Regulations Library — 300+ Privacy, Cyber and AI Laws

Searchable database of privacy, data protection, cybersecurity and AI regulations across 150+ jurisdictions, filterable by region, industry and type. 331 regulations.

Global (17)

• 5G Security Standards — Telecommunications, Active
• Basel Committee Cyber Resilience Principles — Financial Services, Active
• CIS Critical Security Controls v8 — Technical Standards, Active
• COBIT 2019 — Technical Standards, Active
• IEC 62443 — Technical Standards, Active
• IEEE 2089-2021 Age Appropriate Design Framework — Technical Standards, Active
• ISO/IEC 23053 ML Framework — Technical Standards, Active
• ISO/IEC 42001 AI Management Systems Standard — Technical Standards, Active, effective 2023-12-18
• MITRE ATT&CK Framework — Cybersecurity, Active
• Partnership on AI Safety Standards — AI Regulations, Active
• Digital Imaging and Communications in Medicine Security Standards — Healthcare, Active
• Federal Risk and Authorization Management Program Revision 5 — Government & Defense, Active
• Good Practice Guidelines for Pharmaceutical Industry — Healthcare, Active
• HITRUST Common Security Framework — Healthcare, Active
• NATO Framework for the Security and Governance of Artificial Intelligence — AI Regulations, Active
• PCI DSS v4.0.1 (Payment Card Industry Data Security Standard) — Financial Services, Active, effective 2025-03-31
• Protecting Controlled Unclassified Information in Nonfederal Systems — Government & Defense, Active

AI Regulations (2)

• European Union Artificial Intelligence Act — AI Regulations, Active
• GPAI Framework for Responsible AI — AI Regulations, Active

ASEAN (1)

• ASEAN Model Contractual Clauses — Privacy & Data Protection, Active

Alabama (2)

• Alabama Data Breach Notification Act (Ala. Code §§ 8-38-1 et seq.) — Privacy & Data Protection, Active
• Alabama Personal Data Protection Act (HB 351) — Privacy & Data Protection, Upcoming, effective 2027-05-01

Alaska (1)

• Alaska Personal Information Protection Act (APIPA) — Privacy & Data Protection, Active

Algeria (1)

• Law on the Protection of Individuals in the Processing of Personal Data — Privacy & Data Protection, Active

Argentina (1)

• Ley de Protección de los Datos Personales (Law No. 25,326) — Privacy & Data Protection, Active

Arizona (1)

• Arizona Revised Statutes (A.R.S.) Title 44, Chapter 32 — Cybersecurity, Active

Arkansas (1)

• Arkansas Personal Information Protection Act (Ark. Code §§ 4-110-101 et seq.) — Privacy & Data Protection, Active

Australia (8)

• Australia Children's Online Privacy Code — Privacy & Data Protection, Upcoming, effective 2026-12-10
• Australia Cyber Security Act 2024 (Ransomware Payment Reporting) — Cybersecurity, Active, effective 2026-01-01
• Australia Online Safety Amendment (Social Media Minimum Age) Act 2024 — Privacy & Data Protection, Active, effective 2025-12-10
• Australia Privacy Amendment (Personal Data Protection) Bill 2026 (Tranche 2 exposure draft) — Privacy & Data Protection, Proposed
• Australia Privacy and Other Legislation Amendment Act 2024 — Privacy & Data Protection, Active, effective 2024-11-29
• Australian Privacy Principles — Privacy & Data Protection, Active
• Privacy Act 1988 — Privacy & Data Protection, Active
• Privacy Amendment (Notifiable Data Breaches) Act — Privacy & Data Protection, Active

Austria (3)

• Austria NIS2 Act — Cybersecurity, Upcoming
• Cybersecurity Strategy 2013 (ÖSCS 2.0) — Cybersecurity, Active
• Data Protection Act (DSG) — Privacy & Data Protection, Active

Bangladesh (1)

• Bangladesh Digital Security Act — Cybersecurity, Active

Belgium (2)

• Belgium NIS2 Transposition — Cybersecurity, Active, effective 2024-10-18
• Cybersecurity Strategy 2.0 (2021-2025) — Cybersecurity, Active

Brazil (2)

