The Centre for Risk, Compliance & Governance Studies
Login Register
CRCGS

Back to all industries

DNFBPs (Lawyers, Accountants, Dealers) — regulation across countries

RegulatorCountryOfficial site
FinTRACA Financial Transactions and Reports Analysis Centre of Afghanistan Afghanistan source
UIFAND Unitat d'Intel·ligència Financera d'Andorra Andorra source
AUSTRAC Australian Transaction Reports and Analysis Centre Australia source
DFAT Department of Foreign Affairs and Trade Australia source
A-FIU Geldwäschemeldestelle (Financial Intelligence Unit) at the Bundeskriminalamt Austria source
CCB Compliance Commission of The Bahamas Bahamas source
SCB Securities Commission of The Bahamas Bahamas source
BFIU Bangladesh Financial Intelligence Unit Bangladesh source
FSC Financial Services Commission Belize source
COAF Conselho de Controle de Atividades Financeiras Brazil source
BDCB Brunei Darussalam Central Bank Brunei source
IGAE Inspeção-Geral das Atividades Económicas Cabo Verde source
UIF Unidade de Informação Financeira Cabo Verde —
FINTRAC Financial Transactions and Reports Analysis Centre of Canada Canada source
UAF Unidad de Análisis Financiero Chile source
CAMLMAC China Anti-Money Laundering Monitoring and Analysis Centre China source
AMLO Ured za sprječavanje pranja novca (Anti-Money Laundering Office) Croatia source
UAFE Unidad de Análisis Financiero y Económico Ecuador source
EMLCU Egyptian Money Laundering and Terrorist Financing Combating Unit Egypt source
UIF Unidad de Investigación Financiera El Salvador source
ANIF Agencia Nacional de Investigación Financiera (National Agency for Financial Investigation) Equatorial Guinea source
FIU Financial Intelligence Unit Estonia source
TRACFIN Traitement du renseignement et action contre les circuits financiers clandestins France source
SARAS Service for Accounting, Reporting and Auditing Supervision Georgia source
FIU-DE Financial Intelligence Unit (Germany) Germany source
UIF Unidad de Inteligencia Financiera Honduras source
CR Companies Registry Hong Kong source
C&ED Customs and Excise Department Hong Kong source
JFIU Joint Financial Intelligence Unit Hong Kong source
FIU-IND Financial Intelligence Unit – India India source
AMLCU Anti-Money Laundering Compliance Unit Ireland source
FIU-Ireland Financial Intelligence Unit Ireland Ireland source
FSC Financial Services Commission Jamaica source
JAFIC Japan Financial Intelligence Center Japan source
FRC Financial Reporting Centre Kenya source
MOCI Ministry of Commerce and Industry Kuwait source
AMLIO Anti-Money Laundering Intelligence Office Laos source
SIC Special Investigation Commission Lebanon source
Libyan Financial Information Unit (وحدة المعلومات المالية الليبية) Libyan Financial Information Unit (وحدة المعلومات المالية الليبية) Libya source
FMA Finanzmarktaufsicht Liechtenstein Liechtenstein source
FNTT Financial Crime Investigation Service (Finansinių nusikaltimų tyrimo tarnyba) Lithuania source
AED Administration de l'enregistrement, des domaines et de la TVA Luxembourg source
CRF Cellule de Renseignement Financier Luxembourg source
FIA Financial Intelligence Authority Malawi source
SSM Suruhanjaya Syarikat Malaysia Malaysia source
FIU-MU Financial Intelligence Unit Mauritius source
FSC Financial Services Commission Mauritius source
AMSF Autorité Monégasque de Sécurité Financière Monaco source
FIU Financial Intelligence Unit (Police Administration, Department for Financial Intelligence Affairs) Montenegro source
AMLCB Central Body for Anti-Money Laundering Myanmar source
MFIU Myanmar Financial Intelligence Unit Myanmar source
BIPA Business and Intellectual Property Authority Namibia source
FIC Financial Intelligence Centre Namibia source
NFIU Nauru Financial Intelligence Unit Nauru source
FIU-Nepal Financial Intelligence Unit, Nepal Nepal source
BFT Bureau Financieel Toezicht Netherlands source
FIU-NL FIU-Nederland Netherlands source
DIA Department of Internal Affairs New Zealand source
NFIU Nigerian Financial Intelligence Unit Nigeria source
Finanstilsynet (Financial Supervisory Authority of Norway) Finanstilsynet (Financial Supervisory Authority of Norway) Norway source
