Your can count on us, with layer upon layer of
Reinforced Data Integrity and Legislation
As the Global Institute driving Leadership Integrity, we also drive integrity and probity with our data sharing Partners.
As a UK registered organisation, with Digital operations in Ireland and Germany, we are bound to apply, and legally required to adhere to The UK and EU General Data Protection Regulation (GDPR), which is the strongest privacy and security law in the world. Failure of an organisation to adhere to the regulations results in a fine of up to 20 Million EUR or 4% of global annual turnover.
The GDPR defines:- Individuals’ fundamental rights in the digital age
- The obligations of those processing data
- Methods for ensuring compliance
- Sanctions for those in breach of the rules
Our Partners are therefore assured that our Data Protection and Privacy matches or exceeds the legal requirements of their jurisdiction. Our Data Sharing agreements exceed all of the following international legislation in non-EU Countries and matches that of UK and EU countries. For countries which have no data protection legislation, again we are bound to apply the UK and EU GDPR.
Data Protection and Privacy Legislation Worldwide
| Country | Title of Legislation/Draft Legislation |
|---|---|
| Afghanistan | No Legislation - UK Data Protection Act 2018 applied as standard |
| Albania | Law No. 9887 on the Protection of Personal Data, 2008 (in English) |
| Algeria | Loi n° 18-07 du 10 juin 2018 relative à la protection des personnes physiques dans le traitement des données à caractère personnel (in French) |
| Andorra | Qualified law 15/2003 on personal data protection (in Catalan) |
| Angola | Lei No. 22/11 da Protecção de Dados Pessoais de 17 de Junho (in Portuguese) |
| Angola | Regulamento das Tecnologias e dos Serviços da Sociedade da Informação, Decreto Presidencial n.º202/11 (in Portuguese) |
| Antigua and Barbuda | Data Protection Act 2013 (in English) |
| Argentina | Constitución de la Nación Argentina, Ley Nº 24.430, Sancionada el 15 de Diciembre de 1994 (in Spanish) |
| Argentina | Ley 25.326 de Protección de los Datos Personales (in Spanish) |
| Argentina | Resolución 4/2019, RESOL-2019-4-APN-AAIP |
| Argentina | Decreto 1558/2001 (in Spanish) |
| Argentina | Disposición 60 - E/2016 (in Spanish) |
| Argentina | Resolución 159/2018 - RESOL-2018-159-APN-AAIP (in Spanish) |
| Argentina | Convenio 108 aprobado por Ley Nº 27.483 (in Spanish) |
| Armenia | Law of the Republic of Armenia on the Protection of Personal Data (in English) |
| Australia | Privacy Act 1988 (in English) |
| Austria | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Austria | Federal Act concerning the Protection of Personal Data (DSG) (in German) |
| Austria | Datenschutzgesetz 2000 (in German) |
| Azerbaijan | Law on Personal Data 2010 (in Azerbaijani) |
| Bahamas | Data Protection (Privacy of Personal Information) Act 2003 (in English) |
| Bangladesh | No Legislation - UK Data Protection Act 2018 applied as standard |
| Bahrain | Law on the Protection of Personal Data (in Arabic) |
| Barbados | Bill - Data Protection passed in Senate and House of Assembly, 2019 (in English) |
| Belarus | Law Of The Republic Of Belarus On Information, Informatization and Protection of information No. 455-Z/2008 (In Russian) |
| Belarus | Law Of The Republic Of Belarus On Information, Informatization and Protection of information No. 455-Z/2008 (in English, unofficial translation) |
| Belgium | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Belgium | Law on electronic communication (amended in 2014) (in English) |
| Belize | No Legislation - UK Data Protection Act 2018 applied as standard |
| Benin | Loi n° 2017-20 portant code du numérique en République du Bénin (in French) |