• Brazilian Artificial Intelligence Act — AI Regulations, Proposed
• General Data Protection Law (LGPD) — Privacy & Data Protection, Active, effective 2020-09-18

Bulgaria (2)

• Bulgaria NIS2 Transposition — Cybersecurity, Active, effective 2025-03-01
• Cybersecurity Act Amendment (2024) — Cybersecurity, Active

California (7)

• AI Transparency Bill (SB 313) — AI Regulations, Active
• California CPPA Regulations - ADMT, Risk Assessments and Cybersecurity Audits — Privacy & Data Protection, Phased, effective 2026-01-01
• California Consumer Privacy Act (CCPA) — Privacy & Data Protection, Active, effective 2020-01-01
• California Consumer Privacy Act AI Amendments — AI Regulations, Active, effective 2020-01-01
• California Digital Age Assurance Act (AB 1043) — Privacy & Data Protection, Upcoming, effective 2027-01-01
• California Privacy Rights Act (CPRA) — Privacy & Data Protection, Active, effective 2023-01-01
• California Transparency in Frontier Artificial Intelligence Act (SB 53) — AI Regulations, Active, effective 2026-01-01

Canada (6)

• Artificial Intelligence and Data Act — AI Regulations, Superseded
• Canada Consumer Privacy Protection Act (CPPA) Bill C-27 — Privacy & Data Protection, Superseded
• Canada Critical Cyber Systems Protection Act (Bill C-8) — Cybersecurity, Phased
• Canada Protecting Privacy and Consumer Data Act (Bill C-36) — Privacy & Data Protection, Proposed
• Personal Information Protection and Electronic Documents Act (PIPEDA) — Privacy & Data Protection, Active, effective 2000-01-13
• Quebec Law 25 — Privacy & Data Protection, Active

Chile (3)

• Chile Personal Data Protection Law (Law No. 21.719) — Privacy & Data Protection, Upcoming, effective 2026-12-01
• Ley sobre Protección de la Vida Privada (Law No. 19.628) — Privacy & Data Protection, Active
• National Artificial Intelligence Policy Bill — AI Regulations, Active

China (6)

• Administrative Provisions on Deep Synthesis Internet Information Services — AI Regulations, Active
• China Cybersecurity Law (2025 Amendments) — Cybersecurity, Active, effective 2026-01-01
• China Measures for Labeling AI-Generated Content — AI Regulations, Active, effective 2025-09-01
• Internet Information Service Algorithmic Recommendation Management Provisions — AI Regulations, Active
• Measures for Managing Generative Artificial Intelligence Services — AI Regulations, Active
• Personal Information Protection Law (PIPL) — Privacy & Data Protection, Active

Colombia (1)

• Law 1581 of 2012 — Privacy & Data Protection, Active

Colorado (3)

• Colorado Artificial Intelligence Act (SB 24-205) — AI Regulations, Superseded, effective 2026-06-30
• Colorado Automated Decision-Making Technology Act (SB 26-189) — AI Regulations, Upcoming, effective 2027-01-01
• Colorado Privacy Act (CPA) — Privacy & Data Protection, Active, effective 2023-07-01

Connecticut (3)

• Connecticut Data Privacy Act (CTDPA) — Privacy & Data Protection, Active, effective 2023-07-01
• Connecticut Electronic Monitoring Law — Employment, Active
• Connecticut SB 4 (2026) Privacy Amendments — Privacy & Data Protection, Upcoming, effective 2026-10-01

Croatia (2)

• Croatia NIS2 Transposition — Cybersecurity, Active
• Cybersecurity Act and Regulation (2024) — Cybersecurity, Active

Cyprus (1)

• DORA and NIS2 Implementation Framework — Cybersecurity, Active

Czech Republic (2)

• Czech Republic NIS2 Transposition (Cybersecurity Act 2025) — Cybersecurity, Active, effective 2025-11-01
• New Cybersecurity Act — Cybersecurity, Active

Delaware (2)

• Delaware Electronic Monitoring Law — Employment, Active
• Delaware Personal Data Privacy Act (DPDPA) — Privacy & Data Protection, Active, effective 2025-01-01

Denmark (1)

