Skip to main content

List of Notable Data Privacy Laws and Regulations around the World

MorganHill is a leading provider of data privacy consulting and advisory services for GDPR, CCPA/CPRA, PIPEDA, along with all U.S. state data privacy laws, and numerous other international, country specific data privacy laws.

Current list of notable data privacy laws and regulations from different jurisdictions for which MorganHill has expertise on includes the following:

  • General Data Protection Regulation (GDPR): The GDPR is a comprehensive data protection regulation that applies to the European Union (EU) and the European Economic Area (EEA). It sets out rules for the collection, processing, and transfer of personal data and grants individuals rights over their data.

  • California Consumer Privacy Act (CCPA): The CCPA is a data privacy law in California, United States. It grants California residents certain rights over their personal information and imposes obligations on businesses that collect and process personal data.

  • Personal Information Protection and Electronic Documents Act (PIPEDA): PIPEDA is a federal privacy law in Canada that governs the collection, use, and disclosure of personal information by private-sector organizations in commercial activities.

  • Brazil's General Data Protection Law (LGPD): LGPD is Brazil's data protection law that regulates the processing of personal data and grants individuals’ rights over their data. It applies to businesses operating in Brazil and to the processing of personal data of Brazilian residents.

  • Personal Data Protection Act (PDPA): PDPA is Singapore's data protection law that governs the collection, use, and disclosure of personal data by organizations in Singapore. It sets out obligations for organizations and grants individuals certain rights over their data.

  • Personal Data Protection Act 2010 (PDPA): PDPA is Malaysia's data protection law that regulates the processing of personal data by individuals and organizations in Malaysia. It outlines principles for data protection and establishes individuals' rights.

  • Health Insurance Portability and Accountability Act (HIPAA): HIPAA is a U.S. federal law that sets standards for the protection of individuals' health information. It applies to healthcare providers, health plans, and healthcare clearinghouses.

  • Personal Data Protection Law (PDPL): PDPL is Turkey's data protection law that regulates the processing of personal data and grants individuals’ rights over their data. It applies to individuals and organizations processing personal data in Turkey.

  • Privacy Act: The Privacy Act is a U.S. federal law that governs the collection, use, and disclosure of personal information by federal government agencies. It provides individuals with certain rights over their personal data held by government agencies.

  • Data Protection Act 2018: The Data Protection Act 2018 is the United Kingdom's data protection law that incorporates the GDPR into the UK legal framework. It sets out the rules for data protection and grants individuals rights over their data in the UK.

It is important to note that this list is not exhaustive, and there are many other data privacy laws and regulations in various jurisdictions worldwide. Additionally, some jurisdictions may have sector-specific or industry-specific privacy laws that are not covered here. Organizations operating in specific jurisdictions should consult the relevant data privacy laws applicable to their operations to ensure compliance.  Need assistance with today’s growing list of data privacy laws and regulations? Contact MorganHill today and speak with an expert. 


MorganHill also offers industry leading services for ISO 2700122301277019001, 14001, and 45001.


Additionally, we offer a wide range of regulatory compliance services, along with other specialty services.  Furthermore, we offer world-class ISMS security documentation and other specialty documents for today’s growing cybersecurity and data privacy reporting requirements

Talk to MorganHill today and Get the Answers You Need

Scope: We'll help you define important scoping parameters.

Documentation: We'll help you develop all required policies and procedures.

Guidance: We'll guide you through the ISO/IEC process from start to finish.

One Price: Our fees for all services are fixed.

Wherever you are in North America, Europe, Africa, or Asia, MorganHill is ready to assist.

Expertise: Since 2006, we have been an industry leader for ISO/IEC.

Knowledge: We've worked with every ISO/IEC standard currently in print.

Industry: We've worked in every major industry/sector.

Invalid Input
Invalid Input
Invalid Input
Invalid Input
Invalid Input

Four months after completing all necessary pre-certification work, the organization obtained ISO/IEC 27001 certification from an accredited ISO ANAB body that we recommend to them.

Obtained ISO 27001 certification from an accredited ISO ANAB body that I recommend to them.

Four months after completing all necessary pre-certification work, the organization obtained ISO 27001 certification from an accredited ISO ANAB body that we recommend to them.

Three months after completing all necessary pre-certification work, the organization obtained ISO/IEC 27001 certification from an accredited ISO ANAB body that we recommend to them.