| Bhutan | Bhutan Information, Communications and Media Act 2018 (in English and Dzongkha) |
| Bolivia (Plurinational State of) | Ley general de Telecomunicaciones, Tecnologías de Información y Comunicación – Ley 167 de 08 agosto de 2011 (in Spanish) |
| Bosnia and Herzegovina | Law on the Protection of Personal Data (Unofficial in English) |
| Bosnia and Herzegovina | General regulations of the Personal Data Protection Agency (in English) |
| Botswana | Bill - Data protection Law 2018 (in English) |
| Brazil | Protection of Personal Data Bill 2011 (in Portuguese) |
| Brazil | Internet Act (Law Nº 12.965, April 23rd 2014). Articles 7 and 8 (in Portuguese) |
| Brazil | General Data Privacy Law (in Portuguese) |
| Brunei-Darussalam | No Legislation - UK Data Protection Act 2018 applied as standard |
| Bulgaria | Law for Protection of Personal Data (in English) |
| Bulgaria | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Burkina Faso | Loi n° 010-2004/AN Portant Protection des Données à Caractère Personnel (in French) |
| Burundi | No Legislation - UK Data Protection Act 2018 applied as standard |
| Cambodia | Article 32 of the Law on Electronic Commerce (2019) (in English) |
| Cameroon | Loi n*2010/012 du 21 décembre 2010 relative à la cybersécurité et à la cybercriminalité (in French) |
| Canada | Personal Information Protection and Electronic Documents Act (in English and French) |
| Cape Verde | Regime Jurídico Geral de Protecção de Dados Pessoais a Pessoas Singulares Lei n° 133/V/2001 of 22 January 2001 (in Portuguese) |
| Central Africa Republic | No Legislation - UK Data Protection Act 2018 applied as standard |
| Chad | Law 007/PR/2015 on the Protection of Personal Data (in French and Arabic) |
| Chile | Law 19.628 (in Spanish) |
| Chile | Boletín N° 11144-07 (in Spanish) |
| China | The Decision of the Standing Committee of the National People's Congress on Strengthening the Network Information Protection, 2012 (In English, unofficial translation) |
| China | The Decision of the Standing Committee of the National People's Congress on Strengthening the Network Information Protection, 2012 (in Chinese) |
| Colombia | Ley 1581 de 2012 - Marco general de la protección de los datos personales en Colombia (in Spanish) |
| Congo | Loi n° 29-2019 du 10 octobre 2019 portant protection des données à caractère personnel (in French) |
| Costa Rica | Political Constitution of the Republic of Costa Rica, consolidated version to October 5, 2005 (in English) |
| Costa Rica | Constitución Política de la República de Costa Rica, versión refundida al 5 de octubre de 2005 (in Spanish) |
| Costa Rica | Ley de protección de la persona frente al tratamiento de sus datos personales - Ley n.º 8968 (in Spanish) |
| Côte d'Ivoire | Loi n° 2013-450 du 19 juin 2013 relative à la protection des données à caractère personnel (in French) |
| Croatia | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Croatia | Act on Personal Data Protection (in English) |
| Cuba | No Legislation - UK Data Protection Act 2018 applied as standard |
| Cyprus | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Cyprus | The Processing of Personal Data (Protection of the Individual) Law (in English) |
| Czech Republic | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Czech Republic | Act No. 11/2019 on changes related to Act on Processing Personal Data (In Czech) |
| Czech Republic | Act No. 110/2019 on Processing of Personal Data (In Czech) |
| Denmark | Act on Processing of Personal Data (in Danish) |
| Denmark | Act on Processing of Personal Data (in English) |
| Denmark | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Dominica | Bill - Privacy and Data Protection |
| Dominican Republic | Ley No. 172-13, sobre Protección de Datos de Carácter Personal del 13 de diciembre de 2013 (in English) |
| Ecuador | Protection of Privacy and Personal Data Bill 2019 (in Spanish) |