• Dual NIS2 Implementation Framework — Cybersecurity, Active

Egypt (3)

• AI Regulatory Proposals — AI Regulations, Active
• Cybercrime Law 2018 — Cybersecurity, Active
• Law No. 151/2020 — Privacy & Data Protection, Active

Estonia (2)

• Data Security Regulations 2025 — Cybersecurity, Active
• Estonia NIS2 Transposition (Cybersecurity Act amendments) — Cybersecurity, Active, effective 2025-07-01

European Union (22)

• Artificial Intelligence Liability Directive — AI Regulations, Active
• Digital Operational Resilience Act (DORA) — Financial Services, Active, effective 2025-01-17
• EU AI Act - Annex I High-Risk Systems (2 Aug 2028) — AI Regulations, Upcoming, effective 2028-08-02
• EU AI Act - Annex III High-Risk System Requirements (2 Dec 2027) — AI Regulations, Upcoming, effective 2027-12-02
• EU AI Act - GPAI Model Obligations (2 Aug 2025) and Enforcement (2 Aug 2026) — AI Regulations, Active, effective 2025-08-02
• EU AI Act - Prohibited Practices Phase 1 — AI Regulations, Active, effective 2025-02-02
• EU AI Act - Synthetic Media Transparency and New Prohibitions (2 Dec 2026) — AI Regulations, Upcoming, effective 2026-12-02
• EU Adequacy Decision for Brazil — Privacy & Data Protection, Active, effective 2026-01-01
• EU Cyber Resilience Act (CRA) — Cybersecurity, Phased, effective 2027-12-11
• EU Cyber Resilience Act - Vulnerability and Incident Reporting (11 Sep 2026) — Cybersecurity, Active, effective 2026-09-11
• EU Cybersecurity Act Revision (CSA2) — Cybersecurity, Proposed
• EU Data Act — Privacy & Data Protection, Phased, effective 2025-09-12
• EU Data Act - Cloud Switching Charges Abolished (12 Jan 2027) — Privacy & Data Protection, Upcoming, effective 2027-01-12
• EU Data Governance Act (DGA) — Privacy & Data Protection, Active, effective 2023-09-24
• EU Digital Omnibus on AI (Regulation (EU) 2026/1744) — AI Regulations, Active, effective 2026-07-27
• EU Digital Omnibus on Data (GDPR, ePrivacy, NIS2, DORA simplification) — Privacy & Data Protection, Proposed
• EU Product Liability Directive (Directive (EU) 2024/2853) — Cybersecurity, Upcoming, effective 2026-12-09
• EU-US Data Privacy Framework (DPF) — Privacy & Data Protection, Active
• GDPR — Privacy & Data Protection, Active, effective 2018-05-25
• GDPR Procedural Regulation (Regulation (EU) 2025/2518) — Privacy & Data Protection, Upcoming, effective 2027-04-02
• Open Banking Security Standards — Financial Services, Active
• eIDAS 2.0 and the EU Digital Identity Wallet — Cybersecurity, Upcoming, effective 2026-12-31

Finland (4)

• Cybersecurity Act 2024 — Cybersecurity, Active
• Finland NIS2 Strategy — Cybersecurity, Active
• Finnish Act on the Secondary Use of Health and Social Data (552/2019) — Healthcare, Active
• Finnish Transport and Communications Agency Cybersecurity Framework — Cybersecurity, Active

Florida (1)

• Florida Digital Bill of Rights — Privacy & Data Protection, Active

France (3)

• France NIS2 Transposition (Résilience Bill) — Cybersecurity, Proposed
• French Digital Services Act Implementation Framework — Technology, Active
• National Digital Security Strategy — Cybersecurity, Active

Georgia (1)

• Georgia Consumer Data Protection Act (GCDPA) — Privacy & Data Protection, Active

Germany (1)

• NIS2-UmsuCG Implementation — Cybersecurity, Active

Ghana (1)

• Data Protection Act 2012 — Privacy & Data Protection, Active

Greece (2)

• Greece NIS2 Transposition (Law 5160/2024) — Cybersecurity, Active, effective 2024-11-27
• Law 5160/2024 (NIS2 Transposition) — Cybersecurity, Active

