Discover which global privacy laws apply to your business
SubCommentaries
USA - Connecticut: Government and Public Agency Exemption
UAE - DIFC: Processing by Local Establishment
India: Personal and Domestic Use Exemption
USA - California: Exemption for Specific Purposes of Processing
Serbia: Monitoring Data Subjects Within Jurisdiction
Japan: Offering Goods and Services to Data Subjects in Jurisdiction
Thailand: Processing by Local Establishment
USA - Montana: Doing Business in Jurisdiction
USA - Connecticut: Revenue-Based Applicability
EU: Offering Goods and Services to Data Subjects in Jurisdiction
USA - Delaware: Doing Business in Jurisdiction
USA - Oregon: Central Bank and Financial Institutions Exclusion
Senegal: Use of Equipment Within Jurisdiction
EU: Government and Public Agency Exemption
USA - California: Exception for Publicly Available Information, including Public Records
USA - Oregon: Nonprofit Organization Exemption
Serbia: Physical Location/Residency of Data Subject in Jurisdiction
Russia: Personal and Domestic Use Exemption
USA - Oregon: Government and Public Agency Exemption
UAE - Mainland: Automated Means Criterion
USA - Texas: Employment and Agency Relationship Exemption
British Virgin Islands: Long-Term Residency Threshold
New Zealand: Entity's Link or Presence in Jurisdiction
Ghana: Processing by Local Establishment
Philippines: Processing in Context of Local Establishment
Angola: Use of Equipment Within Jurisdiction
UK: National Security and Law Enforcement Exemption
USA - Oregon: National Security and Law Enforcement Exemption
Egypt: State Secrets Exemption
Kyrgyzstan: Personal and Domestic Use Exemption
Sri Lanka: Personal and Domestic Use Exemption
Ukraine: Filing System Criterion
Mongolia: Sectoral Exceptions Regulated by Other Laws
USA - Virginia: Government and Public Agency Exemption
Serbia: Personal and Domestic Use Exemption
EU: National Security and Law Enforcement Exemption
UK: Prospective Filing System Inclusion
Bahrain: National Security and Law Enforcement Exemption
Uruguay: Processing by Local Establishment
British Virgin Islands: Entity's Link or Presence in Jurisdiction
Liechtenstein: Filing System Criterion
Ukraine: Prospective Filing System Inclusion
China - Macau: Processing by Local Establishment
USA - California: Sale of Personal Data Criterion
Serbia: Filing System Criterion
USA - Texas: Sale of Personal Data Criterion
Russia: Physical Location/Residency of Data Subject in Jurisdiction
Switzerland: Personal and Domestic Use Exemption
Panama: National Security and Law Enforcement Exemption
Global: Automated Means Criterion
New Zealand: Processing by Local Establishment
Oman: Central Bank and Financial Institutions Exclusion
Montenegro: National Security and Law Enforcement Exemption
Thailand: Exemption for Specific Purposes of Processing
Guernsey: Offering Goods and Services to Data Subjects in Jurisdiction
Ghana: Doing Business in Jurisdiction
Philippines: Government and Public Agency Exemption
Global: Filing System Criterion
Senegal: National Security and Law Enforcement Exemption
Singapore: Employment and Agency Relationship Exemption
Brazil: Offering Goods and Services to Data Subjects in Jurisdiction
Egypt: Exemption for Specific Purposes of Processing
USA - Florida: Nonprofit Organization Exemption
USA - Oregon: Sectoral Exceptions Regulated by Other Laws
Austria: Prospective Filing System Inclusion
EU: Physical Location/Residency of Data Subject in Jurisdiction
USA - California: Personal and Domestic Use Exemption
UAE - Mainland: Personal and Domestic Use Exemption
Liechtenstein: Government and Public Agency Exemption
USA - Montana: Revenue-Based Applicability
USA - Florida: Sectoral Exceptions Regulated by Other Laws
New Zealand: Location of Individual who Processes Data
UAE - Mainland: National Security and Law Enforcement Exemption
