","data-access"],"citation":"OJ L, 2025/327, 5.3.2025","enactedDate":"2025-02-11","effectiveDate":"2025-03-25","sourceUrl":"https://eur-lex.europa.eu/eli/reg/2025/327/oj","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-03-26","title":"EHDS general application date"}},{"id":"us-fcc-cpni-breach","shortName":"FCC CPNI Breach Rule","jurisdiction":"us","jurisdictionName":"United States (Federal)","region":"us-federal","status":"amended","url":"https://regulations.fru.dev/regulations/us-fcc-cpni-breach","name":"FCC Data Breach Reporting Requirements for telecommunications carriers, interconnected VoIP and TRS providers (47 CFR 64.2011, 64.5111)","topics":["privacy","breach-notification","cybersecurity"],"citation":"47 CFR 64.2011 and 64.5111; FCC 23-111, WC Docket No. 22-21; 89 FR 9968 (Feb. 12, 2024)","enactedDate":"2024-02-12","effectiveDate":"2024-03-13","sourceUrl":"https://www.federalregister.gov/documents/2024/02/12/2024-01667/data-breach-reporting-requirements","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-fl-fdbr","shortName":"Florida Digital Bill of Rights","jurisdiction":"us-fl","jurisdictionName":"Florida","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-fl-fdbr","name":"Florida Digital Bill of Rights (CS/CS/SB 262, 2023)","topics":["privacy","children"],"citation":"Fla. Stat. 501.701 to 501.722 (Ch. 2023-201, Laws of Fla.)","enactedDate":"2023-06-07","effectiveDate":"2024-07-01","sourceUrl":"https://www.flsenate.gov/Session/Bill/2023/262","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-ftc-hbnr","shortName":"FTC Health Breach Notification Rule","jurisdiction":"us","jurisdictionName":"United States (Federal)","region":"us-federal","status":"amended","url":"https://regulations.fru.dev/regulations/us-ftc-hbnr","name":"FTC Health Breach Notification Rule (16 CFR Part 318), as amended 2024","topics":["health","privacy","breach-notification"],"citation":"16 CFR Part 318; 74 FR 42962 (2009); amendments 89 FR 47028 (May 30, 2024)","enactedDate":"2009-08-25","effectiveDate":"2009-09-24","sourceUrl":"https://www.federalregister.gov/documents/2024/05/30/2024-10855/health-breach-notification-rule","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"eu-gdpr","shortName":"GDPR","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"amended","url":"https://regulations.fru.dev/regulations/eu-gdpr","name":"Regulation (EU) 2016/679 (General Data Protection Regulation)","topics":["privacy","breach-notification","data-access","children","biometrics","health"],"citation":"OJ L 119, 4.5.2016, p. 1","enactedDate":"2016-04-27","effectiveDate":"2016-05-24","sourceUrl":"https://eur-lex.europa.eu/eli/reg/2016/679/oj","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-04-02","title":"GDPR Procedural Regulation applies"}},{"id":"us-glba-safeguards","shortName":"GLBA Safeguards Rule","jurisdiction":"us","jurisdictionName":"United States (Federal)","region":"us-federal","status":"amended","url":"https://regulations.fru.dev/regulations/us-glba-safeguards","name":"FTC Standards for Safeguarding Customer Information (Safeguards Rule), 16 CFR Part 314, under the Gramm-Leach-Bliley Act","topics":["financial","cybersecurity","breach-notification","privacy"],"citation":"15 U.S.C. 6801(b), 6805(b)(2); 16 CFR Part 314; amendments at 86 FR 70272 (2021) and 88 FR 77499 (2023)","enactedDate":"1999-11-12","effectiveDate":"2003-05-23","sourceUrl":"https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-314","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-hipaa","shortName":"HIPAA","jurisdiction":"us","jurisdictionName":"United States (Federal)","region":"us-federal","status":"amended","url":"https://regulations.fru.dev/regulations/us-hipaa","name":"HIPAA Privacy, Security and Breach Notification Rules (45 CFR Parts 160 and 164)","topics":["privacy","health","cybersecurity","breach-notification"],"citation":"Pub. L. 104-191; 42 U.S.C. 1320d et seq.; 45 CFR Parts 160 and 164","enactedDate":"1996-08-21","effectiveDate":"2003-04-14","sourceUrl":"https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-hhs-hipaa-security-nprm","shortName":"HIPAA Security Rule update (NPRM)","jurisdiction":"us","jurisdictionName":"United States","region":"us-federal","status":"proposed","url":"https://regulations.fru.dev/regulations/us-hhs-hipaa-security-nprm","name":"HIPAA Security Rule To Strengthen the Cybersecurity of Electronic Protected Health Information (proposed rule)","topics":["health","cybersecurity","privacy"],"citation":"90 FR 898 (RIN 0945-AA22); would amend 45 CFR Parts 160 and 164","enactedDate":"","effectiveDate":"","sourceUrl":"https://www.federalregister.gov/documents/2025/01/06/2024-30983/hipaa-security-rule-to-strengthen-the-cybersecurity-of-electronic-protected-health-information","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"hk-pcico","shortName":"Hong Kong Critical Infrastructure Cyber Ordinance","jurisdiction":"hk","jurisdictionName":"Hong Kong","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/hk-pcico","name":"Protection of Critical Infrastructures (Computer Systems) Ordinance (Cap. 653)","topics":["cybersecurity","breach-notification"],"citation":"Cap. 653","enactedDate":"2025-03-28","effectiveDate":"2026-01-01","sourceUrl":"https://www.elegislation.gov.hk/hk/cap653","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"hk-pdpo","shortName":"Hong Kong PDPO","jurisdiction":"hk","jurisdictionName":"Hong Kong","region":"apac","status":"amended","url":"https://regulations.fru.dev/regulations/hk-pdpo","name":"Personal Data (Privacy) Ordinance (Cap. 486)","topics":["privacy","online-safety"],"citation":"Cap. 486","enactedDate":"","effectiveDate":"1996-12-20","sourceUrl":"https://www.pcpd.org.hk/english/data_privacy_law/ordinance_at_a_Glance/ordinance.html","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-il-hb3773","shortName":"Illinois AI in Employment Law (HB 3773)","jurisdiction":"us-il","jurisdictionName":"Illinois","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-il-hb3773","name":"Illinois HB 3773 (Public Act 103-0804), amending the Illinois Human Rights Act on artificial intelligence in employment","topics":["ai"],"citation":"Public Act 103-0804; 775 ILCS 5/2-102(L)","enactedDate":"2024-08-09","effectiveDate":"2026-01-01","sourceUrl":"https://www.ilga.gov/ftp/legislation/103/BillStatus/HTML/10300HB3773.html","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-il-bipa","shortName":"Illinois BIPA","jurisdiction":"us-il","jurisdictionName":"Illinois","region":"us-states","status":"amended","url":"https://regulations.fru.dev/regulations/us-il-bipa","name":"Illinois Biometric Information Privacy Act (740 ILCS 14), as amended by SB 2979 (Public Act 103-0769)","topics":["biometrics","privacy"],"citation":"740 ILCS 14; Public Act 95-994; Public Act 103-0769","enactedDate":"","effectiveDate":"2008-10-03","sourceUrl":"https://www.ilga.gov/legislation/ilcs/ilcs3.asp?ActID=3004&ChapterID=57","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"in-certin-directions","shortName":"India CERT-In Cyber Security Directions","jurisdiction":"in","jurisdictionName":"India","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/in-certin-directions","name":"Directions under section 70B(6) of the Information Technology Act, 2000 relating to information security practices, procedure, prevention, response and reporting of cyber incidents for Safe and Trusted Internet","topics":["cybersecurity","breach-notification","data-residency"],"citation":"CERT-In Directions No. 20(3)/2022-CERT-In, 28 Apr 2022","enactedDate":"2022-04-28","effectiveDate":"2022-06-27","sourceUrl":"https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04.2022.pdf","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"in-dpdp","shortName":"India DPDP Act","jurisdiction":"in","jurisdictionName":"India","region":"apac","status":"enacted","url":"https://regulations.fru.dev/regulations/in-dpdp","name":"Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025","topics":["privacy","children","breach-notification"],"citation":"Act