| Egypt | Personal Data Protection Law, Law No. 151 of 2020 (in Arabic) |
| El Salvador | Bill - Ley de Comercio Electronico y Comunicaciones (in Spanish) |
| Equatorial Guinea | Law No. 1/2016, Law on Personal Data Protection |
| Eritrea | No Legislation - UK Data Protection Act 2018 applied as standard |
| Estonia | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Estonia | Data Protection Act (in English) |
| Eswatini | Bill Data Protection, 2013 |
| Fiji | No Legislation - UK Data Protection Act 2018 applied as standard |
| Finland | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Finland | Personal Data Act (in English, unofficial translation) |
| France | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| France | Law relating to the protection of individuals against the processing of personal data (in English) |
| France | Loi 78-17 du 6 janvier 1978 relative à l'informatique, aux fichiers et aux libertés modifiée (in French) |
| Gabon | Loi n°001/2011 relative à la protection des données à caractère personnel (in French) |
| Gambia | Information and Communications Act No. 2 of 2009 (in English) |
| Gambia | Bill to be enforced in 2020 : Data protection and Privacy Policy |
| Georgia | Law of Georgia on Personal Data Protection (in English) |
| Georgia | Law of Georgia on Personal Data Protection (in Georgian) |
| Germany | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Germany | Federal Data Protection Act (in English) |
| Germany | Bundesdatenschutzgesetz - BDSG (in German) |
| Ghana | Data Protection Act (Act No. 843) 2012 - DPA (in English) |
| Greece | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Greece | Law No. 4624/2019 Hellenic Data Protection Authority (HDPA) (in Greek) |
| Guatemala | Iniciativa de Ley Número 4090 del Congreso de la República de Guatemala Ley de Protección de Datos Personales (in Spanish) |
| Guinea-Bissau | No Legislation - UK Data Protection Act 2018 applied as standard |
| Guinea | Loi L/2016/037/AN relative à la cyber-sécurité et la protection des données à caractère personnel (in French) |
| Guyana | Draft Data Privacy Bill 2020 |
| Haiti | No Legislation - UK Data Protection Act 2018 applied as standard |
| Honduras | Ley de trasnparencia y accesso a la información pública DECRETO No. 170‐2006 (in Spanish) |
| Hungary | Act CXII of 2011 on the right to informational self-determination and on the freedom of information (in Hungarian) |
| Hungary | Act CVIII of 2001 on the certain aspects of electronic commerce services and information society services (in Hungarian) |
| Hungary | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Iceland | Data protection and the Processing of Personal Data Law No.90/2018 (in English) |
| India | Bill - Personal Data Protection, 2019 (in English) |
| India | Information Technology Act 2000 (in English) |
| Indonesia | Personal Data Protection in Electronic Systems Regulation 2016 (in English) |
| Indonesia | Systems Regulation 2016 (in English) |
| Iran (Islamic Republic of) | Bill - Protection of Data and Privacy in the Cyber Space 2018 |
| Iran (Islamic Republic of) | Electronic Commerce Law - General Law (in Persian) |
| Iraq | Bill - Data Protection and Privacy Law |
| Ireland | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Ireland | Data Protection Act, 1988 (in English) |
| Israel | Privacy Protection Act No.5741/1981 and 5752/1992 (in English) |
| Italy | Data Protection Code Decree No. 196/2003 (in English) |
| Italy | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Italy | Decreto Legislativo 30 giugno 2003, n. 196 - Codice in materia di protezione dei dati personali (in Italian) |
| Jamaica | The Constitution of Jamaica (in English) |
| Jamaica | Data Protection Act 2020 |
| Jamaica | Electronic Transactions Act No 15 of 2006 (in English) |