Greenland (2)

• Framework for Arctic Environmental AI Monitoring — AI Regulations, Active
• Greenlandic Implementation of Danish Data Protection Act — Privacy & Data Protection, Active

Hawaii (1)

• Hawaii Revised Statutes Chapter 487N - Security Breach of Personal Information — Privacy & Data Protection, Active

Hong Kong (1)

• Hong Kong Protection of Critical Infrastructures (Computer Systems) Ordinance — Cybersecurity, Active, effective 2026-01-01

Hungary (1)

• Hungary NIS2 Transposition — Cybersecurity, Active

Iceland (2)

• Act on Privacy and Processing of Personal Data No. 90/2018 — Privacy & Data Protection, Active
• National Guidelines for Ethical AI Development and Deployment — AI Regulations, Active

Idaho (1)

• Idaho Consumer Data Protection Act (ICDPA) — Privacy & Data Protection, Active

Illinois (2)

• AI Video Interview Act — Employment, Active
• Biometric Information Privacy Act (BIPA) — Privacy & Data Protection, Active

India (3)

• India Digital Personal Data Protection Act (DPDPA) — Privacy & Data Protection, Phased, effective 2023-08-11
• Information Technology Act, 2000 — Cybersecurity, Active
• Personal Data Protection Bill (Proposed) — Privacy & Data Protection, Proposed

Indiana (1)

• Indiana Consumer Data Protection Act (INCDPA) — Privacy & Data Protection, Active, effective 2026-01-01

Indonesia (2)

• Indonesia Personal Data Protection Law (UU PDP) — Privacy & Data Protection, Active, effective 2024-10-17
• Presidential Regulation on the Framework for Artificial Intelligence Development — AI Regulations, Active

Iowa (1)

• Iowa Consumer Data Protection Act (ICDPA) — Privacy & Data Protection, Active, effective 2025-01-01

Ireland (3)

• Ireland Data Protection Act 2018 — Privacy & Data Protection, Active
• Ireland NIS2 Transposition (National Cyber Security Bill) — Cybersecurity, Proposed
• ePrivacy Regulations — Privacy & Data Protection, Active

Israel (2)

• Israel Privacy Protection Regulations 2024 — Privacy & Data Protection, Active
• Protection of Privacy Regulations (Data Security) — Privacy & Data Protection, Active

Italy (2)

• Codice in Materia di Protezione dei Dati Personali — Privacy & Data Protection, Active
• Italy NIS2 Transposition (Legislative Decree 138/2024) — Cybersecurity, Active, effective 2024-10-16

Japan (3)

• AI Governance Guidelines — AI Regulations, Active
• Act on Protection of Personal Information (Japan) — Privacy & Data Protection, Active
• Japan AI Promotion Act (Act on Promotion of Research, Development and Utilization of AI-Related Technologies) — AI Regulations, Active, effective 2025-09-01

Kansas (3)

• Kansas Consumer Information Protection Act (K.S.A. § 50-7a01 et seq.) — Cybersecurity, Active
• Kansas Consumer Protection Act — Privacy & Data Protection, Active
• Kansas Privacy Protection Act (Senate Bill 365) — Privacy & Data Protection, Proposed

Kentucky (1)

• Kentucky Consumer Data Protection Act (KCDPA) — Privacy & Data Protection, Active, effective 2026-01-01

Kenya (3)

• Computer Misuse & Cybercrimes Act (Amended 2024) — Cybersecurity, Active
• Draft National AI Strategy (2025 Target) — AI Regulations, Active
• Kenya Data Protection Act 2019 — Privacy & Data Protection, Active

Latvia (1)

• Latvia NIS2 Transposition — Cybersecurity, Active

Lithuania (1)

• Lithuania NIS2 Transposition — Cybersecurity, Active

Louisiana (3)

• Louisiana App Store Accountability Act (HB 570) — Privacy & Data Protection, Active, effective 2026-07-01
• Louisiana Data Privacy Act (HB 977) — Privacy & Data Protection, Upcoming, effective 2027-01-01
• Louisiana Database Security Breach Notification Law — Cybersecurity, Active

Luxembourg (1)