No. 22 of 2023; DPDP Rules 2025 G.S.R. 846(E) (13 Nov 2025); Act commencement notification G.S.R. 843(E)","enactedDate":"2023-08-11","effectiveDate":"2025-11-13","sourceUrl":"https://egazette.gov.in/WriteReadData/2025/267650.pdf","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2026-11-13","title":"Consent Manager registration rule in force (12 months)"}},{"id":"in-it-rules-sgi","shortName":"India IT Rules amendment on synthetic content","jurisdiction":"in","jurisdictionName":"India","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/in-it-rules-sgi","name":"Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026","topics":["ai","online-safety"],"citation":"G.S.R. 120(E), Gazette of India Extraordinary No. 114, 10 Feb 2026","enactedDate":"2026-02-10","effectiveDate":"2026-02-20","sourceUrl":"https://www.meity.gov.in/static/uploads/2026/02/f55fe52418b03f58b0669f6a8bc03b6d.pdf","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-in-icdpa","shortName":"Indiana Consumer Data Protection Act (ICDPA)","jurisdiction":"us-in","jurisdictionName":"Indiana","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-in-icdpa","name":"Indiana Consumer Data Protection Act (SEA 5, 2023), Ind. Code 24-15","topics":["privacy"],"citation":"Senate Enrolled Act 5 (2023), P.L. 94-2023; Ind. Code 24-15-1 to 24-15-11","enactedDate":"2023-05-01","effectiveDate":"2026-01-01","sourceUrl":"https://iga.in.gov/legislative/2023/bills/senate/5/details","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"id-pdp","shortName":"Indonesia PDP Law","jurisdiction":"id","jurisdictionName":"Indonesia","region":"apac","status":"amended","url":"https://regulations.fru.dev/regulations/id-pdp","name":"Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Pelindungan Data Pribadi)","topics":["privacy","breach-notification","data-residency","children"],"citation":"Law No. 27 of 2022; implementing Government Regulation No. 33 of 2026","enactedDate":"2022-10-17","effectiveDate":"2022-10-17","sourceUrl":"https://peraturan.bpk.go.id/Details/229798/uu-no-27-tahun-2022","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-01-16","title":"Implementing regulation GR 33/2026 takes effect"}},{"id":"id-child-online-protection","shortName":"Indonesia PP 17/2025 (Child Protection Online)","jurisdiction":"id","jurisdictionName":"Indonesia","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/id-child-online-protection","name":"Government Regulation No. 17 of 2025 on Governance of Electronic Systems in Child Protection","topics":["children","online-safety","privacy"],"citation":"Peraturan Pemerintah No. 17 Tahun 2025; LN 2025 (36), TLN 7105","enactedDate":"2025-03-27","effectiveDate":"2025-03-27","sourceUrl":"https://peraturan.bpk.go.id/Details/316698/pp-no-17-tahun-2025","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"eu-interoperable-europe","shortName":"Interoperable Europe Act","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"in_force","url":"https://regulations.fru.dev/regulations/eu-interoperable-europe","name":"Regulation (EU) 2024/903 laying down measures for a high level of public sector interoperability across the Union (Interoperable Europe Act)","topics":["data-access"],"citation":"Regulation (EU) 2024/903","enactedDate":"2024-03-13","effectiveDate":"2024-07-12","sourceUrl":"https://eur-lex.europa.eu/eli/reg/2024/903/oj/eng","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-ia-icdpa","shortName":"Iowa Consumer Data Protection Act (ICDPA)","jurisdiction":"us-ia","jurisdictionName":"Iowa","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ia-icdpa","name":"Iowa Consumer Data Protection Act (SF 262, 2023), Iowa Code ch. 715D","topics":["privacy"],"citation":"SF 262 (2023 Iowa Acts ch. 17); Iowa Code 715D.1-715D.9","enactedDate":"2023-03-28","effectiveDate":"2025-01-01","sourceUrl":"https://www.legis.iowa.gov/docs/code/715D.pdf","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"il-ppl-amendment-13","shortName":"Israel Privacy Protection Law Amendment 13","jurisdiction":"il","jurisdictionName":"Israel","region":"mea","status":"amended","url":"https://regulations.fru.dev/regulations/il-ppl-amendment-13","name":"Privacy Protection Law, 5741-1981 (Amendment No. 13)","topics":["privacy","breach-notification"],"citation":"Privacy Protection Law, 5741-1981, Amendment No. 13 (5784-2024)","enactedDate":"2024-08-05","effectiveDate":"2025-08-14","sourceUrl":"https://www.gov.il/en/departments/the_privacy_protection_authority/govil-landing-page","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"jp-active-cyber-defense","shortName":"Japan Active Cyber Defense Act","jurisdiction":"jp","jurisdictionName":"Japan","region":"apac","status":"enacted","url":"https://regulations.fru.dev/regulations/jp-active-cyber-defense","name":"Act on the Prevention of Damage from Unauthorized Acts against Important Computers (Act No. 42 of 2025)","topics":["cybersecurity","breach-notification"],"citation":"Act No. 42 of 2025 (Reiwa 7)","enactedDate":"2025-05-23","effectiveDate":"2026-10-01","sourceUrl":"https://laws.e-gov.go.jp/law/507AC0000000042","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2027-11-22","title":"Communications data measures in force (latest date)"}},{"id":"jp-ai-act","shortName":"Japan AI Promotion Act","jurisdiction":"jp","jurisdictionName":"Japan","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/jp-ai-act","name":"Act on Promotion of Research and Development, and Utilization of Artificial Intelligence-Related Technology","topics":["ai"],"citation":"Enacted by the 217th Diet (bill submitted 28 Feb 2025)","enactedDate":"2025-05-28","effectiveDate":"2025-06-04","sourceUrl":"https://www8.cao.go.jp/cstp/ai/ai_act/ai_act.html","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"jp-appi","shortName":"Japan APPI","jurisdiction":"jp","jurisdictionName":"Japan","region":"apac","status":"amended","url":"https://regulations.fru.dev/regulations/jp-appi","name":"Act on the Protection of Personal Information (Act No. 57 of 2003), as amended including the 2026 amendment act","topics":["privacy","children","biometrics","breach-notification","ai"],"citation":"Act No. 57 of 2003; 2026 amendment act promulgated 17 July 2026","enactedDate":"2003-05-30","effectiveDate":"2005-04-01","sourceUrl":"https://www.ppc.go.jp/files/pdf/260731_shiryou-1.pdf","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"kz-ai-law","shortName":"Kazakhstan AI Law","jurisdiction":"kz","jurisdictionName":"Kazakhstan","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/kz-ai-law","name":"Law of the Republic of Kazakhstan on Artificial Intelligence (No. 230-VIII)","topics":["ai","privacy","biometrics"],"citation":"Law No. 230-VIII ZRK of 17 Nov 2025","enactedDate":"2025-11-17","effectiveDate":"2026-01-18","sourceUrl":"https://adilet.zan.kz/rus/docs/Z2500000230","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-ky-kcdpa","shortName":"Kentucky Consumer Data Protection Act (KCDPA)","jurisdiction":"us-ky","jurisdictionName":"Kentucky","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ky-kcdpa","name":"Kentucky Consumer Data Protection Act (HB 15, 2024), KRS 367.3611-367.3629","topics":["privacy"],"citation":"HB 15 (2024 Ky. Acts ch. 72); KRS 367.3611 et seq.","enactedDate":"2024-04-04","effectiveDate":"2026-01-01","sourceUrl":"https://apps.legislature.ky.gov/record/24rs/hb15.html","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"ke-cmca","shortName":"Kenya Computer Misuse and Cybercrimes Act","jurisdiction":"ke","jurisdictionName":"Kenya","region":"mea","status":"amended","url":"https://regulations.fru.dev/regulations/ke-cmca","name":"Computer Misuse and Cybercrimes Act, 2018","topics":["cybersecurity","online-safety"],"citation":"Act No. 5 of 2018 (Cap. 79C), amended by Act No. 17 of 2025","enactedDate":"2018-05-16","effectiveDate":"2018-05-30","sourceUrl":"https://new.kenyalaw.org/akn/ke/act/2018/5/eng@2022-12-31","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"ke-dpa","shortName":"Kenya