| Japan | Act on the Protection of Personal Information (in English, unofficial translation) |
| Jordan | Data Protection Bill |
| Kazakhstan | Law of the Republic of Kazakhstandated April 12, 2004 No. 544 On Regulation of Trading Activities (in Russian) |
| Kenya | The Data Protection Act, 2019 (in English) |
| Republic of Korea | Personal Information Protection Act (in English, Korean) |
| Kuwait | Law No. 20 of 2014 (in English) |
| Kyrgyzstan | Personal Data No.58/2008 |
| Lao People's Democratic Republic | Law on Electronic Data Protection (in Laocian) |
| Latvia | Personal Data Processing Law |
| Latvia | Amendments to the Electronic Communications Law - point 2 (in Latvian) |
| Lebanon | Law No. 81 Relating to Electronic Transactions and Personal Data |
| Lesotho | Data Protection Act No. 19 2012 (in English) |
| Liberia | No Legislation - UK Data Protection Act 2018 applied as standard |
| Libya | No Legislation - UK Data Protection Act 2018 applied as standard |
| Liechtenstein | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Liechtenstein | Gesetz über die Abänderung des Datenschutzgesetzes, 2002 (in German) |
| Lithuania | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Lithuania | Law on Legal Protection of Personal Data (in English) |
| Luxembourg | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Luxembourg | Data Protection Law (in French) |
| Madagascar | Law No. 38/2014 Protection of personal data (in French) |
| Malawi | Electronic Transactions and Cyber Security Act, 2016 (in English) |
| Malaysia | Personal Data Protection Act 2010 (in English) |
| Maldives | Bill - Law coming on Q3 2020 |
| Mali | Loi sur la protection des données à caractère personnel - Loi n° 2013-015 du 21 mai 2013 (in French) |
| Malta | Data Protection Act, Cap 586 (in English) |
| Malta | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Mauritania | Loi 2017-020 sur la protection des données à caractère personnel (in French) |
| Mauritius | Data Protection Act No. 20/2017 (in English) |
| Mexico | Ley General de Protección de Datos Personales en posesión de sujetos obligados (In Spanish) |
| Mexico | Ley Federal de Protección de Datos Personales en Posesión de los Particulares 2010 (in Spanish) |
| Mexico | Convenio para la Protección de las Personas con respecto al Tratamiento Automatizado de Datos de Carácter Personal y Protocolo Adicional al Convenio para la Protección de las Personas con Respecto al Tratamiento Automatizado de Datos de Carácter Personal, a las Autoridades de Control y los Flujos Transfronterizos de Datos (Decreto Promulgatorio) (in Spanish) |
| Mexico | Lineamientos Generales de Protección de Datos Personales para el Sector Público (In Spanish) |
| Mexico | Reglamento Ley Federal de Protección de Datos Personales en Poesesión de Particulares (in Spanish) |
| Mexico | Ley General de Transparencia y Acceso a la Información Pública (in Spanish) |
| Mexico | Ley Federal de Transparencia y Acceso a la Información Pública (in Spanish) |
| Monaco | Loi No. 1.165/1996 consolidée par la loi No.1,462/2018 (in French) |
| Mongolia | Law on information transparency and right to information, 2011 (updated in 2015) |
| Montenegro | Law on Protection of Personal Data No. 79/2009, 70/2009, 44/2012, 22/2017 (in English) |
| Morocco | Law No. 09-08/2009 on the protection of people toward data protection of a personal nature (in French) |
| Myanmar | Bill - Cyber Security Law and privacy and data protection |
| Namibia | Bill - Electronic Transaction Act of 2019 (in English) |
| Nepal | The Privacy Act, 2018 (in English) |
| Netherlands | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Netherlands | Personal Data Protection Act 1998 (in Dutch) |
| Netherlands | Personal Data Protection Act (in English, unofficial translation) |