FIU Financial Intelligence Unit Palau source
SSNF Superintendencia de Sujetos No Financieros Panama source
FASU Financial Analysis and Supervision Unit Papua New Guinea source
IPA Investment Promotion Authority Papua New Guinea source
AMLC Anti-Money Laundering Council Philippines source
MOCI Ministry of Commerce and Industry Qatar source
QFIU Qatar Financial Information Unit Qatar source
ANIF Agence Nationale d'Investigation Financière (National Agency for Financial Investigation) Republic of the Congo source
FIC Financial Intelligence Centre Rwanda source
FIU Financial Intelligence Unit Saint Kitts and Nevis source
FSRC Financial Services Regulatory Commission Saint Kitts and Nevis source
FSRC Nevis Financial Services Regulatory Commission Saint Kitts and Nevis source
FIA Financial Intelligence Authority Saint Lucia source
FIU Financial Intelligence Unit Saint Vincent and the Grenadines source
SIFA Samoa International Finance Authority Samoa source
SAFIU Saudi Financial Investigation Unit Saudi Arabia source
APML Administration for the Prevention of Money Laundering Serbia source
APR Business Registers Agency (APR) Serbia source
ACRA Accounting and Corporate Regulatory Authority Singapore source
STRO Suspicious Transaction Reporting Office Singapore source
FIC Financial Intelligence Centre South Africa source
SEPBLAC Servicio Ejecutivo de la Comisión de Prevención del Blanqueo de Capitales e Infracciones Monetarias Spain source
FIU Financial Intelligence Unit of Sri Lanka Sri Lanka source
Länsstyrelsen i Skåne län (Skåne County Administrative Board) Länsstyrelsen i Skåne län (Skåne County Administrative Board) Sweden source
Länsstyrelsen i Stockholms län (Stockholm County Administrative Board) Länsstyrelsen i Stockholms län (Stockholm County Administrative Board) Sweden source
Länsstyrelsen i Västra Götalands län (Västra Götaland County Administrative Board) Länsstyrelsen i Västra Götalands län (Västra Götaland County Administrative Board) Sweden source
FIU Financial Intelligence Unit (Tanzania) Tanzania source
SERVE SERVE, I.P. (Business Registration and Verification Service) Timor-Leste source
UIF Unidade de Informação Financeira (Financial Information Unit) Timor-Leste source
TRA Transaction Reporting Authority Tonga source
FIA Financial Intelligence Authority Uganda source
Ministry of Economy and Tourism Ministry of Economy and Tourism United Arab Emirates source
UAE FIU UAE Financial Intelligence Unit United Arab Emirates source
OFSI Office of Financial Sanctions Implementation United Kingdom source
SENACLAFT Secretaría Nacional para la Lucha contra el Lavado de Activos y el Financiamiento del Terrorismo Uruguay source
VFSC Vanuatu Financial Services Commission Vanuatu source
Applies across all sectors
MoLSA Ministry of Labour and Social Affairs Afghanistan source
IDPC Commissioner for the Right to Information and Protection of Personal Data (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale) Albania source
AIF Financial Intelligence Agency (Agjencia e Inteligjencës Financiare) Albania source
QKB National Business Centre (Qendra Kombëtare e Biznesit) Albania source
Law or regulationTypeCountryYearSource
Applies across all sectors
Employment Act, 2023 Act Sierra Leone 2023 source
Environmental Protection Agency Act, 2022 Act Sierra Leone 2022 source
Cyber Security and Crime Act, 2021 Act Sierra Leone 2021 source
The Anti-Corruption (Amendment) Act, 2019 (Act No. 9 of 2019) Act Sierra Leone 2019 source
Carbon Pricing Act 2018 Act Singapore 2018 source
Electronic Transactions Act 2010 Act Singapore 2010 source
Computer Misuse Act 1993 Act Singapore 1993 source
Employment Act 1968 Act Singapore 1968 source
Prevention of Corruption Act 1960 Act Singapore 1960 source
Penal Code 1871 Act Singapore 1871 source
Zákon č. 54/2019 Z. z. o ochrane oznamovateľov protispoločenskej činnosti a o zmene a doplnení niektorých zákonov (Act No. 54/2019 Coll. on the Protection of Whistleblowers of Anti-Social Activity) Act Slovakia 2019 source
