Discover which global privacy laws apply to your business
SubCommentaries
EU: National Security and Law Enforcement Exemption
Singapore: Government and Public Agency Exemption
USA - Montana: Government and Public Agency Exemption
Canada - Quebec: Exception for Publicly Available Information, including Public Records
USA - Indiana: Government and Public Agency Exemption
EU: Judicial Proceedings and Court Records Exemption
Kazakhstan: National Security and Law Enforcement Exemption
Angola: Processing in jurisdiction
Philippines: Exemption for Official Information of Public Servants
USA - Delaware: Government and Public Agency Exemption
Canada - Quebec: Government and Public Agency Exemption
Philippines: Central Bank and Financial Institutions Exclusion
UAE Mainland: Central Bank and Financial Institutions Exclusion
Egypt: Judicial Proceedings and Court Records Exemption
USA - Connecticut: Government and Public Agency Exemption
Philippines: Government and Public Agency Exemption
Malaysia: Government and Public Agency Exemption
British Virgin Islands: Physical Location/Residency of Data Subject in Jurisdiction
Switzerland: Judicial Proceedings and Court Records Exemption
USA - Texas: Government and Public Agency Exemption
Russia: Judicial Proceedings and Court Records Exemption
Uruguay: National Security and Law Enforcement Exemption
USA - Florida: Government and Public Agency Exemption
Egypt: Central Bank and Financial Institutions Exclusion
Liechtenstein: Government and Public Agency Exemption
UAE Mainland: Judicial Proceedings and Court Records Exemption
UAE Mainland: National Security and Law Enforcement Exemption
UAE Mainland: Government and Public Agency Exemption
Thailand: Judicial Proceedings and Court Records Exemption
Australia: Government and Public Agency Exemption
Uzbekistan: National Security and Law Enforcement Exemption
USA - California: Exception for Publicly Available Information, including Public Records
Brazil: National Security and Law Enforcement Exemption
Thailand: National Security and Law Enforcement Exemption
USA - Virginia: Government and Public Agency Exemption
Morocco: National Security and Law Enforcement Exemption
Iceland: National Security and Law Enforcement Exemption
UAE - ADGM: Entity's Link or Presence in Jurisdiction
Serbia: Monitoring Data Subjects Within Jurisdiction
Panama: Central Bank and Financial Institutions Exclusion
Colombia: National Security and Law Enforcement Exemption
Panama: Automated Means Criterion
UAE - DIFC: Processing in Context of Local Establishment
Austria: Automated Means Criterion
Mongolia: Government and Public Agency Exemption
Liechtenstein: Processing in Context of Local Establishment
UAE - ADGM: Government and Public Agency Exemption
Philippines: Entity's Link or Presence in Jurisdiction
Canada - Alberta: Exemption for Archival Processing
Thailand: Exemption for Specific Purposes of Processing
USA - California: Processing in Context of Local Establishment
Barbados: Processing in Context of Local Establishment
Brazil: Processing in jurisdiction
Liechtenstein: Automated Means Criterion
Malaysia: Processing by Local Establishment
Russia: Data Processing Based on Contract or Consent by Data Subject in Jurisdiction
Turkey: Automated Means Criterion
Ghana: Central Bank and Financial Institutions Exclusion
UAE - ADGM: Judicial Proceedings and Court Records Exemption
Oman: Central Bank and Financial Institutions Exclusion
UAE Mainland: Automated Means Criterion
Canada - Alberta: Government and Public Agency Exemption
Canada - Quebec: Processing-Susceptible Medium Factor
Sri Lanka: Monitoring Data Subjects Within Jurisdiction
China - Macau: National Security and Law Enforcement Exemption
USA - Delaware: Exemption for Specific Purposes of Processing
USA - Connecticut: Exemption for Specific Purposes of Processing