| New Zealand | Privacy Act 1993 (in English) |
| Nicaragua | Ley No. 787 Ley de Protección de Datos Personales (in Spanish) |
| Niger | Loi n°2017-28 du 03 Mai 2017 relative à la protection des données à caractère personnel, révisé en 2019 (in French) |
| Nigeria | Nigerian Data Protection Regulation 2019 (in English) |
| Norway | Personal Data Act 2018 (in Norwegian) |
| Norway | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Norway | Personal Data Act 2000 (in English) |
| Oman | Royal Decree no. 69 of 2008 - Electronic Transactions Law (in English) |
| Pakistan | Bill - Electronic Data Protection Act 2005 (in English) |
| Panama | Ley 81, Protección de datos personales, 2019 (in Spanish) |
| Papua New Guinea | No Legislation - UK Data Protection Act 2018 applied as standard |
| Paraguay | Ley 1682/2001 Reglamenta la Informacion de Caracter Privado (in Spanish) |
| Paraguay | Ley Nº 1969/2002 “Que modifica, amplía y deroga varios artículos de la Ley Nº 1682/2001” (in Spanish) |
| Paraguay | Ley Nº 5543/2015 “Que modifica parcialmente la Ley Nº 1969/2002” (in Spanish) |
| Paraguay | Ley Nº 5830/2017 “Que prohíbe la publicidad no autorizada por los usuarios titulares de telefonía móvil” (in Spanish) |
| Paraguay | Decreto Nº 8000/2017 “Por el cual se reglamenta la Ley 5830/2017 Que prohíbe la publicidad no autorizada por los usuarios titulares de telefonía móvil” (in Spanish) |
| Paraguay | Resolución Nº 80/2018 “Por la cual se aprueba la normativa reglamentaria de la Ley Nº 5830 Que prohíbe Que prohíbe la publicidad no autorizada por los usuarios titulares de telefonía móvil” (in Spanish) |
| Peru | Ley N° 29733 - Ley de Protección de Datos Personales (in Spanish) |
| Philippines | Data Privacy Act of 2012 (in English) |
| Poland | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Poland | Act on the Protection of Personal Data 1997 (in English) |
| Portugal | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) (in Portuguese) |
| Portugal | Law 58/2019 of August 8th (in Portuguese) |
| Portugal | Law 41/2004 (In Portuguese) |
| Portugal | Decree-Law 7/2004 (In Portuguese) |
| Portugal | Lei No. 13,709/2018 Protecao de Dados Pessoais (in Portuguese) |
| Qatar | Law No. 13 of 2016 Concerning Privacy and Protection of Personal Data (in Arabic) |
| Republic of Korea | Personal Information Protection Act, 2020 (In Korean) |
| Republic of Moldova | Law No. 133/2011 on personal data Protection (in Russian) |
| Romania | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Romania | GDPR implementation law (in Romanian) |
| Romania | Law No. 102/2005 on the organisation and the fonctioning of the National Supervisorz Authoritz for Personal Data Processing (in Romanian) |
| Russian Federation | Bill - Regarding Personal Data |
| Russian Federation | Federal law No. 152-FZ of 27 July 2006 "On Personal Data" (with the latest amendments of 2 July 2021) (in Russian) |
| Rwanda | Bill - Personal Data Protection, 2019 (in French, English, and Kinyarwanda) |
| Saint Kitts and Nevis | Data Protection Act 2018 (in English) |
| Saint Lucia | Data Protection Act 2011 (in English) |
| Saint Vincent and the Grenadines | Bill - Data Protection Act - OECS models (in English) |
| San Marino | Law regulating the Computerized Collection of Personal Data 1983 |
| Sao Tome and Principe | Data Protection Law 2016. Lei N° 3/2016 - Protecção de Dados Pessoais (in Portuguese) |
| Saudi Arabia | Bill - Freedom of Information and Protection of Private data |
| Sierra-Leone | No Legislation - UK Data Protection Act 2018 applied as standard |
| Senegal | LOI n° 2008-12 du 25 janvier 2008 portant sur la Protection des données à caractère personnel (in French) |
| Serbia | Data Protection Act (in English) |
| Serbia | Law on Personnal Data Protection N°97/08 (in English) |