Zákon č. 69/2018 Z. z. o kybernetickej bezpečnosti a o zmene a doplnení niektorých zákonov (Act No. 69/2018 Coll. on Cybersecurity and on Amendments to Certain Acts) Act Slovakia 2018 source
Zákon č. 272/2016 Z. z. o dôveryhodných službách pre elektronické transakcie na vnútornom trhu a o zmene a doplnení niektorých zákonov (zákon o dôveryhodných službách) (Act No. 272/2016 Coll. on Trust Services for Electronic Transactions in the Internal Market) Act Slovakia 2016 source
Zákon č. 297/2008 Z. z. o ochrane pred legalizáciou príjmov z trestnej činnosti a o ochrane pred financovaním terorizmu a o zmene a doplnení niektorých zákonov (Act No. 297/2008 Coll. on the prevention of the legalisation of proceeds of crime and the financing of terrorism and on amendments to certain laws) Act Slovakia 2008 source
Zákon č. 311/2001 Z. z. Zákonník práce (Labour Code) Act Slovakia 2001 source
Zakon o zaščiti prijaviteljev (ZZPri) (Reporting Persons Protection Act) Act Slovenia 2023 source
Zakon o Informacijskem pooblaščencu (ZInfP) (Information Commissioner Act) Act Slovenia 2005 source
Anti-Corruption Act 2018 Act Solomon Islands 2018 source
General Laws (Anti-Money Laundering and Combating Terrorism Financing) Amendment Act 22 of 2022 Act South Africa 2022 source
Cybercrimes Act 19 of 2020 Act South Africa 2020 source
Prevention and Combating of Corrupt Activities Act 12 of 2004 Act South Africa 2004 source
Electronic Communications and Transactions Act 25 of 2002 Act South Africa 2002 source
Protected Disclosures Act 26 of 2000 Act South Africa 2000 source
Prevention of Organised Crime Act 121 of 1998 Act South Africa 1998 source
Basic Conditions of Employment Act 75 of 1997 Act South Africa 1997 source
Labour Relations Act 66 of 1995 Act South Africa 1995 source
Improper Solicitation and Graft Act Act South Korea 2016 source
The Penal Code Act, 2008 Act South Sudan 2008 source
Real Decreto 1101/2024, de 29 de octubre, por el que se aprueba el Estatuto de la Autoridad Independiente de Protección del Informante, A.A.I. (Royal Decree 1101/2024 approving the Statute of the Independent Whistleblower Protection Authority) Regulation Spain 2024 source
Real Decreto 609/2023, de 11 de julio, por el que se crea el Registro Central de Titularidades Reales y se aprueba su Reglamento (Royal Decree 609/2023 creating the Central Register of Beneficial Ownership) Regulation Spain 2023 source
Ley 2/2023, de 20 de febrero, reguladora de la protección de las personas que informen sobre infracciones normativas y de lucha contra la corrupción (Law 2/2023 on the protection of persons who report regulatory breaches and on combating corruption) Act Spain 2023 source
Ley 6/2020, de 11 de noviembre, reguladora de determinados aspectos de los servicios electrónicos de confianza (Law 6/2020 regulating certain aspects of electronic trust services) Act Spain 2020 source
Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales (Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights) Act Spain 2018 source
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) Regulation Spain 2016 source
Real Decreto Legislativo 2/2015, de 23 de octubre, por el que se aprueba el texto refundido de la Ley del Estatuto de los Trabajadores (Royal Legislative Decree 2/2015 approving the consolidated Workers' Statute) Act Spain 2015 source
Ley 23/2015, de 21 de julio, Ordenadora del Sistema de Inspección de Trabajo y Seguridad Social (Law 23/2015 on the Labour and Social Security Inspectorate System) Act Spain 2015 source
Anti Corruption (Declaration of Assets and Liabilities) Rules 2025 Rule Sri Lanka 2025 source
Personal Data Protection Act, No. 9 of 2022 Act Sri Lanka 2022 source
Computer Crime Act, No. 24 of 2007 Act Sri Lanka 2007 source
Electronic Transactions Act, No. 19 of 2006 Act Sri Lanka 2006 source
Termination of Employment of Workmen (Special Provisions) Act, No. 45 of 1971 Act Sri Lanka 1971 source
قانون المعاملات الإلكترونية لسنة 2007 (Electronic Transactions Act 2007) Act Sudan 2007 source
قانون جرائم المعلوماتية لسنة 2007 (Informatic Offences (Combating) Act 2007) Act Sudan 2007 source