Brazil: Exemption for Specific Purposes of Processing
USA - Florida: Advertising Metrics Processing Exclusion
Panama: Judicial Proceedings and Court Records Exemption
EU: Personal and Domestic Use Exemption
USA - Colorado: Central Bank and Financial Institutions Exclusion
Vietnam: Entity's Link or Presence in Jurisdiction
USA - California: National Security and Law Enforcement Exemption
Angola: Entity's Link or Presence in Jurisdiction
UK: Automated Means Criterion
Philippines: Applicability Based on Contract Concluded in Jurisdiction
Uruguay: Processing by Local Establishment
USA - Texas: Exemption for Specific Purposes of Processing
India: Automated Means Criterion
EU: Exception for Information about Legal Entities
Switzerland: Exception for Publicly Available Information, including Public Records
Turkmenistan: National Security and Law Enforcement Exemption
South Africa (SA): Entity's Link or Presence in Jurisdiction
Panama: National Security and Law Enforcement Exemption
Jamaica: Entity's Link or Presence in Jurisdiction
UAE Mainland: Data Processing Based on Contract or Consent by Data Subject in Jurisdiction
Ecuador: Automated Means Criterion
New Zealand: Entity's Link or Presence in Jurisdiction
Thailand: Monitoring Data Subjects Within Jurisdiction
Canada - Alberta: Exception for Information about Legal Entities
New Zealand: Processing in Context of Local Establishment
USA - Oregon: Exemption for Specific Purposes of Processing
UAE Mainland: Free Zone Special Legislation Exemption
USA - Indiana: Central Bank and Financial Institutions Exclusion
Switzerland: Exemption for Parliamentary Deliberations
Bahrain: Entity's Link or Presence in Jurisdiction
Philippines: Processing in Context of Local Establishment
Egypt: National Security and Law Enforcement Exemption
EU: Processing in Context of Local Establishment
Ukraine: Automated Means Criterion
Australia: Entity's Link or Presence in Jurisdiction
Canada - Alberta: Judicial Proceedings and Court Records Exemption
Mexico: Processing in jurisdiction
Philippines: Processing in jurisdiction
Mongolia: National Security and Law Enforcement Exemption
Philippines: Applicability to Citizens and Residents' Data
Saudi Arabia: Processing in Context of Local Establishment
Macedonia: Monitoring Data Subjects Within Jurisdiction
EU: Monitoring Data Subjects Within Jurisdiction
USA - Oregon: National Security and Law Enforcement Exemption
Canada - British Columbia: Exemption for Official Information of Public Servants
China - Macau: Processing in jurisdiction
Oman: Government and Public Agency Exemption
Senegal: National Security and Law Enforcement Exemption
Switzerland: Red Cross Data Processing Exemption
Canada - Quebec: Exemption for Specific Purposes of Processing
Malaysia: Exemption for Specific Purposes of Processing
Australia: Control and Central Management in Jurisdiction Criterion
India: Processing in jurisdiction
India: Exception for Publicly Available Information, including Public Records
Oman: Exception for Publicly Available Information, including Public Records
UAE Mainland: Processing by Local Establishment
USA - Oregon: Judicial Proceedings and Court Records Exemption
USA - California: Exemption for Specific Purposes of Processing
Georgia: National Security and Law Enforcement Exemption
Belarus: Automated Means Criterion
Bahrain: National Security and Law Enforcement Exemption
Russia: Automated Means Criterion
Guernsey: Processing in Context of Local Establishment
UAE - DIFC: Automated Means Criterion
Global: Automated Means Criterion
EU: Automated Means Criterion
USA - Oregon: Processing by Local Establishment
Botswana: Judicial Proceedings and Court Records Exemption
Ghana: Government and Public Agency Exemption
EU: Government and Public Agency Exemption