Macedonia: Offering Goods and Services to Data Subjects in Jurisdiction
Panama: Automated Means Criterion
Bahrain: Entity's Link or Presence in Jurisdiction
Brazil: Personal and Domestic Use Exemption
Georgia: Use of Equipment Within Jurisdiction
USA - Virginia: Offering Goods and Services to Data Subjects in Jurisdiction
Ghana: Government and Public Agency Exemption
Egypt: Central Bank and Financial Institutions Exclusion
Mongolia: National Security and Law Enforcement Exemption
Turkmenistan: Personal and Domestic Use Exemption
USA - Virginia: Higher education institution
Georgia: National Security and Law Enforcement Exemption
China - Macau: Use of Equipment Within Jurisdiction
Angola: Processing in jurisdiction
USA - Texas: Benefit administration data
Uzbekistan: State Secrets Exemption
UK: Filing System Criterion
UAE - ADGM: Filing System Criterion
USA - Indiana: Sectoral Exceptions Regulated by Other Laws
Philippines: Processing by Local Establishment
USA - Montana: Sectoral Exceptions Regulated by Other Laws
Turkmenistan: Exemption for Archival Processing
Sri Lanka: Monitoring Data Subjects Within Jurisdiction
Botswana: National Security and Law Enforcement Exemption
Malaysia: Government and Public Agency Exemption
Thailand: Physical Location/Residency of Data Subject in Jurisdiction
Switzerland: Judicial Proceedings and Court Records Exemption
China - Macau: Monitoring Data Subjects Within Jurisdiction
USA - Montana: Benefit administration data
Albania: Processing by Local Establishment
Philippines: Applicability Based on Contract Concluded in Jurisdiction
Thailand: Judicial Proceedings and Court Records Exemption
Ukraine: Automated Means Criterion
USA - Florida: Advertising Metrics Processing Exclusion
Brazil: Physical Location/Residency of Data Subject in Jurisdiction
Sri Lanka: Processing by Entity Registered or Incorporated in Jurisdiction
Russia: Automated Means Criterion
USA - Indiana: Government and Public Agency Exemption
Singapore: Personal and Domestic Use Exemption
Guernsey: Monitoring Data Subjects Within Jurisdiction
Serbia: Processing by Entity Registered or Incorporated in Jurisdiction
Iceland: National Security and Law Enforcement Exemption
Barbados: Processing by Entity Registered or Incorporated in Jurisdiction
Mexico: Control and Central Management in Jurisdiction Criterion
Thailand: Monitoring Data Subjects Within Jurisdiction
USA - Indiana: Revenue-Based Applicability
Singapore: Deceased Individuals Exemption
USA - Delaware: Number of Data Subjects
USA - Florida: Doing Business in Jurisdiction
USA - California: Sectoral Exceptions Regulated by Other Laws
Uruguay: National Security and Law Enforcement Exemption
Turkey: Automated Means Criterion
Kazakhstan: State Secrets Exemption
USA - Tennessee: Sale of Personal Data Criterion
Lebanon: Personal and Domestic Use Exemption
UAE - Mainland: Processing by Entity Registered or Incorporated in Jurisdiction
USA - Delaware: Exemption for Specific Purposes of Processing
USA - California: Statutory Requirement Processing Exception
Philippines: Exemption for Specific Purposes of Processing
Belarus: Filing System Criterion
UAE - Mainland: Location of Individual who Processes Data
Albania: Use of Equipment Within Jurisdiction
Canada - Quebec: Exception for Publicly Available Information, including Public Records
Bahrain: Processing by Entity Registered or Incorporated in Jurisdiction
Vietnam: Processing by Entity Registered or Incorporated in Jurisdiction
USA - Delaware: Government and Public Agency Exemption
Guernsey: Processing in Context of Local Establishment
Barbados: Offering Goods and Services to Data Subjects in Jurisdiction
Morocco: Processing in Context of Local Establishment
USA - Connecticut: Exemption for Specific Purposes of Processing
USA - Texas: Higher education institution