• Luxembourg NIS2 Transposition — Cybersecurity, Active

Maine (3)

• Act to Protect the Privacy of Online Consumer Information — Privacy & Data Protection, Active
• Maine Act to Protect the Privacy of Online Consumer Information — Privacy & Data Protection, Active
• Maine Data Privacy and Protections Act — Privacy & Data Protection, Active

Malaysia (2)

• Malaysia Personal Data Protection (Amendment) Act 2024 — Privacy & Data Protection, Active, effective 2025-06-01
• Personal Data Protection Act 2010 (PDPA) — Privacy & Data Protection, Active

Malta (1)

• Malta NIS2 Transposition — Cybersecurity, Active

Maryland (3)

• Facial Recognition Privacy Protection Act — Employment, Active
• Maryland HB 711 (2026) MODPA Amendments — Privacy & Data Protection, Active, effective 2026-07-01
• Maryland Online Data Privacy Act (MODPA) — Privacy & Data Protection, Active, effective 2025-10-01

Massachusetts (2)

• Massachusetts Data Privacy Law — Privacy & Data Protection, Active
• Massachusetts Data Security Regulation (201 CMR 17.00) — Privacy & Data Protection, Active

Mexico (2)

• Federal Law on the Development and Use of Artificial Intelligence — AI Regulations, Active
• Federal Law on the Protection of Personal Data Held by Private Parties — Privacy & Data Protection, Active

Michigan (2)

• Cyber Civilian Corps Act — Cybersecurity, Active
• Social Security Number Privacy Act — Privacy & Data Protection, Active

Minnesota (1)

• Minnesota Consumer Data Privacy Act (HF 2309) — Privacy & Data Protection, Active, effective 2025-07-31

Mississippi (1)

• Mississippi Data Breach Notification Law (Miss. Code Ann. § 75-24-29) — Cybersecurity, Active

Missouri (1)

• Missouri Data Breach Notification Law (Mo. Rev. Stat. § 407.1500) — Privacy & Data Protection, Active

Montana (1)

• Montana Consumer Data Privacy Act (MCDPA) — Privacy & Data Protection, Active, effective 2024-10-01

Morocco (3)

• AU AI Working Group Participation — AI Regulations, Active
• CNDP Law 09-08 — Privacy & Data Protection, Active
• Cybersecurity Law 09-08 — Cybersecurity, Active

Nebraska (1)

• Nebraska Data Privacy Act (NDPA) — Privacy & Data Protection, Active, effective 2025-01-01

Netherlands (1)

• Netherlands NIS2 Transposition (Cyberbeveiligingswet) — Cybersecurity, Active, effective 2026-08-15

Nevada (2)

• Amendment to NPICICA (SB 260) — Privacy & Data Protection, Active
• Nevada Privacy of Information Collected on the Internet from Consumers Act (NPICICA) — Privacy & Data Protection, Active

New Hampshire (1)

• New Hampshire Privacy Act (NHPA) — Privacy & Data Protection, Active, effective 2025-01-01

New Jersey (2)

• New Jersey A 5328 - Sensitive Data Sale Ban and Data Broker Registry — Privacy & Data Protection, Active, effective 2026-06-30
• New Jersey Data Privacy Act (Senate Bill 332) — Privacy & Data Protection, Active, effective 2025-01-15

New Mexico (1)

• New Mexico Data Breach Notification Act — Privacy & Data Protection, Active

New York (5)

• Automated Employment Decision Tool Law (AEDT) — Employment, Active
• Electronic Monitoring Bill — Employment, Active
• NYDFS Cybersecurity Regulation — Cybersecurity, Active, effective 2025-11-01
• New York Responsible AI Safety and Education (RAISE) Act — AI Regulations, Upcoming, effective 2027-01-01
• New York SHIELD Act — Cybersecurity, Active

New Zealand (1)

• Privacy Act 2020 — Privacy & Data Protection, Active

Nigeria (4)

• Cybercrimes Act 2015 — Cybersecurity, Active
• Draft AI-specific Legislation — AI Regulations, Active
• Nigeria Data Protection Act (NDPA) 2023 — Privacy & Data Protection, Active
• Nigeria Data Protection Regulation (NDPR) — Privacy & Data Protection, Active