Malaysia: Processing in Context of Local Establishment
Canada - British Columbia: Judicial Proceedings and Court Records Exemption
Guernsey: Monitoring Data Subjects Within Jurisdiction
Philippines: Processing by Local Establishment
Morocco: Processing in Context of Local Establishment
British Virgin Islands: Entity's Link or Presence in Jurisdiction
Peru: National Security and Law Enforcement Exemption
Mexico: Control and Central Management in Jurisdiction Criterion
USA - Oregon: Government and Public Agency Exemption
USA - California: Processing by Local Establishment
China - Macau: Monitoring Data Subjects Within Jurisdiction
UAE - DIFC: Processing by Local Establishment
Panama: Processing in jurisdiction
Angola: Processing in Context of Local Establishment
Uruguay: Processing-Susceptible Medium Factor
EU: Processing by Local Establishment
USA - California: Applicability to Citizens and Residents' Data
Botswana: National Security and Law Enforcement Exemption
Serbia: Processing by Local Establishment
Azerbaijan: National Security and Law Enforcement Exemption
Serbia: Automated Means Criterion
Ghana: Entity's Link or Presence in Jurisdiction
Philippines: Exemption for Specific Purposes of Processing
USA - Oregon: Central Bank and Financial Institutions Exclusion
Ghana: Processing in jurisdiction
Botswana: Government and Public Agency Exemption
Panama: Government and Public Agency Exemption
Malaysia: Processing in jurisdiction
Vietnam: Processing in jurisdiction
Montenegro: National Security and Law Enforcement Exemption
Jamaica: Monitoring Data Subjects Within Jurisdiction
Barbados: Entity's Link or Presence in Jurisdiction
UK: National Security and Law Enforcement Exemption
Morocco: Processing in jurisdiction
Ghana: National Security and Law Enforcement Exemption
UAE Mainland: Personal and Domestic Use Exemption
Mexico: Processing by Entity Registered or Incorporated in Jurisdiction
USA - California: Processing by Entity Registered or Incorporated in Jurisdiction
Sri Lanka: Personal and Domestic Use Exemption
China - Mainland: Offering Goods and Services to Data Subjects in Jurisdiction
Sri Lanka: Offering Goods and Services to Data Subjects in Jurisdiction
USA - Florida: Personal and Domestic Use Exemption
Brazil: Personal and Domestic Use Exemption
USA - Oregon: Nonprofit Organization Exemption
Jamaica: Offering Goods and Services to Data Subjects in Jurisdiction
Switzerland: Personal and Domestic Use Exemption
USA - Virginia: Higher education institution
Canada - Alberta: Exemption for Specific Purposes of Processing
Lebanon: Personal and Domestic Use Exemption
USA - Texas: Employment and Agency Relationship Exemption
USA - Texas: Personal and Domestic Use Exemption
Senegal: Use of Equipment Within Jurisdiction
Singapore: Personal and Domestic Use Exemption
Brazil: Offering Goods and Services to Data Subjects in Jurisdiction
Jamaica: Processing by Local Establishment
USA - California: Offering Goods and Services to Data Subjects in Jurisdiction
USA - Delaware: Personal and Domestic Use Exemption
USA - California: Personal and Domestic Use Exemption
Macedonia: Offering Goods and Services to Data Subjects in Jurisdiction
UAE Mainland: Processing by Entity Registered or Incorporated in Jurisdiction
Uruguay: Use of Equipment Within Jurisdiction
Tunisia: Personal and Domestic Use Exemption
USA - Florida: Sectoral Exceptions Regulated by Other Laws
Malaysia: Use of Equipment Within Jurisdiction
EU: Physical Location/Residency of Data Subject in Jurisdiction
USA - Montana: Nonprofit Organization Exemption
USA - Virginia: Offering Goods and Services to Data Subjects in Jurisdiction
Albania: Use of Equipment Within Jurisdiction
Ecuador: Use of Equipment Within Jurisdiction
USA - Montana: Sectoral Exceptions Regulated by Other Laws
USA - Texas: Doing Business in Jurisdiction