USA - California: Applicability to Citizens and Residents' Data
Ecuador: Use of Equipment Within Jurisdiction
UAE - DIFC: Prospective Filing System Inclusion
Sri Lanka: Offering Goods and Services to Data Subjects in Jurisdiction
EU: Monitoring Data Subjects Within Jurisdiction
Philippines: Processing in jurisdiction
Canada - Quebec: Processing-Susceptible Medium Factor
Angola: Processing in Context of Local Establishment
UAE - Mainland: Physical Location/Residency of Data Subject in Jurisdiction
Brazil: Processing in jurisdiction
Russia: State Secrets Exemption
USA - Virginia: Nonprofit Organization Exemption
Egypt: Judicial Proceedings and Court Records Exemption
EU: Sectoral Exceptions Regulated by Other Laws
USA - California: Number of Data Subjects
USA - California: Revenue-Based Applicability
Panama: Personal and Domestic Use Exemption
Canada - Quebec: Doing Business in Jurisdiction
USA - Connecticut: Sectoral Exceptions Regulated by Other Laws
USA - Oregon: Revenue-Based Applicability
Singapore: Government and Public Agency Exemption
Mexico: Processing by Entity Registered or Incorporated in Jurisdiction
Canada - British Columbia: Judicial Proceedings and Court Records Exemption
Sri Lanka: Processing by Local Establishment
USA - California: Processing by Entity Registered or Incorporated in Jurisdiction
India: Automated Means Criterion
Liechtenstein: Personal and Domestic Use Exemption
Egypt: Statutory Requirement Processing Exception
Oman: Government and Public Agency Exemption
Montenegro: Use of Equipment Within Jurisdiction
Uzbekistan: Exemption for Archival Processing
USA - Tennessee: Doing Business in Jurisdiction
Austria: Filing System Criterion
USA - Delaware: Revenue-Based Applicability
USA - California: Doing Business in Jurisdiction
Belarus: Automated Means Criterion
Serbia: Automated Means Criterion
USA - Texas: Doing Business in Jurisdiction
Bahrain: Use of Equipment Within Jurisdiction
Ecuador: Automated Means Criterion
Azerbaijan: Personal and Domestic Use Exemption
New Zealand: Doing Business in Jurisdiction
USA - Indiana: Number of Data Subjects
Philippines: Physical Location/Residency of Data Subject in Jurisdiction
USA - Tennessee: Number of Data Subjects
USA - Connecticut: Benefit administration data
USA - Connecticut: Higher education institution
Thailand: Personal and Domestic Use Exemption
Jamaica: Use of Equipment Within Jurisdiction
USA - Connecticut: Nonprofit Organization Exemption
Ghana: Processing in jurisdiction
UAE - DIFC: Filing System Criterion
USA - Delaware: Personal and Domestic Use Exemption
USA - Virginia: Revenue-Based Applicability
USA - Texas: Exemption for Specific Purposes of Processing
Tunisia: Personal and Domestic Use Exemption
Canada: Nonprofit Organization Exemption
Jamaica: Monitoring Data Subjects Within Jurisdiction
Colombia: National Security and Law Enforcement Exemption
Canada - Alberta: Government and Public Agency Exemption
USA - California: Exception for Data Processing Outside Jurisdiction
Russia: Judicial Proceedings and Court Records Exemption
India: Exception for Publicly Available Information, including Public Records
Botswana: Sectoral Exceptions Regulated by Other Laws
USA - California: National Security and Law Enforcement Exemption
USA - Delaware: Sectoral Exceptions Regulated by Other Laws
Switzerland: Exception for Publicly Available Information, including Public Records
USA - Oregon: Number of Data Subjects
Uruguay: Use of Equipment Within Jurisdiction
Ghana: Central Bank and Financial Institutions Exclusion
Australia: Processing by Entity Registered or Incorporated in Jurisdiction
Azerbaijan: National Security and Law Enforcement Exemption
Egypt: Personal and Domestic Use Exemption
Serbia: Processing by Local Establishment
Canada - Quebec: Exemption for Data Held by Private Entities on Behalf of Public Bodies