Wet van 2 augustus 2024, houdende wijziging van de Wet ter voorkoming en bestrijding van Money Laundering en Terrorismefinanciering (Act of 2 August 2024 amending the WMTF Act) Act Suriname 2024 source
Wet van 5 september 2023, houdende nadere wijziging van het Wetboek van Strafrecht en intrekking van de Wet Strafbaarstelling Money Laundering (Act of 5 September 2023 amending the Criminal Code and repealing the Money Laundering Penalisation Act) Act Suriname 2023 source
Wet van 24 september 2017, houdende regels inzake preventie en bestrijding van corruptie en instelling van een Anti-corruptie Commissie (Anti-corruptiewet) (Anti-Corruption Act) Act Suriname 2017 source
Cybersäkerhetslag (2025:1506) (Cybersecurity Act) Act Sweden 2025 source
Cybersäkerhetsförordning (2025:1507) (Cybersecurity Ordinance) Regulation Sweden 2025 source
Lag (2021:890) om skydd för personer som rapporterar om missförhållanden (Act on protection for persons who report wrongdoing) Act Sweden 2021 source
Lag (2018:218) med kompletterande bestämmelser till EU:s dataskyddsförordning (Act with supplementary provisions to the EU General Data Protection Regulation) Act Sweden 2018 source
Lag (2017:631) om registrering av verkliga huvudmän (Act on registration of beneficial owners) Act Sweden 2017 source
Lag (2014:307) om straff för penningtvättsbrott (Act on penalties for money laundering offences) Act Sweden 2014 source
Lag (1982:80) om anställningsskydd (Employment Protection Act) Act Sweden 1982 source
Arbetsmiljölag (1977:1160) (Work Environment Act) Act Sweden 1977 source
Federal Act of 26 September 2025 on the Transparency of Legal Persons and the Identification of Beneficial Owners (TLPA) Act Switzerland 2025 source
Federal Act of 25 September 2020 on Data Protection (Data Protection Act, FADP) Act Switzerland 2020 source
Bundesgesetz vom 13. März 1964 über die Arbeit in Industrie, Gewerbe und Handel (Arbeitsgesetz, ArG) (Labour Act) Act Switzerland 1964 source
Labour Law No. 17 of 2010 Act Syria 2010 source
Public Interest Whistleblower Protection Act Act Taiwan 2025 source
Personal Data Protection Act Act Taiwan 1995 source
Money Laundering Control Act Act Taiwan — source
Regulations Governing the Reporting, Response and Drills for Cyber Security Incidents Regulation Taiwan — source
Electronic Signatures Act Act Taiwan — source
Labor Standards Act Act Taiwan — source
Закон Республики Таджикистан «О противодействии коррупции» (Law of the Republic of Tajikistan on Countering Corruption) Act Tajikistan 2020 source
Labour Code of the Republic of Tajikistan (Трудовой кодекс Республики Таджикистан), Law No. 1329 Act Tajikistan 2016 source
Закон Республики Таджикистан «Об Агентстве по государственному финансовому контролю и борьбе с коррупцией Республики Таджикистан» (Law of the Republic of Tajikistan on the Agency for State Financial Control and Combating Corruption) Act Tajikistan 2008 source
Personal Data Protection Act, 2022 (Act No. 11 of 2022) Act Tanzania 2022 source
The Electronic Transactions Act, 2015 Act Tanzania 2015 source
Thailand Taxonomy: A Reference Tool for Sustainable Economy Guideline Thailand 2023 source
Computer-Related Crime Act, B.E. 2550 (2007) Act Thailand 2007 source
Anti-Money Laundering Act, B.E. 2542 (1999) Act Thailand 1999 source
Lei n.º 7/2020, de 26 de Agosto – Medidas de Prevenção e Combate à Corrupção (Law No. 7/2020 – Measures to Prevent and Combat Corruption) Act Timor-Leste 2020 source
Lei n.º 8/2016, de 8 de Julho – Lei de Proteção ao Consumidor (Law No. 8/2016 of 8 July – Consumer Protection Law) Act Timor-Leste 2016 source
Lei n.º 4/2012, de 21 de Fevereiro – Lei do Trabalho (Law No. 4/2012 of 21 February – Labour Law) Act Timor-Leste 2012 source
Código Penal, aprovado pelo Decreto-Lei n.º 19/2009, de 8 de Abril (Penal Code, approved by Decree-Law No. 19/2009 of 8 April) Act Timor-Leste 2009 source
Loi n° 2018-026 du 07 décembre 2018 sur la cybersécurité et la cybercriminalité (Law No. 2018-026 of 7 December 2018 on cybersecurity and cybercrime), as amended by Loi n° 2022-009 Act Togo 2018 source
Computer Crimes Act 2025 Act Tonga 2025 source