Vietnam: Processing by Local Establishment
Angola: Use of Equipment Within Jurisdiction
Canada - Quebec: Data Held by Professional Order of a Political Party
China - Macau: Use of Equipment Within Jurisdiction
Serbia: Filing System Criterion
Albania: Personal and Domestic Use Exemption
USA - Texas: Benefit administration data
Ghana: Processing by Local Establishment
USA - Florida: Offering Goods and Services to Data Subjects in Jurisdiction
USA - Montana: Exemption for Specific Purposes of Processing
USA - Montana: Offering Goods and Services to Data Subjects in Jurisdiction
India: Personal and Domestic Use Exemption
Thailand: Personal and Domestic Use Exemption
Kazakhstan: Personal and Domestic Use Exemption
UAE - DIFC: Processing by Entity Registered or Incorporated in Jurisdiction
Senegal: Personal and Domestic Use Exemption
Serbia: Personal and Domestic Use Exemption
Sri Lanka: Processing by Entity Registered or Incorporated in Jurisdiction
UAE - ADGM: Processing by Entity Registered or Incorporated in Jurisdiction
EU: Processing by Entity Registered or Incorporated in Jurisdiction
Morocco: Processing by Entity Registered or Incorporated in Jurisdiction
USA - Tennessee: Number of Data Subjects
Australia: Processing by Entity Registered or Incorporated in Jurisdiction
Egypt: Personal and Domestic Use Exemption
Russia: Prospective Filing System Inclusion
Philippines: Exemption for Personal Data of Foreign Origin with Adequate Protection
Serbia: Offering Goods and Services to Data Subjects in Jurisdiction
USA - Connecticut: Offering Goods and Services to Data Subjects in Jurisdiction
Ecuador: Processing by Local Establishment
USA - Montana: Number of Data Subjects
Panama: Use of Equipment Within Jurisdiction
British Virgin Islands: Processing by Entity Registered or Incorporated in Jurisdiction
Ghana: Processing by Entity Registered or Incorporated in Jurisdiction
Mexico: Use of Equipment Within Jurisdiction
Senegal: Processing by Local Establishment
Malaysia: Processing by Entity Registered or Incorporated in Jurisdiction
Ghana: Use of Equipment Within Jurisdiction
Uzbekistan: Personal and Domestic Use Exemption
Serbia: Processing by Entity Registered or Incorporated in Jurisdiction
Panama: Personal and Domestic Use Exemption
South Africa (SA): Processing by Entity Registered or Incorporated in Jurisdiction
Georgia: Use of Equipment Within Jurisdiction
UAE Mainland: Sectoral Exceptions Regulated by Other Laws
Japan: Offering Goods and Services to Data Subjects in Jurisdiction
Jamaica: Use of Equipment Within Jurisdiction
Montenegro: Personal and Domestic Use Exemption
USA - Oregon: Offering Goods and Services to Data Subjects in Jurisdiction
USA - Delaware: Doing Business in Jurisdiction
Thailand: Processing by Local Establishment
USA - Florida: Nonprofit Organization Exemption
USA - Texas: Sale of Personal Data Criterion
Panama: Offering Goods and Services to Data Subjects in Jurisdiction
USA - Delaware: Nonprofit Organization Exemption
Uruguay: Personal and Domestic Use Exemption
USA - Virginia: Exemption for Specific Purposes of Processing
Ghana: Personal and Domestic Use Exemption
USA - Tennessee: Offering Goods and Services to Data Subjects in Jurisdiction
Ecuador: Processing by Entity Registered or Incorporated in Jurisdiction
Bahrain: Processing by Entity Registered or Incorporated in Jurisdiction
Saudi Arabia: Deceased Individuals Exemption
USA - Delaware: Employment and Agency Relationship Exemption
EU: Filing System Criterion
Vietnam: Processing by Entity Registered or Incorporated in Jurisdiction
Morocco: Use of Equipment Within Jurisdiction
British Virgin Islands: Use of Equipment Within Jurisdiction
Egypt: Exemption for Specific Purposes of Processing
USA - Virginia: Sectoral Exceptions Regulated by Other Laws