Data Protection Act","jurisdiction":"ke","jurisdictionName":"Kenya","region":"mea","status":"in_force","url":"https://regulations.fru.dev/regulations/ke-dpa","name":"Data Protection Act, 2019 (No. 24 of 2019)","topics":["privacy","breach-notification","data-residency"],"citation":"Act No. 24 of 2019","enactedDate":"2019-11-08","effectiveDate":"2019-11-25","sourceUrl":"https://www.odpc.go.ke/","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-la-app-store","shortName":"Louisiana app store age verification law","jurisdiction":"us-la","jurisdictionName":"Louisiana","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-la-app-store","name":"Louisiana Act 481 of 2025 on Minors' Use of Applications (HB 570)","topics":["children","privacy","online-safety"],"citation":"Acts 2025, No. 481; La. R.S. 51:1771 to 1775","enactedDate":"2025-06-30","effectiveDate":"2026-07-01","sourceUrl":"https://legis.la.gov/legis/BillInfo.aspx?s=25RS&b=HB570&sbi=y","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-la-ldpa","shortName":"Louisiana Data Privacy Act","jurisdiction":"us-la","jurisdictionName":"Louisiana","region":"us-states","status":"enacted","url":"https://regulations.fru.dev/regulations/us-la-ldpa","name":"Louisiana Data Privacy Act (SB 386, 2026 Regular Session, Act No. 502), La. R.S. 51:1780.1-1780.5","topics":["privacy","biometrics"],"citation":"SB 386 (2026 RS), Act No. 502; La. R.S. 51:1780.1-1780.5","enactedDate":"2026-05-29","effectiveDate":"2027-01-01","sourceUrl":"https://legis.la.gov/legis/BillInfo.aspx?s=26RS&b=SB386&sbi=y","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-01-01","title":"Louisiana Data Privacy Act takes effect"}},{"id":"my-cyber-security-act","shortName":"Malaysia Cyber Security Act","jurisdiction":"my","jurisdictionName":"Malaysia","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/my-cyber-security-act","name":"Cyber Security Act 2024 (Act 854)","topics":["cybersecurity","breach-notification"],"citation":"Act 854; commencement P.U. (B) 334/2024","enactedDate":"2024-06-18","effectiveDate":"2024-08-26","sourceUrl":"https://lom.agc.gov.my/act-detail.php?a=YWN0PTg1NCZsYW5nPUJJfDM3MjhhYmRhY2U0YWNlOTZlMGI3MmRlODVkNjQ2YzM4ZTNmMTE0YzA3YzY5ZGJhOGExZTNmYmQ4ZTc0OWJlYWY=","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"my-online-safety-act","shortName":"Malaysia Online Safety Act","jurisdiction":"my","jurisdictionName":"Malaysia","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/my-online-safety-act","name":"Online Safety Act 2025 (Act 866)","topics":["online-safety","children"],"citation":"Act 866; commencement P.U. (B) 449/2025","enactedDate":"2025-05-06","effectiveDate":"2026-01-01","sourceUrl":"https://lom.agc.gov.my/act-detail.php?a=YWN0PTg2NiZsYW5nPUJJ","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2026-12-28","title":"Online Safety Plan due to MCMC"}},{"id":"my-pdpa","shortName":"Malaysia PDPA","jurisdiction":"my","jurisdictionName":"Malaysia","region":"apac","status":"amended","url":"https://regulations.fru.dev/regulations/my-pdpa","name":"Personal Data Protection Act 2010 (Act 709), as amended by the Personal Data Protection (Amendment) Act 2024 (Act A1727)","topics":["privacy","breach-notification","biometrics","data-residency"],"citation":"Act 709; Act A1727 (Royal Assent 9 Oct 2024, gazetted 17 Oct 2024)","enactedDate":"","effectiveDate":"2013-11-15","sourceUrl":"https://www.pdp.gov.my/ppdpv1/wp-content/uploads/2024/11/Act-A1727.pdf","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-md-kids-code","shortName":"Maryland Kids Code","jurisdiction":"us-md","jurisdictionName":"Maryland","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-md-kids-code","name":"Maryland Age-Appropriate Design Code Act (Maryland Kids Code, HB 603)","topics":["children","privacy","online-safety"],"citation":"2024 Md. Laws ch. 461","enactedDate":"2024-05-09","effectiveDate":"2024-10-01","sourceUrl":"https://mgaleg.maryland.gov/mgawebsite/Legislation/Details/hb0603?ys=2024RS","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-md-modpa","shortName":"Maryland Online Data Privacy Act (MODPA)","jurisdiction":"us-md","jurisdictionName":"Maryland","region":"us-states","status":"amended","url":"https://regulations.fru.dev/regulations/us-md-modpa","name":"Maryland Online Data Privacy Act of 2024 (SB 541 / HB 567), Md. Code, Com. Law 14-4601 et seq.","topics":["privacy","children","health","biometrics"],"citation":"2024 Md. Laws ch. 455 (SB 541) and ch. 454 (HB 567); Md. Code, Com. Law 14-4601 to 14-4614","enactedDate":"2024-05-09","effectiveDate":"2025-10-01","sourceUrl":"https://mgaleg.maryland.gov/2024RS/Chapters_noln/CH_455_sb0541e.pdf","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-04-01","title":"Discretionary 60-day cure period ends"}},{"id":"mx-lfpdppp","shortName":"Mexico LFPDPPP 2025","jurisdiction":"mx","jurisdictionName":"Mexico","region":"americas","status":"in_force","url":"https://regulations.fru.dev/regulations/mx-lfpdppp","name":"Ley Federal de Protección de Datos Personales en Posesión de los Particulares (2025)","topics":["privacy"],"citation":"DOF 20-03-2025","enactedDate":"2025-03-20","effectiveDate":"2025-03-21","sourceUrl":"https://www.diputados.gob.mx/LeyesBiblio/pdf/LFPDPPP.pdf","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-mn-mcdpa","shortName":"Minnesota Consumer Data Privacy Act (MCDPA)","jurisdiction":"us-mn","jurisdictionName":"Minnesota","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-mn-mcdpa","name":"Minnesota Consumer Data Privacy Act (HF 4757, 2024 Minn. Laws ch. 121, art. 5), Minn. Stat. 325M.10-325M.21","topics":["privacy"],"citation":"2024 Minn. Laws ch. 121, art. 5; Minn. Stat. 325M.10-325M.21","enactedDate":"2024-05-24","effectiveDate":"2025-07-31","sourceUrl":"https://www.revisor.mn.gov/statutes/cite/325M.20","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2029-07-31","title":"Postsecondary institutions must comply"}},{"id":"us-mt-mcdpa","shortName":"Montana Consumer Data Privacy Act (MCDPA)","jurisdiction":"us-mt","jurisdictionName":"Montana","region":"us-states","status":"amended","url":"https://regulations.fru.dev/regulations/us-mt-mcdpa","name":"Montana Consumer Data Privacy Act (SB 384, 2023), Mont. Code Ann. 30-14-2801 et seq., as amended by SB 297 (2025)","topics":["privacy","children"],"citation":"SB 384 (2023 Mont. Laws ch. 681); SB 297 (2025 Mont. Laws ch. 567); MCA 30-14-2801 to 30-14-2819","enactedDate":"2023-05-19","effectiveDate":"2024-10-01","sourceUrl":"https://archive.legmt.gov/bills/mca/title_0300/chapter_0140/part_0280/section_0030/0300-0140-0280-0030.html","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-ne-aadc","shortName":"Nebraska Kids Code","jurisdiction":"us-ne","jurisdictionName":"Nebraska","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ne-aadc","name":"Nebraska Age-Appropriate Online Design Code Act (LB 504)","topics":["children","privacy","online-safety"],"citation":"Laws 2025, LB 504","enactedDate":"2025-05-30","effectiveDate":"2026-01-01","sourceUrl":"https://nebraskalegislature.gov/FloorDocs/109/PDF/Slip/LB504.pdf","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-ne-ndpa","shortName":"Nebraska NDPA","jurisdiction":"us-ne","jurisdictionName":"Nebraska","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ne-ndpa","name":"Nebraska Data Privacy Act (LB 1074, 2024)","topics":["privacy"],"citation":"Neb. Rev. Stat. 87-1101 to 87-1130 (Laws 2024, LB 1074)","enactedDate":"2024-04-17","effectiveDate":"2025-01-01","sourceUrl":"https://nebraskalegislature.gov/laws/statutes.php?statute=87-1103","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-nv-sb370","shortName":"Nevada consumer health data law","jurisdiction":"us-nv","jurisdictionName":"Nevada","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-nv-sb370","name":"Nevada Consumer Health Data Privacy Law (SB 370)","topics":["health","privacy","biometrics"],"citation":"Stats. 