Top 10 Privacy Laws
                     TOP 10
PRIVACY
L A W 
OF THE WORLD YOU MUST KNOW 
ABOUT
S
@infosect ra in
 
#learntor i s
e  
www.infosectrain.co
m
General Data Protection Regulation 
(GDPR)  EU
Covers EU member states and regulates 
the  processing and transfer of personal 
data.
Grants individuals control over their data,
requires consent, and imposes data 
breach  notification obligations on 
organizations.
@infosect ra in
 
#learntor i s
e  
www.infosectrain.co
m
California Consumer Privacy Act 
(CCPA)  USA
Gives consumers the right to know, delete, 
and  opt-out of the sale of their personal 
data.
Applies to businesses operating in 
California  and protects California 
residents' personal
information.
@infosect ra in
 
#learntor i s
e  
www.infosectrain.co
m
Personal Information Protection 
and  Electronic Documents Act 
(PIPEDA)  Canada
Governs how private-sector 
organizations  handle personal 
information in Canada.
Requires consent, limits data collection, 
and  mandates data breach reporting.
@infosect ra in
 
#learntor i s
e  
www.infosectrain.co
m
Personal Data Protection Act (PDPA)  
Singapore
Regulates the collection, use, and disclosure 
of  personal data by organizations in 
Singapore.
Includes consent requirements, data
protection provisions, and data 
breach  notification obligations.
@infosect ra in
 
#learntor i s
e  
www.infosectrain.co
m
Lei Geral de Proteção de Dados 
(LGPD)  Brazil
Brazil's comprehensive data protection law
that governs the processing of personal 
data.
Grants rights to data subjects, establishes
data protection principles, and requires 
data  breach notification.
@infosect ra in
 
#learntor i s
e  
www.infosectrain.co
m
Privacy 
Act  
Australia
Governs how Australian government 
agencies  handle personal information.
Sets out rules for the collection, use, 
and  disclosure of personal data and 
provides  individuals with rights of 
access and
correction.
@infosect ra in
 
#learntor i s
e  
www.infosectrain.co
m
Personal Data Protection 
Law  Japan
Regulates the handling of personal data 
by  businesses in Japan.
Mandates data protection measures,
establishes individuals' rights, and 
requires  organizations to appoint a data 
protection  officer.
@infosect ra in
 
#learntor i s
e  
www.infosectrain.co
m
Personal Information Protection Law 
(PIPL)  China
China's comprehensive personal information 
 protection law that sets rules for the 
collection  and use of personal data.
Introduces stricter consent requirements, 
data  localization provisions, and hefty 
penalties for  non-compliance.
@infosect ra in
 
#learntor i s
e  
www.infosectrain.co
m
Data Protection Act 
2018  United Kingdom
Implements the GDPR in the UK and 
provides  additional regulations.
Defines individuals' rights, sets out 
data  protection principles, and 
establishes
enforcement mechanisms.
@infosect ra in
 
#learntor i s
e  
www.infosectrain.co
m
Personal Data Protection Act 
(PDPA)  South Korea
Regulates the processing of personal data 
by  businesses in South Korea.
Requires consent, imposes security
obligations, and introduces data 
breach  reporting requirements.
@infosect ra in
 
#learntor i s
e  
[email protected]
m