North Carolina (1)

• Identity Theft Protection Act — Cybersecurity, Active

North Dakota (2)

• North Dakota Consumer Privacy Rights Act (House Bill 1330) — Privacy & Data Protection, Proposed
• North Dakota Data Privacy and Security Law (Chapter 51-30) — Privacy & Data Protection, Active

Norway (1)

• Personal Data Act — Privacy & Data Protection, Active

Ohio (1)

• Ohio Personal Privacy Act (Senate Bill 376) — Privacy & Data Protection, Active

Oklahoma (3)

• Oklahoma Act Relating to Data Privacy (SB 546) — Privacy & Data Protection, Upcoming, effective 2027-01-01
• Oklahoma Consumer Data Privacy Act (House Bill 2969) — Privacy & Data Protection, Proposed
• Oklahoma Security Breach Notification Act (24 O.S. §§ 161-166) — Privacy & Data Protection, Active

Oregon (2)

• Oregon Companion Chatbot Disclosure Act (SB 1546) — AI Regulations, Upcoming, effective 2027-01-01
• Oregon Consumer Privacy Act (OCPA) — Privacy & Data Protection, Active, effective 2024-07-01

Pakistan (1)

• Pakistan Personal Data Protection Act 2023 — Privacy & Data Protection, Active

Papua New Guinea (1)

• Cybercrime Code Act 2016 — Cybersecurity, Active

Pennsylvania (1)

• Pennsylvania Consumer Data Privacy Act (House Bill 1126) — Privacy & Data Protection, Active

Peru (1)

• Law Establishing the Framework for the Development and Use of Artificial Intelligence — AI Regulations, Active

Philippines (2)

• Data Privacy Act of 2012 — Privacy & Data Protection, Active
• Philippines Data Privacy Act IRR 2024 — Privacy & Data Protection, Active

Poland (1)

• Poland NIS2 Framework — Cybersecurity, Active

Portugal (1)

• Portugal NIS2 Transposition — Cybersecurity, Active

Qatar (1)

• Law No. 13 of 2016 Concerning Personal Data Protection — Privacy & Data Protection, Active

Rhode Island (2)

• Rhode Island Data Transparency and Privacy Protection Act — Privacy & Data Protection, Active, effective 2026-01-01
• Rhode Island Identity Theft Protection Act — Privacy & Data Protection, Active

Romania (1)

• Romania NIS2 Implementation — Cybersecurity, Active

Russia (1)

• Federal Law on Personal Data (No. 152-FZ) — Privacy & Data Protection, Active

Saudi Arabia (2)

• Personal Data Protection Law (PDPL) — Privacy & Data Protection, Active
• Saudi Arabian Monetary Authority Cyber Security Framework — Financial Services, Active

Singapore (2)

• Model AI Governance Framework — AI Regulations, Active
• Personal Data Protection Act (Singapore) — Privacy & Data Protection, Active

Slovakia (1)

• Slovakia NIS2 Transposition — Cybersecurity, Active

Slovenia (1)

• Slovenia NIS2 Transposition — Cybersecurity, Active

South Africa (3)

• AI Policy Framework 2024 — AI Regulations, Active
• Cybercrimes Act 2020 — Cybersecurity, Active
• Protection of Personal Information Act (POPIA) 2020 — Privacy & Data Protection, Active

South Carolina (1)

• Insurance Data Security Act — Cybersecurity, Active

South Dakota (1)

• South Dakota Breach Notification Law (SDCL Chapter 22-40-19 to 22-40-26) — Privacy & Data Protection, Active

South Korea (2)

• National AI Ethics Standards — AI Regulations, Active
• South Korea AI Basic Act (Framework Act on AI Development and Trust) — AI Regulations, Active, effective 2026-01-22

Spain (2)

• Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights — Privacy & Data Protection, Active
• Spain NIS2 Transposition (Ley de Coordinación y Gobernanza de la Ciberseguridad) — Cybersecurity, Proposed

Sweden (2)

• Sweden NIS2 Transposition (Cybersäkerhetslagen) — Cybersecurity, Active, effective 2026-01-15
• Swedish Data Protection Act (Dataskyddslagen) — Privacy & Data Protection, Active