2023, ch. 525; NRS 603A.400 to 603A.550","enactedDate":"2023-06-16","effectiveDate":"2024-03-31","sourceUrl":"https://www.leg.state.nv.us/Session/82nd2023/Bills/SB/SB370_EN.pdf","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-nh-privacy","shortName":"New Hampshire Privacy Act","jurisdiction":"us-nh","jurisdictionName":"New Hampshire","region":"us-states","status":"amended","url":"https://regulations.fru.dev/regulations/us-nh-privacy","name":"New Hampshire Privacy Act (SB 255, 2024), RSA chapter 507-H","topics":["privacy","children"],"citation":"RSA 507-H (Laws 2024, ch. 5; amended 2026, ch. 168 (HB 1460))","enactedDate":"2024-03-06","effectiveDate":"2025-01-01","sourceUrl":"https://gc.nh.gov/rsa/html/LII/507-H/507-H-2.htm","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-01-01","title":"Ban on selling personal data of children under 13 (HB 1460)"}},{"id":"us-nj-njdpa","shortName":"New Jersey NJDPA","jurisdiction":"us-nj","jurisdictionName":"New Jersey","region":"us-states","status":"amended","url":"https://regulations.fru.dev/regulations/us-nj-njdpa","name":"New Jersey Data Privacy Act (P.L.2023, c.266; S332)","topics":["privacy","children"],"citation":"P.L.2023, c.266; N.J.S.A. 56:8-166.4 et seq.","enactedDate":"2024-01-16","effectiveDate":"2025-01-15","sourceUrl":"https://pub.njleg.state.nj.us/Bills/2022/PL23/266_.PDF","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"nz-biometric-code","shortName":"New Zealand Biometric Processing Privacy Code","jurisdiction":"nz","jurisdictionName":"New Zealand","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/nz-biometric-code","name":"Biometric Processing Privacy Code 2025","topics":["biometrics","privacy"],"citation":"Code of practice issued under the Privacy Act 2020; Amendment No. 1 (March 2026)","enactedDate":"2025-07-21","effectiveDate":"2025-11-03","sourceUrl":"https://www.privacy.org.nz/privacy-principles/codes-of-practice/biometric-processing-privacy-code/","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"nz-privacy-act","shortName":"New Zealand Privacy Act","jurisdiction":"nz","jurisdictionName":"New Zealand","region":"apac","status":"amended","url":"https://regulations.fru.dev/regulations/nz-privacy-act","name":"Privacy Act 2020 (New Zealand), as amended by the Privacy Amendment Act 2025","topics":["privacy","breach-notification"],"citation":"Privacy Act 2020 (2020 No 31); Privacy Amendment Act 2025","enactedDate":"2020-06-30","effectiveDate":"2020-12-01","sourceUrl":"https://www.justice.govt.nz/justice-sector-policy/key-initiatives/enhancing-the-privacy-act/","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"ng-ndpa","shortName":"Nigeria NDPA","jurisdiction":"ng","jurisdictionName":"Nigeria","region":"mea","status":"amended","url":"https://regulations.fru.dev/regulations/ng-ndpa","name":"Nigeria Data Protection Act, 2023 and NDPA General Application and Implementation Directive (GAID) 2025","topics":["privacy","breach-notification","data-residency"],"citation":"Nigeria Data Protection Act, 2023","enactedDate":"2023-06-12","effectiveDate":"2023-06-12","sourceUrl":"https://ndpc.gov.ng/resources/","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"eu-nis2","shortName":"NIS2","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"amended","url":"https://regulations.fru.dev/regulations/eu-nis2","name":"Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS2 Directive)","topics":["cybersecurity","breach-notification"],"citation":"OJ L 333, 27.12.2022, p. 80","enactedDate":"2022-12-14","effectiveDate":"2023-01-16","sourceUrl":"https://eur-lex.europa.eu/eli/dir/2022/2555/oj","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-04-17","title":"Next biennial entity notification"}},{"id":"us-ny-algo-pricing","shortName":"NY Algorithmic Pricing Disclosure Act","jurisdiction":"us-ny","jurisdictionName":"New York","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ny-algo-pricing","name":"New York Algorithmic Pricing Disclosure Act (General Business Law section 349-a)","topics":["privacy","ai"],"citation":"L. 2025, ch. 58, Part X; N.Y. Gen. Bus. Law section 349-a","enactedDate":"2025-05-09","effectiveDate":"2025-11-10","sourceUrl":"https://ag.ny.gov/press-release/2025/attorney-general-james-warns-new-yorkers-about-algorithmic-pricing-new-law-takes","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-ny-cdpa","shortName":"NY Child Data Protection Act","jurisdiction":"us-ny","jurisdictionName":"New York","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ny-cdpa","name":"New York Child Data Protection Act","topics":["children","privacy"],"citation":"L. 2024, ch. 121 (S7695B); N.Y. Gen. Bus. Law Article 45-A","enactedDate":"2024-06-20","effectiveDate":"2025-06-20","sourceUrl":"https://www.nysenate.gov/legislation/bills/2023/S7695/amendment/B","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-ny-raise","shortName":"NY RAISE Act","jurisdiction":"us-ny","jurisdictionName":"New York","region":"us-states","status":"enacted","url":"https://regulations.fru.dev/regulations/us-ny-raise","name":"New York Responsible AI Safety and Education (RAISE) Act (S6953-B/A6453-B of 2025), as amended by chapter amendment S8828 of 2026","topics":["ai"],"citation":"S6953-B/A6453-B (2025); S8828 (2026, chapter amendment, Laws of 2026 ch. 96); N.Y. Gen. Bus. Law Art. 44-B","enactedDate":"2025-12-19","effectiveDate":"2027-01-01","sourceUrl":"https://www.governor.ny.gov/news/governor-hochul-signs-nation-leading-legislation-require-ai-frameworks-ai-frontier-models","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-01-01","title":"RAISE Act takes effect"}},{"id":"us-ny-safe-kids","shortName":"NY SAFE for Kids Act","jurisdiction":"us-ny","jurisdictionName":"New York","region":"us-states","status":"enacted","url":"https://regulations.fru.dev/regulations/us-ny-safe-kids","name":"Stop Addictive Feeds Exploitation (SAFE) for Kids Act","topics":["children","online-safety"],"citation":"L. 2024, ch. 120; N.Y. Gen. Bus. Law Article 45; 13 NYCRR Part 700","enactedDate":"2024-06-20","effectiveDate":"2027-01-25","sourceUrl":"https://ag.ny.gov/press-release/2026/attorney-general-james-and-governor-hochul-release-final-safe-kids-act-rules","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2027-01-25","title":"Act and rules take effect"}},{"id":"us-nyc-ll144","shortName":"NYC Local Law 144 (AEDT)","jurisdiction":"us-ny","jurisdictionName":"New York City, New York","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-nyc-ll144","name":"New York City Local Law 144 of 2021, Automated Employment Decision Tools (NYC Admin. Code 20-870 et seq.)","topics":["ai"],"citation":"NYC Local Law 144 of 2021; NYC Admin. Code 20-870 to 20-874; 6 RCNY 5-300 et seq.","enactedDate":"","effectiveDate":"2023-07-05","sourceUrl":"https://www.nyc.gov/site/dca/about/automated-employment-decision-tools.page","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-ny-dfs-500","shortName":"NYDFS Cybersecurity Regulation (Part 500)","jurisdiction":"us-ny","jurisdictionName":"New York","region":"us-states","status":"amended","url":"https://regulations.fru.dev/regulations/us-ny-dfs-500","name":"New York DFS Cybersecurity Requirements for Financial Services Companies (23 NYCRR Part 500), Second Amendment","topics":["cybersecurity","breach-notification","financial"],"citation":"23 NYCRR Part 500 (Second Amendment effective 2023-11-01)","enactedDate":"2023-11-01","effectiveDate":"2017-03-01","sourceUrl":"https://www.dfs.ny.gov/cybersecurity/23-NYCRR-Part-500","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-ok-okcdpa","shortName":"Oklahoma OKCDPA","jurisdiction":"us-ok","jurisdictionName":"Oklahoma","region":"us-states","status":"enacted","url":"https://regulations.fru.dev/regulations/us-ok-okcdpa","name":"Oklahoma Consumer Data Privacy Act (SB 546, 2026)","topics":["privacy"],"citation":"SB 546 (60th Leg., 2nd Sess., 2026)","enactedDate":"2026-03-20","effectiveDate":"2027-01-01","sourceUrl":"http://www.oklegislature.gov/BillInfo.aspx?Bill=SB546&Session=2600","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-01-01","title":"Oklahoma