USA - Connecticut: Doing Business in Jurisdiction
Philippines: Exemption for Official Information of Public Servants
Ecuador: Processing by Local Establishment
Morocco: National Security and Law Enforcement Exemption
Serbia: Offering Goods and Services to Data Subjects in Jurisdiction
UAE - ADGM: Judicial Proceedings and Court Records Exemption
Canada - Alberta: Exemption for Specific Purposes of Processing
Australia: Control and Central Management in Jurisdiction Criterion
Morocco: Processing by Entity Registered or Incorporated in Jurisdiction
Malaysia: Exception for Data Processing Outside Jurisdiction
Kazakhstan: Exemption for Archival Processing
USA - Texas: Nonprofit Organization Exemption
New Zealand: Processing in Context of Local Establishment
Liechtenstein: Automated Means Criterion
South Africa: Processing by Entity Registered or Incorporated in Jurisdiction
USA - Virginia: Employment and Agency Relationship Exemption
Saudi Arabia: Personal and Domestic Use Exemption
Azerbaijan: State Secrets Exemption
Malaysia: Long-Term Residency Threshold
USA - Texas: Sectoral Exceptions Regulated by Other Laws
Thailand: National Security and Law Enforcement Exemption
Senegal: Personal and Domestic Use Exemption
Kazakhstan: National Security and Law Enforcement Exemption
Canada - British Columbia: Exemption for Official Information of Public Servants
USA - Montana: Exemption for Specific Purposes of Processing
Saudi Arabia: Processing in Context of Local Establishment
Botswana: Government and Public Agency Exemption
Mexico: Processing by Local Establishment
Liechtenstein: Processing in Context of Local Establishment
USA - Virginia: Exemption for Specific Purposes of Processing
EU: Prospective Filing System Inclusion
Philippines: Sectoral Exceptions Regulated by Other Laws
UAE - ADGM: Sectoral Exceptions Regulated by Other Laws
USA - Tennessee: Revenue-Based Applicability
Philippines: Applicability to Citizens and Residents' Data
Singapore: Historical Data Exemption
USA - Virginia: Doing Business in Jurisdiction
USA - Oregon: Benefit administration data
Philippines: Exemption for Personal Data of Foreign Origin with Adequate Protection
EU: Personal and Domestic Use Exemption
EU: Filing System Criterion
Egypt: National Security and Law Enforcement Exemption
Malaysia: Doing Business in Jurisdiction
India: Processing in jurisdiction
Philippines: Entity's Link or Presence in Jurisdiction
Azerbaijan: Exemption for Archival Processing
Uruguay: Processing-Susceptible Medium Factor
Austria: Automated Means Criterion
USA - Oregon: Exemption for Specific Purposes of Processing
Vietnam: Processing by Local Establishment
Canada - Quebec: Exemption for Specific Purposes of Processing
Jamaica: Entity's Link or Presence in Jurisdiction
Oman: Personal and Domestic Use Exemption
Brazil: Exemption for Specific Purposes of Processing
Oman: Exception for Publicly Available Information, including Public Records
China - Macau: Processing by Entity Registered or Incorporated in Jurisdiction
Thailand: Offering Goods and Services to Data Subjects in Jurisdiction
Malaysia: Processing by Entity Registered or Incorporated in Jurisdiction
British Virgin Islands: Physical Location/Residency of Data Subject in Jurisdiction
Russia: Exemption for Archival Processing
India: Offering Goods and Services to Data Subjects in Jurisdiction
Canada - Quebec: Data Held by Professional Order of a Political Party
EU: Processing by Entity Registered or Incorporated in Jurisdiction
Kazakhstan: Personal and Domestic Use Exemption
USA - Montana: Offering Goods and Services to Data Subjects in Jurisdiction
Ghana: Processing by Entity Registered or Incorporated in Jurisdiction
Switzerland: Red Cross Data Processing Exemption
USA - Tennessee: Offering Goods and Services to Data Subjects in Jurisdiction
