Disclaimer: The information provided in this list, sourced from the IAPP website, is for informational purposes only and should not be considered as legal advice. It is crucial to verify the status of data protection legislation in each country through official sources. This list serves as a reference guide and should not replace professional legal counsel or consultation. For accurate and up-to-date information, consult official sources or seek legal advice.
Asia:
Afghanistan
The IAPP is unaware of data protection legislation in Afghanistan.
Last Updated: December 2021
Armenia
Privacy Legislation:
Law on the Protection of Personal Data (2015) (English, sourced from Freedom of Information Center of Armenia)
Authority:
Last Updated: December 2021
Azerbaijan
Privacy Legislation:
Authority:
Last Updated: December 2021
Bahrain
Privacy Legislation:
Authority:
Last Updated: December 2021
Bangladesh
Privacy Legislation:
Bangladesh is reportedly considering a personal data protection law like GDPR.
Additional Resources:
In 2020, Bangladesh passed the Digital Security Act.
Last Updated: December 2021
Bhutan
Privacy Legislation:
Bhutan enacted the Information, Communications and Media Act in 2018. It applies to ICT and Media Sectors.
Authority:
Last Updated: December 2021
Brunei
Privacy Legislation/Authority:
The Authority for Infocommunications Technology Industry (AITI) is the interim data office to develop a new data protection law. The draft law can be found here.
Last Updated: December 2021
Cambodia
Privacy Legislation:
The IAPP is unaware of data protection legislation in Cambodia.
Last Updated: December 2021
China
Privacy Legislation:
Personal Information Protection Law of the People's Republic of China (English, In-Language)
Authority:
Additional Resources:
The IAPP Resource Center hosts a "China" topic page.
China is included in the IAPP's "Global Comprehensive Privacy Law Mapping Chart."
Last Updated: December 2021
East Timor (Timor-Leste)
Georgia
Privacy Legislation:
Authority:
Note: Parliament approved a bill abolishing the agency on Dec. 31, 2021. It is unknown whether the bill will become enforceable.
Last Updated: December 2021
Hong Kong
Privacy Legislation:
Authority:
Additional Resources:
Hong Kong is included in the IAPP's "Global Comprehensive Privacy Law Mapping Chart."
Last Updated: December 2021
India
Privacy Legislation:
India is considering draft personal data protection legislation. (Personal Data Protection Bill, 2019)
Additional Resources:
The IAPP Resource Center hosts an "India" topic page.
Last Updated: December 2021
Indonesia
Privacy Legislation:
Iran
Privacy Legislation:
The IAPP is unaware of specific data protection legislation in Iran.
Last Updated: December 2021
Iraq
Privacy Legislation:
The IAPP is unaware of specific data protection legislation in Iraq.
Last Updated: December 2021
Israel
Privacy Legislation:
Authority:
Last Updated: December 2021
Japan
Privacy Legislation:
Authority:
Last Updated: December 2021
Jordan
Privacy Legislation/Authority:
Jordan is considering draft personal data protection legislation. (Draft law proposed in 2021)
Last Updated: December 2021
Kazakhstan
Privacy Legislation:
Kuwait
Privacy Legislation:
Authority:
Last Updated: December 2021
Kyrgyzstan
Privacy Legislation:
Authority:
The State agency for protection of personal data was established in 2021 (link unavailable)
Last Updated: December 2021
Laos
Privacy Legislation:
The IAPP is unaware of specific data protection legislation in Lao People's Democratic Republic.
Last Updated: December 2021
Lebanon
Privacy Legislation:
Authority:
The IAPP is unaware of an established data protection authority.
Last Updated: December 2021
Macau
Privacy Legislation:
Authority:
Last Updated: December 2021
Malaysia
Privacy Legislation:
Authority:
Last Updated: December 2021
Maldives
Mongolia
Privacy Legislation:
A draft law on the protection of personal data was submitted to Mongolia’s Parliament.
It appears the law was passed in December 2021.
Last Updated: February 2022
Myanmar
Privacy Legislation:
The IAPP is unaware of specific data protection legislation in Myanmar.
Last Updated: December 2021
Nepal
Privacy Legislation:
Authority:
The IAPP is unaware of an established data protection authority.
Last Updated: December 2021
North Korea
Privacy Legislation:
The IAPP is unaware of data protection legislation in North Korea.
Last Updated: December 2021
Oman
Privacy Legislation:
Oman adopted the Law on the Protection of Personal Data in February 2022. The law will come into force in February 2023.
Last Updated: February 2022
Pakistan
Privacy Legislation:
Last Updated: December 2021
Palestine
Privacy Legislation:
The IAPP is unaware of data protection legislation in Palestine.
Last Updated: December 2021
Philippines
Privacy Legislation:
Authority:
Last Updated: December 2021
Qatar
Privacy Legislation:
Authority:
Qatar Financial Center (QFC) Regulatory Authority (Data Protection Regulations, Data Protection Rules)
Last Updated: December 2021
Saudi Arabia
Privacy Legislation:
Personal Data Protection Law (Delayed to March 2023)
Authority:
Last Updated: March 2022
Singapore
Privacy Legislation:
Authority:
Additional Resources:
Singapore is included in the IAPP's "Global Comprehensive Privacy Law Mapping Chart."
Last Updated: December 2021
South Korea
Privacy Legislation:
Authority:
Additional Resources:
South Korea is included in the IAPP's "Global Comprehensive Privacy Law Mapping Chart."
Last Updated: December 2021
Sri Lanka
Privacy Legislation:
Last Updated: December 2021
Syria
Privacy Legislation:
The IAPP is unaware of data protection legislation in Syria.
Last Updated: December 2021
Taiwan
Privacy Legislation/Authority:
Last Updated: December 2021
Tajikistan
Privacy Legislation:
Authority:
It appears the Main Department for the Protection of State Secrets under the Government of the Republic of Tajikistan is the regulator.
Last Updated: December 2021
Thailand
Privacy Legislation:
Authority:
Last Updated: June 2022
Turkey
Privacy Legislation:
Authority:
Additional Resources:
Turkey is included in the IAPP's "Global Comprehensive Privacy Law Mapping Chart."
Last Updated: December 2021
Turkmenistan
Privacy Legislation:
Authority:
The IAPP is unaware of a data protection authority for Turkmenistan.
Last Updated: December 2021
United Arab Emirates
Privacy Legislation/Authority:
Federal Decree Law No. 45/2021 (Link not available)
The UAE Data Office is not yet established.
Abu Dhabi Global Market (ADGM) – Office of Data Protection, Regulations
Dubai International Finance Centre (DIFC) – Data Protection Law
Last Updated: December 2021
Uzbekistan
Privacy Legislation:
Law No. ZRU-547 on Personal Data, 2019 (The law was amended in January 2021.)
Authority:
Last Updated: December 2021
Vietnam
Privacy Legislation/Authority:
A draft decree on personal data protection was proposed in 2021.
Draft Decree on Personal Data Protection, 2021 (Link not available)
Last Updated: December 2021
Yemen
Privacy Legislation:
The IAPP is unaware of data protection legislation in Yemen.
Last Updated: December 2021