Breach and incident notification rules

Act on the Prevention of Damage from Unauthorized Acts against Important Computers (Act No. 42 of 2025)

Cyber Security and Resilience (Network and Information Systems) Bill

Law No. 151 of 2020 on the Protection of Personal Data and its Executive Regulations

Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025

Ley N° 29733, Ley de Protección de Datos Personales, and its Regulation (Decreto Supremo N° 016-2024-JUS)

Ley Nº 21.719 que regula la protección y el tratamiento de los datos personales y crea la Agencia de Protección de Datos Personales

Privacy Act 1988 (Cth), as amended by the Privacy and Other Legislation Amendment Act 2024

Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Pelindungan Data Pribadi)

Regulation (EU) 2016/679 (General Data Protection Regulation)

Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS2 Directive)

Personal Information Protection Act (as amended by Act No. 21445, 2026)

Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act)

Protection of Privacy Act

Cyber Security Act 2024 (Cth) and Cyber Security (Ransomware Payment Reporting) Rules 2025

Security of Critical Infrastructure Act 2018

Lei Geral de Proteção de Dados Pessoais (Law No. 13.709/2018)

Bill C-36, An Act to enact the Protecting Privacy and Consumer Data Act

Critical Cyber Systems Protection Act (enacted by Bill C-8, An Act respecting cyber security)

Administrative Measures for National Cybersecurity Incident Reporting

Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) and proposed implementing rule (6 CFR Part 226)

Proposal for a Regulation amending Regulations (EU) 2016/679, 2018/1724, 2018/1725, 2023/2854 and Directives 2002/58/EC, 2022/2555 and 2022/2557 as regards the simplification of the digital legislative framework (Digital Omnibus)

Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (Digital Operational Resilience Act)

Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector (ePrivacy Directive), as amended by Directive 2009/136/EC

FCC Data Breach Reporting Requirements for telecommunications carriers, interconnected VoIP and TRS providers (47 CFR 64.2011, 64.5111)

FTC Health Breach Notification Rule (16 CFR Part 318), as amended 2024

FTC Standards for Safeguarding Customer Information (Safeguards Rule), 16 CFR Part 314, under the Gramm-Leach-Bliley Act

HIPAA Privacy, Security and Breach Notification Rules (45 CFR Parts 160 and 164)

Protection of Critical Infrastructures (Computer Systems) Ordinance (Cap. 653)

Directions under section 70B(6) of the Information Technology Act, 2000 relating to information security practices, procedure, prevention, response and reporting of cyber incidents for Safe and Trusted Internet

Privacy Protection Law, 5741-1981 (Amendment No. 13)

Act on the Protection of Personal Information (Act No. 57 of 2003), as amended including the 2026 amendment act

Data Protection Act, 2019 (No. 24 of 2019)

Cyber Security Act 2024 (Act 854)

Personal Data Protection Act 2010 (Act 709), as amended by the Personal Data Protection (Amendment) Act 2024 (Act A1727)

Privacy Act 2020 (New Zealand), as amended by the Privacy Amendment Act 2025

Nigeria Data Protection Act, 2023 and NDPA General Application and Implementation Directive (GAID) 2025

New York DFS Cybersecurity Requirements for Financial Services Companies (23 NYCRR Part 500), Second Amendment

Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024

Data Privacy Act of 2012 (Republic Act No. 10173)

Personal Information Protection and Electronic Documents Act

Act to modernize legislative provisions as regards the protection of personal information (Law 25, formerly Bill 64)

Law No. 058/2021 of 13/10/2021 relating to the Protection of Personal Data and Privacy

Personal Data Protection Law (Royal Decree M/19 of 9/2/1443H, as amended by Royal Decree M/148 of 5/9/1444H)

SEC Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure (Release No. 33-11216)

Regulation S-P: Privacy of Consumer Financial Information and Safeguarding Customer Information (2024 amendments)

Cybersecurity Act 2018

Personal Data Protection Act 2012 (Singapore)

Cybercrimes Act 19 of 2020

Protection of Personal Information Act, 2013 (Act No. 4 of 2013)

Federal Act on Data Protection (revised FADP) of 25 September 2020

Personal Data Protection Act

Cybersecurity Act B.E. 2562 (2019)

Personal Data Protection Act B.E. 2562 (2019)

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data

Data Protection Act 2018

UK General Data Protection Regulation and Data Protection Act 2018

Telecommunications (Security) Act 2021 and the Electronic Communications (Security Measures) Regulations 2022

Law on Personal Data Protection (Law No. 91/2025/QH15)