India: Offering Goods and Services to Data Subjects in Jurisdiction
Ghana: Exemption for Specific Purposes of Processing
Ecuador: Offering Goods and Services to Data Subjects in Jurisdiction
Montenegro: Use of Equipment Within Jurisdiction
Mexico: Processing by Local Establishment
Thailand: Sectoral Exceptions Regulated by Other Laws
Guernsey: Offering Goods and Services to Data Subjects in Jurisdiction
Qatar: Personal and Domestic Use Exemption
Uruguay: Sectoral Exceptions Regulated by Other Laws
UAE - DIFC: Prospective Filing System Inclusion
Serbia: Physical Location/Residency of Data Subject in Jurisdiction
USA - Tennessee: Revenue-Based Applicability
USA - Colorado: Personal and Domestic Use Exemption
China - Macau: Processing by Entity Registered or Incorporated in Jurisdiction
Serbia: Prospective Filing System Inclusion
USA - California: Sale of Personal Data Criterion
USA - Virginia: Revenue-Based Applicability
USA - Florida: Higher education institution
USA - California: Revenue-Based Applicability
UK: Personal and Domestic Use Exemption
Malaysia: Exception for Data Processing Outside Jurisdiction
EU: Prospective Filing System Inclusion
Philippines: Public License and Permit Information Exemption
USA - California: Sectoral Exceptions Regulated by Other Laws
China - Macau: Processing by Local Establishment
Philippines: Use of Equipment Within Jurisdiction
EU: Offering Goods and Services to Data Subjects in Jurisdiction
USA - Delaware: Revenue-Based Applicability
Canada: Personal and Domestic Use Exemption
Russia: Personal and Domestic Use Exemption
Belarus: Personal and Domestic Use Exemption
Saudi Arabia: Personal and Domestic Use Exemption
Kyrgyzstan: Personal and Domestic Use Exemption
Azerbaijan: Personal and Domestic Use Exemption
Liechtenstein: Personal and Domestic Use Exemption
Barbados: Offering Goods and Services to Data Subjects in Jurisdiction
Turkmenistan: Personal and Domestic Use Exemption
Oman: Personal and Domestic Use Exemption
Brazil: Exemption for Personal Data of Foreign Origin with Adequate Protection
Thailand: Offering Goods and Services to Data Subjects in Jurisdiction
British Virgin Islands: Personal and Domestic Use Exemption
Singapore: Historical Data Exemption
USA - Colorado: Offering Goods and Services to Data Subjects in Jurisdiction
Sri Lanka: Processing by Local Establishment
New Zealand: Processing by Local Establishment
Albania: Processing by Local Establishment
Barbados: Processing by Entity Registered or Incorporated in Jurisdiction
British Virgin Islands: Processing by Local Establishment
Bahrain: Use of Equipment Within Jurisdiction
USA - Montana: Revenue-Based Applicability
India: Physical Location/Residency of Data Subject in Jurisdiction
Turkmenistan: State Secrets Exemption
USA - Texas: Sectoral Exceptions Regulated by Other Laws
UAE Mainland: Physical Location/Residency of Data Subject in Jurisdiction
USA - Connecticut: Higher education institution
UAE - DIFC: Filing System Criterion
Thailand: Physical Location/Residency of Data Subject in Jurisdiction
USA - Connecticut: Sectoral Exceptions Regulated by Other Laws
New Zealand: Location of Individual who Processes Data
USA - Tennessee: Doing Business in Jurisdiction
USA - Delaware: Benefit administration data
Bahrain: Processing by Local Establishment
Australia: Physical Location/Residency of Data Subject in Jurisdiction
USA - Oregon: Revenue-Based Applicability
USA - California: Exception for Data Processing Outside Jurisdiction
Ukraine: Filing System Criterion
Singapore: Deceased Individuals Exemption
USA - Oregon: Sale of Personal Data Criterion
USA - Delaware: Number of Data Subjects
Russia: Physical Location/Residency of Data Subject in Jurisdiction
Canada - Quebec: Exemption for Data Held by Private Entities on Behalf of Public Bodies