| Seychelles | Bill - The Data Protection No. 9 of 2003 (in English) |
| Singapore | Personal Data Protection Act No. 26 2012 (in English) |
| Slovakia | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Slovakia | Act 18/2018 on the Protection of Personal Data (in English) |
| Slovakia | Act on the Protection of Personal Data 1992 (in English) |
| Slovenia | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Slovenia | Personal Data Protection Act (ZVOP-1) (in Slovenian) |
| Solomon Islands | No Legislation - UK Data Protection Act 2018 applied as standard |
| South Africa | Protection of Personal Information Act 4 of 2013 (in English) |
| Spain | The General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) |
| Spain | Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales (in Spanish) |
| Sri Lanka | No Legislation - UK Data Protection Act 2018 applied as standard |
| Sudan | No Legislation - UK Data Protection Act 2018 applied as standard |
| Suriname | The Constitution of the Republic of Suriname, Article 17 (in English) |
| Sweden | Data Protection Act (in Swedish) |
| Sweden | Personal Data Act 1998 (in English) |
| Switzerland | Federal Act on Data Protection, 1992 (in English) |
| Syrian Arab Republic | No Legislation - UK Data Protection Act 2018 applied as standard |
| Tajikistan | 8in Russia)Law of the Republic of Tajikistan No 1537 about Personal Data Protection, 2018 |
| Thailand | Personal Data Protection Act, B. E. 2562, 2019 (in Thai) |
| North Macedonia | Law on Personal Data Protection (in English, unofficial translation) |
| Timor-Leste | No Legislation - UK Data Protection Act 2018 applied as standard |
| Togo | Loi No. 14/2019 relativbe a la protection des donnees a caractere personnelle (In French) |
| Trinidad and Tobago | Data Protection Act 2011 (in English) |
| Trinidad and Tobago | The Constitution of the Rpublic of Trinidad and Tobago (in English) |
| Tunisia | Loi organique No. 63/2004 portant sur la protection des données à caractère personnelles (in Arabic) |
| Tunisia | Organic Act No. 63/2004 on the protection of personal data (in Arabic) |
| Turkey | Law on the Protection of Personal Data No. 6698, 2016 (In Turkish) |
| Turkmenistan | Law on Information on Private Life and its Protection No. 519-V (in Russian) |
| Uganda | The Data Protection and Privacy Act 2019 (in English) |
| Ukraine | Law on Information Protection in Information and Telecommunication Systems (in Russian) |
| Ukraine | Law on State Secrets (in Russian) |
| Ukraine | Law on Personal Data Protection (in Russian) |
| Ukraine | On protection of Personal Data No. 2267-VI (in Russian) |
| United Arab Emirates | Currently on draft and under study for approval. Expected publish 2022. |
| United Kingdom | Data Protection Act 1998 (in English) |
| United Kingdom | Data Protection Act 2018 (in English) |
| United Republic of Tanzania | Data Protection Bill 2013 (in English) |
| United States of America | Privacy Act of 1974 (in English) |
| United States of America | Federal Trade Commission Act 15 (in English) |
| United States of America | The California Consumer Privacy Act (CCPA) 2018 (in English) |
| Uruguay | La Ley 18.331 Protección de Datos Personales y Acción de Habeas Data del 11 agosto del año 2008 y el Decreto reglamentario 414/2009 (in Spanish) |
| Uzbekistan | Law No. ZRU-547, On Personal Data, dated 2 July 2019 (in Russian) |
| Vanuatu | No Legislation - UK Data Protection Act 2018 applied as standard |
| Venezuela | No Legislation - UK Data Protection Act 2018 applied as standard |
| Viet Nam | Law on information technology 2006 (in English) |
| Viet Nam | Law on protection of consumers' rights 2010 (in English) |
| Yemen | Law of the Right of Access to Information 2012 (in English) |
| Zambia | Data Protection Act, 2021 (in English) |
| Zimbabwe | Data Protection Act (In English) |