Consumer Data Privacy Act takes effect"}},{"id":"ca-on-bill194","shortName":"Ontario Bill 194","jurisdiction":"ca-on","jurisdictionName":"Ontario, Canada","region":"americas","status":"in_force","url":"https://regulations.fru.dev/regulations/ca-on-bill194","name":"Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024","topics":["cybersecurity","ai","privacy","children","breach-notification"],"citation":"S.O. 2024, c. 24","enactedDate":"2024-11-25","effectiveDate":"2025-01-29","sourceUrl":"https://www.ontario.ca/laws/statute/s24024","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-or-ocpa","shortName":"Oregon OCPA","jurisdiction":"us-or","jurisdictionName":"Oregon","region":"us-states","status":"amended","url":"https://regulations.fru.dev/regulations/us-or-ocpa","name":"Oregon Consumer Privacy Act (SB 619, 2023)","topics":["privacy","children"],"citation":"ORS 646A.570 to 646A.589 (Or. Laws 2023, ch. 369); amended by HB 2008 (2025) and HB 3875 (2025)","enactedDate":"2023-07-18","effectiveDate":"2024-07-01","sourceUrl":"https://www.oregonlegislature.gov/bills_laws/ors/ors646A.html","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-padfa","shortName":"PADFA","jurisdiction":"us","jurisdictionName":"United States (Federal)","region":"us-federal","status":"in_force","url":"https://regulations.fru.dev/regulations/us-padfa","name":"Protecting Americans' Data from Foreign Adversaries Act of 2024","topics":["privacy","data-residency"],"citation":"Pub. L. 118-50, div. I, sec. 2 (15 U.S.C. 9901)","enactedDate":"2024-04-24","effectiveDate":"2024-06-23","sourceUrl":"https://www.govinfo.gov/content/pkg/PLAW-118publ50/html/PLAW-118publ50.htm","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"pk-peca","shortName":"Pakistan PECA","jurisdiction":"pk","jurisdictionName":"Pakistan","region":"apac","status":"amended","url":"https://regulations.fru.dev/regulations/pk-peca","name":"Prevention of Electronic Crimes Act, 2016 (as amended by the Prevention of Electronic Crimes (Amendment) Act, 2025)","topics":["cybersecurity","online-safety"],"citation":"Act No. XL of 2016; amended by Act No. II of 2025","enactedDate":"","effectiveDate":"","sourceUrl":"https://na.gov.pk/uploads/documents/679b243193585_457.pdf","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"pe-ai-law","shortName":"Peru AI Law and Regulation","jurisdiction":"pe","jurisdictionName":"Peru","region":"americas","status":"in_force","url":"https://regulations.fru.dev/regulations/pe-ai-law","name":"Ley N° 31814, Ley que promueve el uso de la inteligencia artificial en favor del desarrollo económico y social del país, and its Regulation (Decreto Supremo N° 115-2025-PCM)","topics":["ai"],"citation":"Ley N° 31814; Decreto Supremo N° 115-2025-PCM","enactedDate":"2023-07-05","effectiveDate":"2026-01-20","sourceUrl":"https://www.gob.pe/institucion/pcm/normas-legales/7133522-115-2025-pcm","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2027-09-10","title":"Private sector: transport, commerce, labour"}},{"id":"pe-pdpl","shortName":"Peru PDPL and 2024 Regulation","jurisdiction":"pe","jurisdictionName":"Peru","region":"americas","status":"amended","url":"https://regulations.fru.dev/regulations/pe-pdpl","name":"Ley N° 29733, Ley de Protección de Datos Personales, and its Regulation (Decreto Supremo N° 016-2024-JUS)","topics":["privacy","breach-notification","data-residency"],"citation":"Ley N° 29733; Decreto Supremo N° 016-2024-JUS","enactedDate":"2024-11-30","effectiveDate":"2025-03-30","sourceUrl":"https://www.gob.pe/institucion/smv/normas-legales/6426760-016-2024-jus","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2026-11-30","title":"DPO required: medium companies"}},{"id":"ph-dpa","shortName":"Philippines Data Privacy Act","jurisdiction":"ph","jurisdictionName":"Philippines","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/ph-dpa","name":"Data Privacy Act of 2012 (Republic Act No. 10173)","topics":["privacy","breach-notification"],"citation":"Republic Act No. 10173","enactedDate":"2012-08-15","effectiveDate":"2012-09-08","sourceUrl":"https://privacy.gov.ph/data-privacy-act/","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"ca-pipeda","shortName":"PIPEDA","jurisdiction":"ca","jurisdictionName":"Canada","region":"americas","status":"in_force","url":"https://regulations.fru.dev/regulations/ca-pipeda","name":"Personal Information Protection and Electronic Documents Act","topics":["privacy","breach-notification"],"citation":"S.C. 2000, c. 5","enactedDate":"2000-04-13","effectiveDate":"2001-01-01","sourceUrl":"https://laws-lois.justice.gc.ca/eng/acts/p-8.6/","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"eu-pld","shortName":"Product Liability Directive","jurisdiction":"eu","jurisdictionName":"European Union","region":"eu","status":"enacted","url":"https://regulations.fru.dev/regulations/eu-pld","name":"Directive (EU) 2024/2853 on liability for defective products (new Product Liability Directive)","topics":["ai","cybersecurity"],"citation":"OJ L, 2024/2853, 18.11.2024","enactedDate":"2024-10-23","effectiveDate":"2024-12-08","sourceUrl":"https://eur-lex.europa.eu/eli/dir/2024/2853/oj","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2026-12-09","title":"Transposition deadline; old PLD repealed"}},{"id":"ca-qc-law25","shortName":"Quebec Law 25","jurisdiction":"ca-qc","jurisdictionName":"Quebec, Canada","region":"americas","status":"in_force","url":"https://regulations.fru.dev/regulations/ca-qc-law25","name":"Act to modernize legislative provisions as regards the protection of personal information (Law 25, formerly Bill 64)","topics":["privacy","breach-notification","biometrics"],"citation":"S.Q. 2021, c. 25 (amending CQLR c. P-39.1)","enactedDate":"2021-09-22","effectiveDate":"2022-09-22","sourceUrl":"https://www.legisquebec.gouv.qc.ca/en/document/cs/P-39.1","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-ri-dtppa","shortName":"Rhode Island RIDTPPA","jurisdiction":"us-ri","jurisdictionName":"Rhode Island","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ri-dtppa","name":"Rhode Island Data Transparency and Privacy Protection Act","topics":["privacy"],"citation":"R.I. Gen. Laws 6-48.1-1 et seq. (P.L. 2024, ch. 430 and ch. 453; H 7787 / S 2500)","enactedDate":"2024-06-28","effectiveDate":"2026-01-01","sourceUrl":"https://webserver.rilegislature.gov/Statutes/TITLE6/6-48.1/INDEX.htm","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"rw-dpp","shortName":"Rwanda DPP Law","jurisdiction":"rw","jurisdictionName":"Rwanda","region":"mea","status":"in_force","url":"https://regulations.fru.dev/regulations/rw-dpp","name":"Law No. 058/2021 of 13/10/2021 relating to the Protection of Personal Data and Privacy","topics":["privacy","data-residency","breach-notification"],"citation":"Law No. 058/2021 of 13/10/2021","enactedDate":"2021-10-13","effectiveDate":"2021-10-15","sourceUrl":"https://www.minijust.gov.rw/fileadmin/user_upload/Minijust/Official_gazettes_2/_________2021_Official_Gazettes/October/OG_Special_of_15.10.2021_Amakuru_bwite.pdf","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"sa-pdpl","shortName":"Saudi PDPL","jurisdiction":"sa","jurisdictionName":"Saudi Arabia","region":"mea","status":"in_force","url":"https://regulations.fru.dev/regulations/sa-pdpl","name":"Personal Data Protection Law (Royal Decree M/19 of 9/2/1443H, as amended by Royal Decree M/148 of 5/9/1444H)","topics":["privacy","data-residency","breach-notification"],"citation":"Royal Decree M/19 (1443H); amended by Royal Decree M/148 (1444H)","enactedDate":"2021-09-16","effectiveDate":"2023-09-14","sourceUrl":"https://sdaia.gov.sa/en/SDAIA/about/Documents/Personal%20Data%20English%20V2-23April2023-%20Reviewed-.pdf","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-sec-cyber","shortName":"SEC Cyber Disclosure Rules","jurisdiction":"us","jurisdictionName":"United States (Federal)","region":"us-federal","status":"in_force","url":"https://regulations.fru.dev/regulations/us-sec-cyber","name":"SEC Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure (Release No. 33-11216)","topics":["cybersecurity","breach-notification","financial"],"citation":"Release No. 33-11216; 88 FR 51896 (Aug. 4, 2023); Form 8-K Item 1.05; Regulation S-K Item 106","enactedDate":"2023-07-26","effectiveDate":"2023-09-05","sourceUrl":"https://www.federalregister.gov/documents/2023/08/04/2023-16194/cybersecurity-risk-management-strategy-governance-and-incident-disclosure","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-sec-reg-sp","shortName":"SEC Regulation S-P","jurisdiction":"us","jurisdictionName":"United States (Federal)","region":"us-federal","status":"amended","url":"https://regulations.fru.dev/regulations/us-sec-reg-sp","name":"Regulation S-P: Privacy of Consumer Financial Information and Safeguarding Customer Information (2024 amendments)","topics":["financial","privacy","cybersecurity","breach-notification"],"citation":"17 CFR Part 248; 89 FR 47688 (June 3, 2024)","enactedDate":"2024-05-16","effectiveDate":"2024-08-02","sourceUrl":"https://www.federalregister.gov/documents/2024/06/03/2024-11116/regulation-s-p-privacy-of-consumer-financial-information-and-safeguarding-customer-information","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"sg-cybersecurity-act","shortName":"Singapore Cybersecurity Act","jurisdiction":"sg","jurisdictionName":"Singapore","region":"apac","status":"amended","url":"https://regulations.fru.dev/regulations/sg-cybersecurity-act","name":"Cybersecurity Act 2018","topics":["cybersecurity","breach-notification"],"citation":"Act No. 9 of 2018; amended by Cybersecurity (Amendment) Act 2024 (Act No. 19 of 2024)","enactedDate":"2018-03-02","effectiveDate":"2018-08-31","sourceUrl":"https://sso.agc.gov.sg/Acts-Supp/9-2018/Published/20211231?DocDate=20180312","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"sg-online-safety-act","shortName":"Singapore Online Safety (Relief and Accountability) Act","jurisdiction":"sg","jurisdictionName":"Singapore","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/sg-online-safety-act","name":"Online Safety (Relief and Accountability) Act 2025","topics":["online-safety","children","privacy"],"citation":"Act No. 23 of 2025","enactedDate":"2025-11-25","effectiveDate":"2026-06-29","sourceUrl":"https://sso.agc.gov.sg/Acts-Supp/23-2025/Published/20251208?DocDate=20251208","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"sg-pdpa","shortName":"Singapore PDPA","jurisdiction":"sg","jurisdictionName":"Singapore","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/sg-pdpa","name":"Personal Data Protection Act 2012 (Singapore)","topics":["privacy","breach-notification"],"citation":"Act 26 of 2012; amended by Personal Data Protection (Amendment) Act 2020","enactedDate":"2012-10-15","effectiveDate":"2014-07-02","sourceUrl":"https://www.pdpc.gov.sg/overview-of-pdpa/the-legislation/personal-data-protection-act","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"za-cybercrimes-act","shortName":"South Africa Cybercrimes Act","jurisdiction":"za","jurisdictionName":"South Africa","region":"mea","status":"in_force","url":"https://regulations.fru.dev/regulations/za-cybercrimes-act","name":"Cybercrimes Act 19 of 2020","topics":["cybersecurity","online-safety","breach-notification"],"citation":"Act 19 of 2020 (Gazette 44651)","enactedDate":"2021-06-01","effectiveDate":"2021-12-01","sourceUrl":"https://www.gov.za/documents/cybercrimes-act-19-2020-1-jun-2021-0000","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"za-popia","shortName":"South Africa POPIA","jurisdiction":"za","jurisdictionName":"South Africa","region":"mea","status":"in_force","url":"https://regulations.fru.dev/regulations/za-popia","name":"Protection of Personal Information Act, 2013 (Act No. 4 of 2013)","topics":["privacy","breach-notification"],"citation":"Act No. 4 of 2013","enactedDate":"2013-11-19","effectiveDate":"2020-07-01","sourceUrl":"https://www.gov.za/documents/protection-personal-information-act","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"kr-ai-basic-act","shortName":"South Korea AI Basic Act","jurisdiction":"kr","jurisdictionName":"South Korea","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/kr-ai-basic-act","name":"Framework Act on the Development of Artificial Intelligence and Establishment of a Foundation for Trust (AI Basic Act)","topics":["ai"],"citation":"Framework Act on AI Development and Trust (promulgated Jan 2025) and its Enforcement Decree","enactedDate":"2025-01-21","effectiveDate":"2026-01-22","sourceUrl":"https://www.law.go.kr/법령/인공지능발전과신뢰기반조성등에관한기본법","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"kr-pipa","shortName":"South Korea PIPA","jurisdiction":"kr","jurisdictionName":"South Korea","region":"apac","status":"amended","url":"https://regulations.fru.dev/regulations/kr-pipa","name":"Personal Information Protection Act (as amended by Act No. 21445, 2026)","topics":["privacy","breach-notification","biometrics","data-residency"],"citation":"Act No. 10465 (2011); latest amendment Act No. 21445 (promulgated 10 Mar 2026)","enactedDate":"2011-03-29","effectiveDate":"2011-09-30","sourceUrl":"https://www.law.go.kr/법령/개인정보보호법","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-07-01","title":"Mandatory ISMS-P certification"}},{"id":"ch-fadp","shortName":"Swiss revised FADP (nFADP)","jurisdiction":"ch","jurisdictionName":"Switzerland","region":"uk-europe","status":"in_force","url":"https://regulations.fru.dev/regulations/ch-fadp","name":"Federal Act on Data Protection (revised FADP) of 25 September 2020","topics":["privacy","breach-notification"],"citation":"SR 235.1","enactedDate":"2020-09-25","effectiveDate":"2023-09-01","sourceUrl":"https://www.fedlex.admin.ch/eli/cc/2022/491/en","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"tw-ai-basic-act","shortName":"Taiwan AI Basic Act","jurisdiction":"tw","jurisdictionName":"Taiwan","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/tw-ai-basic-act","name":"Artificial Intelligence Basic Act","topics":["ai"],"citation":"Presidential Order Hua-Zong-Yi-Zi No. 11500001671 (14 Jan 2026)","enactedDate":"2026-01-14","effectiveDate":"2026-01-14","sourceUrl":"https://law.moj.gov.tw/LawClass/LawAll.aspx?pcode=H0160093","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2028-01-14","title":"Agencies must align laws with the Act"}},{"id":"tw-pdpa","shortName":"Taiwan PDPA","jurisdiction":"tw","jurisdictionName":"Taiwan","region":"apac","status":"amended","url":"https://regulations.fru.dev/regulations/tw-pdpa","name":"Personal Data Protection Act","topics":["privacy","breach-notification"],"citation":"Personal Data Protection Act (as amended 11 Nov 2025)","enactedDate":"1995-08-11","effectiveDate":"2012-10-01","sourceUrl":"https://law.moj.gov.tw/LawClass/LawAll.aspx?pcode=I0050021","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-take-it-down","shortName":"TAKE IT DOWN Act","jurisdiction":"us","jurisdictionName":"United States (Federal)","region":"us-federal","status":"in_force","url":"https://regulations.fru.dev/regulations/us-take-it-down","name":"Tools to Address Known Exploitation by Immobilizing Technological Deepfakes on Websites and Networks Act (TAKE IT DOWN Act)","topics":["online-safety","ai","children","privacy"],"citation":"Pub. L. 119-12 (S. 146)","enactedDate":"2025-05-19","effectiveDate":"2025-05-19","sourceUrl":"https://www.congress.gov/bill/119th-congress/senate-bill/146","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-tn-elvis","shortName":"Tennessee ELVIS Act","jurisdiction":"us-tn","jurisdictionName":"Tennessee","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-tn-elvis","name":"Ensuring Likeness, Voice, and Image Security Act of 2024 (ELVIS Act)","topics":["ai","privacy","biometrics"],"citation":"Pub. Ch. 588 (2024) (HB 2091/SB 2096); Tenn. Code Ann. section 47-25-1101 et