USA - Delaware: Sectoral Exceptions Regulated by Other Laws
USA - Oregon: Sectoral Exceptions Regulated by Other Laws
USA - Connecticut: Revenue-Based Applicability
USA - Montana: Higher education institution
Belarus: Filing System Criterion
USA - Virginia: Number of Data Subjects
Philippines: Physical Location/Residency of Data Subject in Jurisdiction
Ukraine: Prospective Filing System Inclusion
USA - Connecticut: Number of Data Subjects
USA - Texas: Higher education institution
Turkmenistan: Exemption for Archival Processing
USA - Florida: Sale of Personal Data Criterion
USA - Virginia: Nonprofit Organization Exemption
Liechtenstein: Prospective Filing System Inclusion
USA - California: Number of Data Subjects
USA - Oregon: Number of Data Subjects
Brazil: Physical Location/Residency of Data Subject in Jurisdiction
USA - Connecticut: Nonprofit Organization Exemption
New Zealand: Doing Business in Jurisdiction
UAE Mainland: Location of Individual who Processes Data
USA - Texas: Nonprofit Organization Exemption
Liechtenstein: Filing System Criterion
Turkey: Filing System Criterion
USA - Oregon: Benefit administration data
USA - California: Long-Term Residency Threshold
Uzbekistan: State Secrets Exemption
UAE - ADGM: Sectoral Exceptions Regulated by Other Laws
Philippines: Sectoral Exceptions Regulated by Other Laws
Austria: Prospective Filing System Inclusion
USA - Indiana: Sectoral Exceptions Regulated by Other Laws
Russia: Exemption for Archival Processing
UK: Prospective Filing System Inclusion
Ghana: Doing Business in Jurisdiction
USA - Montana: Doing Business in Jurisdiction
Singapore: Employment and Agency Relationship Exemption
USA - Indiana: Number of Data Subjects
EU: State Secrets Exemption
Belarus: State Secrets Exemption
Egypt: Statutory Requirement Processing Exception
British Virgin Islands: Long-Term Residency Threshold
Senegal: Sectoral Exceptions Regulated by Other Laws
EU: Sectoral Exceptions Regulated by Other Laws
USA - Colorado: Sectoral Exceptions Regulated by Other Laws
UK: State Secrets Exemption
USA - Virginia: Doing Business in Jurisdiction
Egypt: State Secrets Exemption
Canada: Nonprofit Organization Exemption
USA - Connecticut: Benefit administration data
USA - Tennessee: Sale of Personal Data Criterion
Mexico: Location of Individual who Processes Data
Bahrain: Doing Business in Jurisdiction
USA - California: Statutory Requirement Processing Exception
USA - California: Doing Business in Jurisdiction
Philippines: Doing Business in Jurisdiction
Azerbaijan: Exemption for Archival Processing
Vietnam: Location of Individual who Processes Data
USA - Montana: Employment and Agency Relationship Exemption
USA - Virginia: Benefit administration data
Botswana: Sectoral Exceptions Regulated by Other Laws
Australia: Doing Business in Jurisdiction
Panama: Location of Individual who Processes Data
Kazakhstan: Exemption for Archival Processing
Malaysia: Long-Term Residency Threshold
Mongolia: Sectoral Exceptions Regulated by Other Laws
Azerbaijan: State Secrets Exemption
USA - Oregon: Statutory Requirement Processing Exception
USA - Connecticut: Doing Business in Jurisdiction
Canada - Quebec: Doing Business in Jurisdiction
Uzbekistan: Exemption for Archival Processing
British Virgin Islands: Doing Business in Jurisdiction
Malaysia: Doing Business in Jurisdiction
USA - Indiana: Revenue-Based Applicability
USA - Montana: Benefit administration data
UAE - ADGM: Filing System Criterion
USA - Virginia: Employment and Agency Relationship Exemption
USA - Florida: Doing Business in Jurisdiction
Russia: State Secrets Exemption
Bahrain: Long-Term Residency Threshold
Kazakhstan: State Secrets Exemption
Austria: Filing System Criterion
Global: Filing System Criterion
UK: Filing System Criterion
Leave Feedback
local_phone
An unhandled error has occurred.
Reload
🗙