Switzerland (1)

• Swiss-US Privacy Framework — Privacy & Data Protection, Active

Taiwan (1)

• Taiwan Artificial Intelligence Basic Act — AI Regulations, Active, effective 2026-01-14

Technical Standards (22)

• AI Verify Testing Framework and Toolkit — Technical Standards, Active
• Center for Internet Security Critical Security Controls — Technical Standards, Active
• Cloud Security Alliance Controls Matrix — Technical Standards, Active
• Cloud Security Alliance Security Trust Assurance and Risk — Technical Standards, Active
• Control Objectives for Information and Related Technologies — Technical Standards, Active
• Defense Information Systems Agency Security Technical Implementation Guides — Technical Standards, Active
• Development Security Operations Framework — Technical Standards, Active
• Framework Convention on Artificial Intelligence, Human Rights and Democracy — Technical Standards, Active
• G7 Hiroshima Process on AI Governance — Technical Standards, Active
• Harmonized Standards for EU AI Act Compliance — Technical Standards, Active
• IEEE P2863: Organizational Governance of Artificial Intelligence — Technical Standards, Active
• IEEE P7003: Algorithmic Bias Considerations — Technical Standards, Active
• ISO 31000 Risk Management — Technical Standards, Active
• ISO/IEC 23894: Information Technology — Artificial Intelligence — Risk Management — Technical Standards, Active
• ISO/IEC 27001 Information Security Management — Technical Standards, Active
• ISO/IEC 42001: Information Technology — Artificial Intelligence — Management System — Technical Standards, Active
• NIST Cybersecurity Framework 2.0 — Technical Standards, Active, effective 2024-02-26
• OECD Framework for Classifying AI Systems — Technical Standards, Active
• OWASP Top 10 Web Application Security Risks — Technical Standards, Active
• SANS Critical Security Controls — Technical Standards, Active
• Statement on Standards for Attestation Engagements 18 — Technical Standards, Active
• Zero Trust Security Model — Technical Standards, Active

Tennessee (1)

• Tennessee Information Protection Act (TIPA) — Privacy & Data Protection, Active, effective 2025-07-01

Texas (4)

• Texas App Store Accountability Act (SB 2420) — Privacy & Data Protection, Active, effective 2026-01-01
• Texas Data Privacy and Security Act (TDPSA) — Privacy & Data Protection, Active, effective 2024-07-01
• Texas Identity Theft Enforcement and Protection Act (TITEPA) — Cybersecurity, Active
• Texas Responsible Artificial Intelligence Governance Act (TRAIGA, HB 149) — AI Regulations, Active, effective 2026-01-01

Thailand (2)

• Personal Data Protection Act (PDPA) — Privacy & Data Protection, Active
• Thailand Draft Artificial Intelligence Act — AI Regulations, Proposed

Turkey (1)

• Law on the Protection of Personal Data (KVKK) — Privacy & Data Protection, Active

Ukraine (1)

• Ukraine Cybersecurity Strategy 2025 — Cybersecurity, Active

United Arab Emirates (1)

• UAE Federal Decree Law No. 45 of 2021 on Personal Data Protection — Privacy & Data Protection, Active

United Kingdom (5)

• UK Cyber Security and Resilience Bill — Cybersecurity, Proposed
• UK Data Protection Act 2018 — Privacy & Data Protection, Active
• UK Data Use and Access Act (DUAA) — Privacy & Data Protection, Phased, effective 2026-02-05
• UK GDPR — Privacy & Data Protection, Active, effective 2018-05-25
• UK Pro-Innovation Approach to AI Regulation — AI Regulations, Active

United States (36)