seq.","enactedDate":"2024-03-26","effectiveDate":"2024-07-01","sourceUrl":"https://wapp.capitol.tn.gov/apps/BillInfo/Default.aspx?BillNumber=HB2091&GA=113","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-tn-tipa","shortName":"Tennessee TIPA","jurisdiction":"us-tn","jurisdictionName":"Tennessee","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-tn-tipa","name":"Tennessee Information Protection Act (HB 1181 / SB 73, 2023)","topics":["privacy"],"citation":"Tenn. Code Ann. 47-18-3301 et seq. (Pub. Ch. 408, 2023)","enactedDate":"2023-05-24","effectiveDate":"2025-07-01","sourceUrl":"https://wapp.capitol.tn.gov/apps/BillInfo/Default.aspx?BillNumber=HB1181&GA=113","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-tx-app-store","shortName":"Texas App Store Accountability Act","jurisdiction":"us-tx","jurisdictionName":"Texas","region":"us-states","status":"enacted","url":"https://regulations.fru.dev/regulations/us-tx-app-store","name":"Texas App Store Accountability Act (SB 2420)","topics":["children","privacy","online-safety"],"citation":"Acts 2025, 89th Leg., R.S. (SB 2420); Tex. Bus. & Com. Code section 121.021 et seq.","enactedDate":"2025-05-27","effectiveDate":"2026-01-01","sourceUrl":"https://capitol.texas.gov/BillLookup/History.aspx?LegSess=89R&Bill=SB2420","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-tx-tdpsa","shortName":"Texas TDPSA","jurisdiction":"us-tx","jurisdictionName":"Texas","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-tx-tdpsa","name":"Texas Data Privacy and Security Act (HB 4, 2023)","topics":["privacy"],"citation":"Tex. Bus. & Com. Code ch. 541 (Acts 2023, 88th Leg., R.S., HB 4)","enactedDate":"2023-06-18","effectiveDate":"2024-07-01","sourceUrl":"https://capitol.texas.gov/BillLookup/History.aspx?LegSess=88R&Bill=HB4","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"th-cybersecurity-act","shortName":"Thailand Cybersecurity Act","jurisdiction":"th","jurisdictionName":"Thailand","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/th-cybersecurity-act","name":"Cybersecurity Act B.E. 2562 (2019)","topics":["cybersecurity","breach-notification"],"citation":"Cybersecurity Act B.E. 2562 (2019)","enactedDate":"","effectiveDate":"2019-05-28","sourceUrl":"https://www.ncsa.or.th/about","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"th-pdpa","shortName":"Thailand PDPA","jurisdiction":"th","jurisdictionName":"Thailand","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/th-pdpa","name":"Personal Data Protection Act B.E. 2562 (2019)","topics":["privacy","breach-notification","data-residency"],"citation":"Government Gazette Vol. 136, Part 69 Kor, 27 May 2019","enactedDate":"2019-05-24","effectiveDate":"2022-06-01","sourceUrl":"https://www.ratchakitcha.soc.go.th/DATA/PDF/2562/A/069/T_0052.PDF","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-tx-traiga","shortName":"TRAIGA","jurisdiction":"us-tx","jurisdictionName":"Texas","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-tx-traiga","name":"Texas Responsible Artificial Intelligence Governance Act (HB 149, 89th Legislature)","topics":["ai","biometrics"],"citation":"Tex. HB 149 (89th Leg., R.S., 2025)","enactedDate":"2025-06-22","effectiveDate":"2026-01-01","sourceUrl":"https://capitol.texas.gov/BillLookup/History.aspx?LegSess=89R&Bill=HB149","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"tr-kvkk","shortName":"Turkey KVKK","jurisdiction":"tr","jurisdictionName":"Turkey","region":"uk-europe","status":"amended","url":"https://regulations.fru.dev/regulations/tr-kvkk","name":"Law No. 6698 on the Protection of Personal Data (KVKK), as amended by Law No. 7499","topics":["privacy","data-residency"],"citation":"Law No. 6698 (OG 7 April 2016); amended by Law No. 7499 (OG 12 March 2024)","enactedDate":"2016-03-24","effectiveDate":"2016-04-07","sourceUrl":"https://www.resmigazete.gov.tr/eskiler/2024/03/20240312-1.htm","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"ae-child-digital-safety","shortName":"UAE Child Digital Safety Law","jurisdiction":"ae","jurisdictionName":"United Arab Emirates","region":"mea","status":"in_force","url":"https://regulations.fru.dev/regulations/ae-child-digital-safety","name":"Federal Decree by Law No. 26 of 2025 Regarding Child Digital Safety","topics":["children","online-safety","privacy"],"citation":"Federal Decree by Law No. (26) of 2025; Cabinet Resolution No. (106) of 2026","enactedDate":"2025-10-01","effectiveDate":"2026-01-01","sourceUrl":"https://uaelegislation.gov.ae/en/legislations/3912","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2027-01-01","title":"Compliance deadline under the Decree by Law"}},{"id":"ae-pdpl","shortName":"UAE PDPL","jurisdiction":"ae","jurisdictionName":"United Arab Emirates","region":"mea","status":"in_force","url":"https://regulations.fru.dev/regulations/ae-pdpl","name":"Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data","topics":["privacy","breach-notification","data-residency"],"citation":"Federal Decree-Law No. 45 of 2021","enactedDate":"2021-09-20","effectiveDate":"2022-01-02","sourceUrl":"https://uaelegislation.gov.ae/en/legislations/1972","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"uk-csr-bill","shortName":"UK Cyber Security and Resilience Bill","jurisdiction":"uk","jurisdictionName":"United Kingdom","region":"uk-europe","status":"proposed","url":"https://regulations.fru.dev/regulations/uk-csr-bill","name":"Cyber Security and Resilience (Network and Information Systems) Bill","topics":["cybersecurity","breach-notification"],"citation":"Bill 4035 (HL Bill, 2026 session)","enactedDate":"","effectiveDate":"","sourceUrl":"https://bills.parliament.uk/bills/4035","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"uk-dpa-2018","shortName":"UK Data Protection Act 2018","jurisdiction":"uk","jurisdictionName":"United Kingdom","region":"uk-europe","status":"amended","url":"https://regulations.fru.dev/regulations/uk-dpa-2018","name":"Data Protection Act 2018","topics":["privacy","breach-notification","children"],"citation":"2018 c. 12","enactedDate":"2018-05-23","effectiveDate":"2018-05-25","sourceUrl":"https://www.legislation.gov.uk/ukpga/2018/12/contents","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"uk-gdpr","shortName":"UK GDPR","jurisdiction":"uk","jurisdictionName":"United Kingdom","region":"uk-europe","status":"amended","url":"https://regulations.fru.dev/regulations/uk-gdpr","name":"UK General Data Protection Regulation and Data Protection Act 2018","topics":["privacy","breach-notification"],"citation":"Data Protection Act 2018 c. 12; UK GDPR (retained Regulation (EU) 2016/679)","enactedDate":"2018-05-23","effectiveDate":"2018-05-25","sourceUrl":"https://www.legislation.gov.uk/ukpga/2018/12/contents","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"uk-ipa-2024","shortName":"UK Investigatory Powers (Amendment) Act 2024","jurisdiction":"uk","jurisdictionName":"United Kingdom","region":"uk-europe","status":"enacted","url":"https://regulations.fru.dev/regulations/uk-ipa-2024","name":"Investigatory Powers (Amendment) Act 2024","topics":["privacy","data-access","cybersecurity"],"citation":"2024 c. 9","enactedDate":"2024-04-25","effectiveDate":"","sourceUrl":"https://www.legislation.gov.uk/ukpga/2024/9/contents","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"uk-osa","shortName":"UK Online Safety Act","jurisdiction":"uk","jurisdictionName":"United Kingdom","region":"uk-europe","status":"in_force","url":"https://regulations.fru.dev/regulations/uk-osa","name":"Online Safety Act 2023","topics":["online-safety","children"],"citation":"2023 c. 50","enactedDate":"2023-10-26","effectiveDate":"2025-03-17","sourceUrl":"https://www.legislation.gov.uk/ukpga/2023/50/contents","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"uk-psti","shortName":"UK PSTI Act (product security)","jurisdiction":"uk","jurisdictionName":"United Kingdom","region":"uk-europe","status":"in_force","url":"https://regulations.fru.dev/regulations/uk-psti","name":"Product Security and Telecommunications Infrastructure Act 2022 and the Product Security