Cybersecurity Act 2025 Act Tonga 2025 source
Electronic Transactions Act 2025 Act Tonga 2025 source
Privacy Act 2025 Act Tonga 2025 source
Tonga Climate Change Fund Regulations 2024 Regulation Tonga 2024 source
Counter Terrorism and Transnational Organised Crime Act (Cap. 4.03) Act Tonga 2013 source
Companies (Amendment) Regulations, 2024 (Legal Notice No. 235 of 2024) Regulation Trinidad and Tobago 2024 source
Miscellaneous Provisions (Proceeds of Crime, Anti-Terrorism, Financial Intelligence Unit of Trinidad and Tobago, Securities, Insurance, Non-Profit Organisations, the Civil Asset Recovery and Management and Unexplained Wealth and Miscellaneous Provisions (FATF Compliance)) Act, 2024 Act Trinidad and Tobago 2024 source
Financial Intelligence Unit of Trinidad and Tobago Act, 2009 (Chap. 72:01) Act Trinidad and Tobago 2009 source
Proceeds of Crime Act, 2000 (Chap. 11:27) Act Trinidad and Tobago 2000 source
Companies Act, Chap. 81:01 Act Trinidad and Tobago 1995 source
Décision de la CTAF n° 01-2024 du 27 juin 2024 : lignes directrices relatives à la déclaration des opérations et transactions suspectes (CTAF Decision 01-2024 on guidelines for reporting suspicious operations and transactions) Guideline Tunisia 2024 source
Décret gouvernemental n° 2019-54 du 21 janvier 2019 relatif aux modalités et critères d'établissement du bénéficiaire effectif (Government Decree 2019-54 on the mechanisms and criteria for establishing the beneficial owner) Regulation Tunisia 2019 source
Loi n° 2018-52 du 29 octobre 2018 relative au Registre national des entreprises (Law 2018-52 on the National Register of Enterprises) Act Tunisia 2018 source
Loi organique n° 2015-26 du 7 août 2015 relative à la lutte contre le terrorisme et à la répression du blanchiment d'argent, telle que modifiée par la loi organique n° 2019-9 du 23 janvier 2019 (Organic Law 2015-26 on combating terrorism and preventing money laundering, as amended) Act Tunisia 2015 source
Loi organique n° 2004-63 du 27 juillet 2004 portant sur la protection des données à caractère personnel (Organic Law 2004-63 on the protection of personal data) Act Tunisia 2004 source
Loi n° 2000-83 du 9 août 2000 relative aux échanges et au commerce électroniques (Law 2000-83 on electronic exchanges and commerce) Act Tunisia 2000 source
Code du Travail (Loi n° 66-27 du 30 avril 1966) (Labour Code) Act Tunisia 1966 source
Law on the Protection of Personal Data (Law No. 6698) Act Türkiye 2016 source
Regulation on the Procedures and Principles Regarding the Implementation of Law on the Prevention of the Financing of Terrorism Regulation Türkiye 2013 source
Law No. 3628 on Declaration of Property and Fight Against Bribery and Corruption Act Türkiye 1990 source
Türkmenistanyň Zähmet kodeksine üýtgetmeler we goşmaçalar girizmek hakynda Türkmenistanyň Kanuny (Law of Turkmenistan on Amendments and Additions to the Labour Code) Act Turkmenistan 2025 source
Türkmenistanyň Kanuny Elektron hökümet hakynda (Law of Turkmenistan on E-Government) Act Turkmenistan 2022 source
ObligationCountryNatureVerifiedSourceDetail
AML/CFT policy and internal risk assessment (COAF-supervised entities) Brazil Ongoing; risk assessment reviewed at least every 2 years source View →
AML/CFT record retention (COAF-supervised entities) Brazil 5 years minimum source View →
Enhanced due diligence on politically exposed persons (COAF-supervised entities) Brazil At onboarding + ongoing; PEP status lasts 5 years after leaving office source View →
DNFBP anti-money laundering duties for specified activities China Ongoing, scaled to risk source View →
Registration of dealers in precious metals and stones Hong Kong Register before specified transactions; non-HK dealers report cash transactions within 1 day source View →
AML/CFT questionnaire for AED-supervised professionals Luxembourg Within the deadline notified in the AED's request source View →
Report suspicious operations within 24 hours (vulnerable activities) Mexico Within 24 hours of suspicion source View →
Register with SCUML and appoint a compliance officer (DNFBPs) Nigeria At registration, then ongoing source View →