• AI Incident Reporting Requirements — AI Regulations, Active
• Algorithmic Accountability Act 2024 — AI Regulations, Active
• Blueprint for an AI Bill of Rights — AI Regulations, Active
• CCPA Compliance for National Companies — Cross-Industry, Active, effective 2020-01-01
• CIRCIA Cyber Incident Reporting Rule (CISA) — Cybersecurity, Proposed
• COPPA (Children's Online Privacy Protection Act) — Privacy & Data Protection, Active
• COPPA Rule 2025 Amendments — Privacy & Data Protection, Active, effective 2026-04-22
• Computer Fraud and Abuse Act — Cybersecurity, Active
• Cybersecurity Maturity Model Certification — Government & Defense, Phased, effective 2025-11-10
• Executive Order 14365 - Ensuring a National Policy Framework for Artificial Intelligence — AI Regulations, Active, effective 2025-12-11
• FCC Supply Chain Security Rules — Telecommunications, Active
• FDA Medical Device Cybersecurity Guidelines — Healthcare, Active
• FERPA (Family Educational Rights and Privacy Act) — Education, Active
• FFIEC Cybersecurity Assessment Tool — Financial Services, Active
• FTC Health Breach Notification Rule 2024 Update — Healthcare, Active, effective 2024-07-29
• Federal Information Security Management Act — Government & Defense, Active
• GDPR Compliance for US Companies — Cross-Industry, Active, effective 2018-05-25
• GLBA (Gramm-Leach-Bliley Act) — Financial Services, Active
• HIPAA (Healthcare) — Healthcare, Active, effective 1996-08-21
• HIPAA Security Rule Modernisation (Proposed Rule) — Healthcare, Proposed
• Health Information Technology for Economic and Clinical Health Act — Healthcare, Active
• INGAA (Natural Gas) — Energy & Utilities, Active
• IoT Cybersecurity Improvement Act — Cybersecurity, Active
• NCUA Cyber Incident Notification Requirements — Financial Services, Active
• NERC CIP v7 — Energy & Utilities, Active
• NIST AI Risk Management Framework (AI RMF 1.0) — AI Regulations, Active, effective 2023-01-26
• NIST Privacy Framework — Technical Standards, Active
• NIST SP 800-218 Secure Software Development Framework — Technical Standards, Active, effective 2022-02-03
• NIST Special Publication 800-53 — Government & Defense, Active
• SEC Cybersecurity Disclosure Rules — Financial Services, Active, effective 2023-12-18
• SEC Regulation S-P Amendments (Customer Data Incident Response) — Financial Services, Active, effective 2026-06-03
• Sarbanes-Oxley Act of 2002 (SOX) — Financial Services, Active
• TAKE IT DOWN Act — Privacy & Data Protection, Active, effective 2026-05-19
• TSA Security Directives for Pipelines — Energy & Utilities, Active
• Water Sector Cybersecurity Framework — Energy & Utilities, Active
• Zero Trust Architecture (NIST SP 800-207) — Cybersecurity, Active

Utah (2)

• Utah App Store Accountability Act (SB 142) — Privacy & Data Protection, Phased, effective 2026-05-06
• Utah Consumer Privacy Act (UCPA) — Privacy & Data Protection, Active, effective 2023-12-31

Vermont (2)

• Vermont Data Broker Registry and Breach Law — Privacy & Data Protection, Active
• Vermont Data Privacy and Online Surveillance Act (Act 145) — Privacy & Data Protection, Upcoming, effective 2027-01-01

Vietnam (4)

• Law on Cybersecurity of Vietnam — Cybersecurity, Active
• Vietnam Law on Artificial Intelligence — AI Regulations, Active, effective 2026-03-01
• Vietnam Law on Digital Technology Industry — AI Regulations, Active, effective 2026-01-01
• Vietnam Personal Data Protection Law (Law No. 91/2025/QH15) — Privacy & Data Protection, Active, effective 2026-01-01

Virginia (1)

• Virginia Consumer Data Protection Act (VCDPA) — Privacy & Data Protection, Active, effective 2023-01-01

Washington (2)

• Washington Companion Chatbot Safeguards (HB 2225) — AI Regulations, Upcoming, effective 2027-01-01
• Washington Privacy Act — Privacy & Data Protection, Active

West Virginia (1)

• West Virginia Consumer Credit and Protection Act — Privacy & Data Protection, Active

Wisconsin (1)

• Wisconsin Data Privacy and Protection Act (2023 Assembly Bill 957) — Privacy & Data Protection, Active

Wyoming (1)

• Wyoming Data Breach Notification Law — Cybersecurity, Active