Regulations 2023","topics":["cybersecurity"],"citation":"2022 c. 46; SI 2023/1007","enactedDate":"2022-12-06","effectiveDate":"2024-04-29","sourceUrl":"https://www.legislation.gov.uk/ukpga/2022/46/contents","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"uk-telecom-security","shortName":"UK Telecommunications Security Act","jurisdiction":"uk","jurisdictionName":"United Kingdom","region":"uk-europe","status":"in_force","url":"https://regulations.fru.dev/regulations/uk-telecom-security","name":"Telecommunications (Security) Act 2021 and the Electronic Communications (Security Measures) Regulations 2022","topics":["cybersecurity","breach-notification"],"citation":"2021 c. 31; SI 2022/933","enactedDate":"2021-11-17","effectiveDate":"2022-10-01","sourceUrl":"https://www.legislation.gov.uk/ukpga/2021/31/contents","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"uy-pdpl","shortName":"Uruguay Law 18.331","jurisdiction":"uy","jurisdictionName":"Uruguay","region":"americas","status":"amended","url":"https://regulations.fru.dev/regulations/uy-pdpl","name":"Ley N° 18.331 de Protección de Datos Personales","topics":["privacy","data-residency"],"citation":"Ley N° 18.331","enactedDate":"2008-08-11","effectiveDate":"2008-08-18","sourceUrl":"https://www.impo.com.uy/bases/leyes/18331-2008","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"us-ut-aipa","shortName":"Utah AI Policy Act","jurisdiction":"us-ut","jurisdictionName":"Utah","region":"us-states","status":"amended","url":"https://regulations.fru.dev/regulations/us-ut-aipa","name":"Utah Artificial Intelligence Policy Act (SB 149, 2024), as amended by SB 226 and SB 332 (2025)","topics":["ai"],"citation":"Utah Code Title 13, Ch. 72 and Ch. 75; SB 149 (2024); SB 226 (2025); SB 332 (2025); Utah Code 63I-2-213","enactedDate":"2024-03-13","effectiveDate":"2024-05-01","sourceUrl":"https://le.utah.gov/~2025/bills/static/SB0332.html","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-07-01","title":"Scheduled repeal of Title 13, Ch. 72"}},{"id":"us-ut-app-store","shortName":"Utah App Store Accountability Act","jurisdiction":"us-ut","jurisdictionName":"Utah","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-ut-app-store","name":"Utah App Store Accountability Act (SB 142)","topics":["children","privacy","online-safety"],"citation":"2025 Utah Laws (S.B. 142); Utah Code section 13-75-101 et seq.","enactedDate":"","effectiveDate":"2025-05-07","sourceUrl":"https://le.utah.gov/Session/2025/bills/enrolled/SB0142.pdf","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2026-12-31","title":"Private right of action begins"}},{"id":"us-ut-ucpa","shortName":"Utah UCPA","jurisdiction":"us-ut","jurisdictionName":"Utah","region":"us-states","status":"amended","url":"https://regulations.fru.dev/regulations/us-ut-ucpa","name":"Utah Consumer Privacy Act (SB 227, 2022)","topics":["privacy"],"citation":"Utah Code 13-61-101 et seq. (Laws 2022, ch. 462; amended 2025 ch. 468, 2026 ch. 193)","enactedDate":"2022-03-24","effectiveDate":"2023-12-31","sourceUrl":"https://le.utah.gov/xcode/Title13/Chapter61/13-61.html","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-01-01","title":"UCPA extends to motor vehicle manufacturers"}},{"id":"us-vt-aadc","shortName":"Vermont Kids Code","jurisdiction":"us-vt","jurisdictionName":"Vermont","region":"us-states","status":"enacted","url":"https://regulations.fru.dev/regulations/us-vt-aadc","name":"Vermont Age-Appropriate Design Code (Act 63 of 2025, S.69)","topics":["children","privacy","online-safety"],"citation":"2025 Vt. Acts No. 63; 9 V.S.A. sections 2449a to 2449j","enactedDate":"2025-06-12","effectiveDate":"2027-01-01","sourceUrl":"https://legislature.vermont.gov/bill/status/2026/S.69","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2027-01-01","title":"Takes effect"}},{"id":"us-vt-vdposa","shortName":"Vermont VDPOSA","jurisdiction":"us-vt","jurisdictionName":"Vermont","region":"us-states","status":"enacted","url":"https://regulations.fru.dev/regulations/us-vt-vdposa","name":"Vermont Data Privacy and Online Surveillance Act (S.71, Act 145 of 2026)","topics":["privacy","health","ai"],"citation":"S.71, Act No. 145 (2026)","enactedDate":"2026-06-16","effectiveDate":"2028-01-01","sourceUrl":"https://legislature.vermont.gov/bill/status/2026/S.71","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2028-01-01","title":"Vermont Data Privacy and Online Surveillance Act takes effect"}},{"id":"vn-ai-law","shortName":"Vietnam AI Law","jurisdiction":"vn","jurisdictionName":"Vietnam","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/vn-ai-law","name":"Law on Artificial Intelligence (Law No. 134/2025/QH15)","topics":["ai"],"citation":"Law No. 134/2025/QH15","enactedDate":"2025-12-10","effectiveDate":"2026-03-01","sourceUrl":"https://beta-en.mic.gov.vn/first-ever-law-on-artificial-intelligence-approved-197251215231241888.htm","lastVerified":"2026-09-22","unverified":false,"nextDeadline":{"date":"2027-03-01","title":"Transition ends for existing AI systems (general)"}},{"id":"vn-cybersecurity-law","shortName":"Vietnam Cybersecurity Law 2025","jurisdiction":"vn","jurisdictionName":"Vietnam","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/vn-cybersecurity-law","name":"Cybersecurity Law 2025 (Law No. 116/2025/QH15)","topics":["cybersecurity","data-residency","online-safety"],"citation":"Law No. 116/2025/QH15","enactedDate":"2025-12-10","effectiveDate":"2026-07-01","sourceUrl":"https://vanban.chinhphu.vn/?pageid=27160&docid=216499","lastVerified":"2026-09-25","unverified":false,"nextDeadline":{"date":"2027-07-01","title":"Transition ends for existing systems and products"}},{"id":"vn-data-law","shortName":"Vietnam Law on Data","jurisdiction":"vn","jurisdictionName":"Vietnam","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/vn-data-law","name":"Law on Data (Law No. 60/2024/QH15)","topics":["data-residency","data-access","cybersecurity"],"citation":"Law No. 60/2024/QH15","enactedDate":"2024-11-30","effectiveDate":"2025-07-01","sourceUrl":"https://vanban.chinhphu.vn/?pageid=27160&docid=212488","lastVerified":"2026-09-25","unverified":false,"nextDeadline":null},{"id":"vn-pdpl","shortName":"Vietnam PDPL","jurisdiction":"vn","jurisdictionName":"Vietnam","region":"apac","status":"in_force","url":"https://regulations.fru.dev/regulations/vn-pdpl","name":"Law on Personal Data Protection (Law No. 91/2025/QH15)","topics":["privacy","data-residency","children","breach-notification"],"citation":"Law No. 91/2025/QH15; implemented by Decree No. 356/2025/ND-CP","enactedDate":"2025-06-26","effectiveDate":"2026-01-01","sourceUrl":"https://vanban.chinhphu.vn/?pageid=27160&docid=214590","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-va-vcdpa","shortName":"Virginia VCDPA","jurisdiction":"us-va","jurisdictionName":"Virginia","region":"us-states","status":"amended","url":"https://regulations.fru.dev/regulations/us-va-vcdpa","name":"Virginia Consumer Data Protection Act (SB 1392 / HB 2307, 2021)","topics":["privacy","children","online-safety"],"citation":"Va. Code 59.1-575 to 59.1-585 (Acts 2021, Sp. Sess. I, ch. 35 and 36); amended 2025 (SB 854) and 2026 (SB 338)","enactedDate":"2021-03-02","effectiveDate":"2023-01-01","sourceUrl":"https://law.lis.virginia.gov/vacode/title59.1/chapter53/","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null},{"id":"us-wa-mhmda","shortName":"Washington My Health My Data Act","jurisdiction":"us-wa","jurisdictionName":"Washington","region":"us-states","status":"in_force","url":"https://regulations.fru.dev/regulations/us-wa-mhmda","name":"Washington My Health My Data Act (HB 1155, Laws of 2023, ch. 191; RCW 19.373)","topics":["health","privacy"],"citation":"RCW 19.373; Laws of 2023, ch. 191 (HB 1155)","enactedDate":"2023-04-27","effectiveDate":"2024-03-31","sourceUrl":"https://www.atg.wa.gov/protecting-washingtonians-personal-health-data-and-privacy","lastVerified":"2026-09-22","unverified":false,"nextDeadline":null}],"total":190,"limit":200,"offset":0,"next":null}