Bahrain: Doing Business in Jurisdiction
USA - Virginia: Number of Data Subjects
UK: Automated Means Criterion
British Virgin Islands: Processing by Local Establishment
Panama: Use of Equipment Within Jurisdiction
Australia: Government and Public Agency Exemption
USA - Florida: Offering Goods and Services to Data Subjects in Jurisdiction
UAE - DIFC: Automated Means Criterion
USA - Colorado: Sectoral Exceptions Regulated by Other Laws
Australia: Entity's Link or Presence in Jurisdiction
Brazil: Exemption for Personal Data of Foreign Origin with Adequate Protection
Bahrain: Long-Term Residency Threshold
USA - Florida: Government and Public Agency Exemption
Ghana: Use of Equipment Within Jurisdiction
Thailand: Sectoral Exceptions Regulated by Other Laws
UAE - Mainland: Judicial Proceedings and Court Records Exemption
UK: Personal and Domestic Use Exemption
Russia: Data Processing Based on Contract or Consent by Data Subject in Jurisdiction
UAE - Mainland: Central Bank and Financial Institutions Exclusion
Canada - Alberta: Exemption for Archival Processing
Saudi Arabia: Deceased Individuals Exemption
Macedonia: Monitoring Data Subjects Within Jurisdiction
Angola: Entity's Link or Presence in Jurisdiction
UK: State Secrets Exemption
USA - Oregon: Sale of Personal Data Criterion
Montenegro: Personal and Domestic Use Exemption
Ecuador: Offering Goods and Services to Data Subjects in Jurisdiction
Mexico: Use of Equipment Within Jurisdiction
UAE - DIFC: Processing by Entity Registered or Incorporated in Jurisdiction
USA - Connecticut: Offering Goods and Services to Data Subjects in Jurisdiction
India: Physical Location/Residency of Data Subject in Jurisdiction
Turkmenistan: State Secrets Exemption
USA - Montana: Nonprofit Organization Exemption
Peru: National Security and Law Enforcement Exemption
Vietnam: Location of Individual who Processes Data
Philippines: Use of Equipment Within Jurisdiction
Botswana: Judicial Proceedings and Court Records Exemption
Malaysia: Processing in Context of Local Establishment
EU: Exception for Information about Legal Entities
Philippines: Public License and Permit Information Exemption
USA - Indiana: Central Bank and Financial Institutions Exclusion
EU: Automated Means Criterion
Canada: Personal and Domestic Use Exemption
UAE - Mainland: Free Zone Special Legislation Exemption
EU: Judicial Proceedings and Court Records Exemption
UAE - ADGM: Government and Public Agency Exemption
USA - Colorado: Personal and Domestic Use Exemption
USA - Colorado: Offering Goods and Services to Data Subjects in Jurisdiction
Ecuador: Processing by Entity Registered or Incorporated in Jurisdiction
USA - California: Long-Term Residency Threshold
EU: State Secrets Exemption
Philippines: Doing Business in Jurisdiction
Serbia: Prospective Filing System Inclusion
USA - Colorado: Central Bank and Financial Institutions Exclusion
UAE - ADGM: Entity's Link or Presence in Jurisdiction
Ghana: Personal and Domestic Use Exemption
USA - Texas: Government and Public Agency Exemption
Albania: Personal and Domestic Use Exemption
British Virgin Islands: Doing Business in Jurisdiction
Australia: Doing Business in Jurisdiction
USA - Delaware: Benefit administration data
Barbados: Entity's Link or Presence in Jurisdiction
USA - Montana: Employment and Agency Relationship Exemption
USA - Montana: Higher education institution
UAE - ADGM: Processing by Entity Registered or Incorporated in Jurisdiction
USA - California: Processing by Local Establishment
Uzbekistan: National Security and Law Enforcement Exemption
South Africa: Entity's Link or Presence in Jurisdiction
USA - Oregon: Offering Goods and Services to Data Subjects in Jurisdiction
USA - Florida: Sale of Personal Data Criterion
EU: Processing in Context of Local Establishment
Uruguay: Personal and Domestic Use Exemption