AML record keeping by DNFBPs Nigeria 5 years source View →
Currency transaction and suspicious transaction reports by DNFBPs Nigeria CTRs within 7 days; nil reports monthly; STRs without delay source View →
Applies across all sectors
Lawful basis, notice and data subject rights Albania — source View →
Personal data breach notification Albania No later than 72 hours after becoming aware of the breach source View →
Beneficial ownership registration and updating Albania Changes within 90 calendar days of the actual change source View →
Lawful basis, notice and data subject rights Algeria — source View →
Personal data breach notification Algeria No later than 5 days after becoming aware source View →
Appoint a data protection officer Algeria — source View →
Designate a person responsible for information systems security Algeria — source View →
Lawful basis, privacy notice and data subject rights Andorra Ongoing source View →
Personal data breach notification to the APDA Andorra Within a maximum of 72 hours of becoming aware (Art. 36) source View →
Lawful basis, notice and data subject rights Angola Ongoing source View →
File an annual beneficial ownership and control attestation with the Registrar of Companies Antigua and Barbuda Annually, within 30 days after the company's anniversary date source View →
Process personal data on a lawful basis, inform data subjects and honour their rights Argentina Ongoing; access within 10 calendar days; rectification or deletion within 5 business days source View →
Integrity programme for legal persons, required for certain contracts with the national State Argentina Ongoing; before contracting with the national State where Art. 24 applies source View →
Privacy policy, collection notice and individual access and correction rights Australia Ongoing source View →
Ransomware and cyber extortion payment reporting Australia Within 72 hours of the payment or of becoming aware of it source View →
Cybersecurity incident reporting by essential and important entities Austria Early warning within 24 hours of becoming aware; notification within 72 hours; final report within one month of the notification source View →
Internal whistleblowing channel Austria 50 or more employees source View →
Lawful basis, information and data subject rights Austria — source View →
Personal data breach notification to the Datenschutzbehörde Austria Without undue delay and where possible within 72 hours of becoming aware source View →
Whistleblowing: internal channel for reports of corruption and protection of reporters Azerbaijan Reports considered within 20 working days source View →
Lawful basis, notice and data subject rights Bahrain Ongoing source View →
Personal data breach notification Bahrain Within 72 hours of discovery source View →
Lawful basis, notice and data subject rights Bangladesh Ongoing source View →
Keep basic and beneficial ownership information at the registered office Barbados Ongoing; kept at least 5 years; certified in each annual return source View →
Lawful basis, consent, notice and data subject rights Belarus Deadlines of 5 working days to 15 days depending on the request (Arts 10-13) source View →
Personal data breach notification Belarus Immediately, no later than 3 working days after becoming aware source View →
Data protection officer or dedicated unit Belarus — source View →
Keep employee records available for labour inspection for at least two years Belize At least 2 years after the record is made source View →
Protection of whistleblowers, witnesses and victims of corruption Benin — source View →
Private entities to supply information to the UIF and report suspected corruption Bolivia — source View →
Providers of public services to accept digitally signed documents and digital-citizenship acts Bolivia — source View →
Lawful basis, notice and data subject rights Bosnia and Herzegovina Ongoing source View →
Personal data breach notification Bosnia and Herzegovina Within 72 hours where possible source View →
Protection against dismissal for good-faith corruption reports Bosnia and Herzegovina Ongoing source View →
