Regulatory Watch  /  Law library

LAW LIBRARY

US and EU privacy, AI governance, cybersecurity and data protection laws: where they apply, who enforces them, and whether they are in force.

⚖️ Latest developments 🌐 Jurisdictions 📚 Law library
United States (federal) 16
42 CFR Part 2 Health Date not recorded CAN-SPAM Act Communications In force since Jan 2004 Children's Online Privacy Protection Act Children In force since Apr 2000 Electronic Communications Privacy Act Communications Date not recorded Fair Credit Reporting Act Financial In force since Apr 1971 Family Educational Rights and Privacy Act Education In force since Aug 1974 FCC CPNI / privacy rules Communications Date not recorded FTC Act Section 5 Privacy Date not recorded FTC Safeguards Rule Security Date not recorded Genetic Information Nondiscrimination Act Genetic In force since Nov 2009 Gramm-Leach-Bliley Act Financial Date not recorded HIPAA Privacy, Security and Breach Notification Rules Health In force since Apr 2003 HITECH Act Health Date not recorded SEC Cybersecurity Disclosure Rules Cyber In force since Dec 2023 Telephone Consumer Protection Act Communications In force since Dec 1991 Video Privacy Protection Act Privacy In force since Nov 1988
US states 42
Alabama comprehensive privacy law (2026) · Alabama Privacy Takes effect May 1, 2027 California Age-Appropriate Design Code Act · California Children Date not recorded California Confidentiality of Medical Information Act · California Health Date not recorded California Consumer Privacy Act (as amended by CPRA) · California Privacy In force since Jan 2020 California Delete Act · California Data brokers Date not recorded California Genetic Information Privacy Act · California Genetic In force since Jan 2022 Colorado AI Act (SB 26-189, replacing SB 24-205) · Colorado AI Takes effect Jan 1, 2027 Colorado Privacy Act · Colorado Privacy In force since Jul 2023 Connecticut Data Privacy Act · Connecticut Privacy In force since Jul 2023 Delaware Personal Data Privacy Act · Delaware Privacy In force since Jan 2025 Florida Digital Bill of Rights · Florida Privacy In force since Jul 2024 Illinois Biometric Information Privacy Act · Illinois Biometrics In force since Oct 2008 Indiana Consumer Data Protection Act · Indiana Privacy In force since Jan 2026 Iowa Consumer Data Protection Act · Iowa Privacy In force since Jan 2025 Kentucky Consumer Data Protection Act · Kentucky Privacy In force since Jan 2026 Louisiana comprehensive privacy law (2026) · Louisiana Privacy Takes effect Jan 1, 2027 Maryland Age-Appropriate Design Code (Kids Code) · Maryland Children Date not recorded Maryland Online Data Privacy Act · Maryland Privacy In force since Oct 2025 Massachusetts 201 CMR 17.00 · Massachusetts Security In force since Mar 2010 Minnesota Consumer Data Privacy Act · Minnesota Privacy In force since Jul 2025 Montana Consumer Data Privacy Act · Montana Privacy In force since Oct 2024 Nebraska Data Privacy Act · Nebraska Privacy In force since Jan 2025 Nevada consumer health data law (SB 370) · Nevada Health Date not recorded New Hampshire Data Privacy Act · New Hampshire Privacy In force since Jan 2025 New Jersey Data Privacy Act · New Jersey Privacy In force since Jan 2025 New York SAFE for Kids Act · New York Children Date not recorded New York SHIELD Act · New York Security In force since Mar 2020 Oklahoma comprehensive privacy law (2026) · Oklahoma Privacy Takes effect Jan 1, 2027 Oregon Consumer Privacy Act · Oregon Privacy In force since Jul 2024 Oregon data broker registration law · Oregon Data brokers Date not recorded Rhode Island Data Transparency and Privacy Protection Act · Rhode Island Privacy In force since Jan 2026 Tennessee Information Protection Act · Tennessee Privacy In force since Jul 2025 Texas Capture or Use of Biometric Identifier Act · Texas Biometrics In force since Sep 2009 Texas data broker law · Texas Data brokers Date not recorded Texas Data Privacy and Security Act · Texas Privacy In force since Jul 2024 Utah Consumer Privacy Act · Utah Privacy In force since Dec 2023 Utah Minor Protection in Social Media Act · Utah Children Date not recorded Vermont comprehensive privacy law (2026) · Vermont Privacy Takes effect Jan 1, 2028 Vermont data broker law · Vermont Data brokers Date not recorded Virginia Consumer Data Protection Act · Virginia Privacy In force since Jan 2023 Washington biometric identifiers law (RCW 19.375) · Washington Biometrics Date not recorded Washington My Health My Data Act · Washington Health In force since Mar 2024
European Union 14
Cyber Resilience Act Cyber Date not recorded Data Act Data governance In force since Sep 2025 Data Governance Act Data governance In force since Sep 2023 Digital Markets Act Platforms In force since May 2023 Digital Services Act Platforms In force since Feb 2024 ePrivacy Directive Privacy Date not recorded EU AI Act AI In force since Aug 2024 EU-U.S. Data Privacy Framework Transfers Date not recorded European Health Data Space Health Date not recorded General Data Protection Regulation Privacy In force since May 2018 Law Enforcement Directive Privacy In force since May 2018 NIS2 Directive Cyber In force since Oct 2024 Regulation (EU) 2018/1725 Privacy In force since Dec 2018 Standard Contractual Clauses Transfers Date not recorded

Effective dates are shown where recorded; a missing date is shown as such rather than estimated.