Panama: Processing in jurisdiction
Liechtenstein: Prospective Filing System Inclusion
USA - Texas: Personal and Domestic Use Exemption
USA - Oregon: Statutory Requirement Processing Exception
USA - Connecticut: Number of Data Subjects
Qatar: Personal and Domestic Use Exemption
Morocco: Processing in jurisdiction
USA - California: Processing in Context of Local Establishment
Malaysia: Exemption for Specific Purposes of Processing
Mexico: Processing in jurisdiction
Mexico: Location of Individual who Processes Data
British Virgin Islands: Use of Equipment Within Jurisdiction
USA - Florida: Personal and Domestic Use Exemption
China - Mainland: Offering Goods and Services to Data Subjects in Jurisdiction
British Virgin Islands: Processing by Entity Registered or Incorporated in Jurisdiction
Uruguay: Sectoral Exceptions Regulated by Other Laws
USA - Virginia: Benefit administration data
UAE - Mainland: Data Processing Based on Contract or Consent by Data Subject in Jurisdiction
Panama: Government and Public Agency Exemption
USA - Virginia: Sectoral Exceptions Regulated by Other Laws
Panama: Offering Goods and Services to Data Subjects in Jurisdiction
Panama: Location of Individual who Processes Data
Jamaica: Processing by Local Establishment
Philippines: Central Bank and Financial Institutions Exclusion
Belarus: State Secrets Exemption
Australia: Physical Location/Residency of Data Subject in Jurisdiction
Brazil: National Security and Law Enforcement Exemption
Jamaica: Offering Goods and Services to Data Subjects in Jurisdiction
Senegal: Sectoral Exceptions Regulated by Other Laws
Vietnam: Entity's Link or Presence in Jurisdiction
USA - Delaware: Nonprofit Organization Exemption
USA - Oregon: Processing by Local Establishment
UAE - DIFC: Processing in Context of Local Establishment
Bahrain: Processing by Local Establishment
UAE - Mainland: Processing by Local Establishment
Barbados: Processing in Context of Local Establishment
Vietnam: Processing in jurisdiction
UAE - Mainland: Sectoral Exceptions Regulated by Other Laws
Canada - Alberta: Exception for Information about Legal Entities
Canada - Quebec: Government and Public Agency Exemption
USA - Montana: Government and Public Agency Exemption
Malaysia: Use of Equipment Within Jurisdiction
Mongolia: Government and Public Agency Exemption
Uzbekistan: Personal and Domestic Use Exemption
Panama: Judicial Proceedings and Court Records Exemption
Ghana: Entity's Link or Presence in Jurisdiction
Switzerland: Exemption for Parliamentary Deliberations
Turkey: Filing System Criterion
Morocco: Use of Equipment Within Jurisdiction
Malaysia: Processing in jurisdiction
UAE - Mainland: Government and Public Agency Exemption
Canada - Alberta: Judicial Proceedings and Court Records Exemption
EU: Processing by Local Establishment
Belarus: Personal and Domestic Use Exemption
USA - California: Offering Goods and Services to Data Subjects in Jurisdiction
Ghana: Exemption for Specific Purposes of Processing
British Virgin Islands: Personal and Domestic Use Exemption
USA - Montana: Number of Data Subjects
Turkmenistan: National Security and Law Enforcement Exemption
USA - Delaware: Employment and Agency Relationship Exemption
China - Macau: National Security and Law Enforcement Exemption
USA - Oregon: Judicial Proceedings and Court Records Exemption
China - Macau: Processing in jurisdiction
Russia: Prospective Filing System Inclusion
Panama: Central Bank and Financial Institutions Exclusion
Malaysia: Processing by Local Establishment
USA - Florida: Higher education institution
Ghana: National Security and Law Enforcement Exemption
Senegal: Processing by Local Establishment
China - Macau: Filing System Criterion
China - Macau: Automated Means Criterion
Leave Feedback
local_phone
An unhandled error has occurred.
Reload
🗙