Lawful basis, notice and data subject rights Brazil Ongoing source View →
Personal data breach notification to the ANPD and data subjects Brazil Within 3 business days; preliminary notice completed within 20 business days source View →
Integrity (anti-bribery compliance) programme Brazil Ongoing source View →
Whistleblowing channel and protection against retaliation (public bodies and state-owned companies) Brazil Ongoing source View →
Consent, notification and data subject access and correction Brunei — source View →
Personal data breach notification to AITI Brunei No later than 3 days after assessing the breach as notifiable (s.28(1)) source View →
Internal whistleblowing channel Bulgaria Acknowledge within 7 days; feedback within 3 months source View →
Protection of employees, witnesses and whistleblowers reporting corruption Burkina Faso — source View →
Lawful basis, notice and data subject rights Cabo Verde Ongoing source View →
Personal data breach notification Cabo Verde Within 72 hours of becoming aware source View →
Notification of data processing to the CNPD Cabo Verde Before processing starts source View →
Designation of a data protection officer Cabo Verde Ongoing source View →
Fair information principles: accountability, purposes, consent and individual access Canada Ongoing source View →
Annual forced labour and child labour supply-chain report Canada Annually by 31 May source View →
Confidentiality incidents: notification and incident register (Quebec) Canada Promptly where there is a risk of serious injury; no fixed deadline source View →
Protection against dismissal for complaints against the employer Central African Republic — source View →
Report significant cyber incidents to the national CSIRT Chile Early alert within 3 hours; update within 72 hours; final report within 15 calendar days source View →
Adopt a crime prevention model to avoid corporate criminal liability Chile Ongoing source View →
Lawful basis, notice and individual rights for personal information China Ongoing source View →
Personal information protection officer, audits and impact assessments China Ongoing; impact assessment before the activity source View →
Conditions for transferring personal information abroad China Before each transfer abroad source View →
Report cybersecurity incidents within 1, 2 or 4 hours China 1 hour (CII operators), 2 hours (central government departments), 4 hours (others) source View →
Sign a written employment contract within one month of starting work China Within one month of the start of work source View →
Data subject rights and prior informed authorisation Colombia Ongoing source View →
Lawful basis, notice and data subject rights Costa Rica At collection + ongoing; access and rectification requests answered within five working days (Art. 7) source View →
Employers must allow labour inspection Costa Rica — source View →
Lawful basis, notice and data subject rights Croatia — source View →
Personal data breach notification to AZOP Croatia Within 72 hours of becoming aware source View →
Internal whistleblowing channel and confidential person Croatia Acknowledge within 7 days; feedback within 30 days, max 90 source View →
Data subject rights and information on processing Cuba — source View →
Report ICT security incidents immediately Cuba Immediately ("inmediata"); no fixed deadline source View →
Whistleblowing channel and follow-up Cyprus Acknowledge within 7 days; feedback within 3 months of acknowledgement source View →
Cash payment limit of €10,000 Cyprus — source View →
Internal whistleblowing channel for employers with 50 or more employees Czechia Acknowledge within 7 days; assess within 30 days of receipt source View →
Mining permit applicants commit to a community-responsibility cahier des charges Democratic Republic of the Congo At permit application and renewal source View →
Significant incident notification under the NIS 2 Act Denmark Early warning within 24 hours; notification within 72 hours; final report within one month source View →
Personal data breach notification to Datatilsynet Denmark Without undue delay and, where feasible, within 72 hours of becoming aware source View →
Internal whistleblower scheme for employers Denmark Acknowledge within 7 days; feedback within 3 months of acknowledgment source View →
Beneficial owner registration by companies Denmark Register as soon as possible; review at least annually; keep documentation 5 years source View →
Protection of whistleblowers, witnesses and experts from retaliation Djibouti Ongoing source View →
Data subject information, consent and rights (access, rectification, deletion) Dominican Republic Continuous source View →
Notice of dismissal to the labour authority Dominican Republic Within 48 hours of the dismissal source View →
Lawful basis, notice and data subject rights Ecuador Ongoing; 15-day response to rights requests source View →
Personal data breach notification Ecuador Authority: within 5 days of becoming aware; processor to controller: 2 days; data subject: 3 days source View →
Respond to an electronic labour inspection with documentation Ecuador 10 days from notice (one 5-day extension) source View →
Personal data breach notification El Salvador Within 72 hours of becoming aware source View →
No reprisals against workers who complain to the authorities Equatorial Guinea — source View →
Targeted financial sanctions: screening, freezing and reporting Eswatini Freeze and report within 24 hours; quarterly reports to the FSRA source View →
Lawful basis, notice and data subject rights Eswatini Ongoing source View →
Notification of processing to the Data Protection Authority Eswatini Before processing; changes of name or address within 1 week source View →
Cross-border transfer of personal data Eswatini Ongoing source View →
Duty to report corruption and theft or fraud Eswatini When the suspicion arises source View →
Internal whistleblowing channel Finland — source View →
Consent for cookies and other trackers France Before placing or reading trackers source View →
Anti-bribery compliance programme (eight measures) France Ongoing source View →
Internal whistleblowing channel France Ongoing source View →
DateEntityCountryActionPenaltySource
28 OCT 2026 Unnamed estate agent (megler; name not published) - licence revoked Norway Licence Action — source
2 SEP 2026 Citibank, N.A., London Branch United Kingdom Monetary Penalty £4,732,830.58 source
SEP 2026 Panzer Norge AS Norway Monetary Penalty NOK 100,000 source
21 AUG 2026 Legal person (not named in the publication) Liechtenstein Monetary Penalty CHF 50,000 source
19 AUG 2026 FGH Revisjon AS Norway Monetary Penalty NOK 400,000≈ US$41,710 source
14 AUG 2026 Forvis Mazars Accounting Int AB Sweden Monetary Penalty SEK 150,000≈ US$15,775 source
13 AUG 2026 Atlas Special Opportunities, LLC Norway Monetary Penalty NOK 125,000≈ US$13,034 source
10 AUG 2026 Your Neighbourhood Credit Union Limited Canada Monetary Penalty CAD 16,500≈ US$11,835 source
27 JUL 2026 TK OLAM Ltd Mauritius Licence Action — source
27 JUL 2026 Asset Capital Growth Fund Ltd Mauritius Licence Action — source
27 JUL 2026 SB Global Ltd Mauritius Licence Action — source
24 JUL 2026 The New Brunswick Lotteries and Gaming Corporation Canada Monetary Penalty CAD 399,712.5≈ US$283,625 source
23 JUL 2026 Nova Scotia Gaming Corporation Canada Monetary Penalty CAD 231,826≈ US$164,614 source
23 JUL 2026 Caisse populaire acadienne ltée (UNI Financial Cooperation) Canada Monetary Penalty CAD 676,500 source
23 JUN 2026 Legal person (not named in the publication) Liechtenstein Monetary Penalty CHF 50,000 source
22 JUN 2026 Otello Corporation ASA Norway Monetary Penalty NOK 280,000≈ US$28,237 source
22 JUN 2026 Interoil Exploration and Production ASA Norway Monetary Penalty NOK 700,000≈ US$70,593 source
22 JUN 2026 HX Hold Co Ltd Norway Monetary Penalty NOK 70,000≈ US$7,059 source
18 JUN 2026 Unnamed party (name not published by Finanstilsynet) - notification duty, NOK 20,000 Norway Monetary Penalty NOK 20,000≈ US$2,017 source
18 JUN 2026 OHR Strategic Investment Fund Ltd Mauritius Licence Action — source
17 JUN 2026 Sabre Global Technologies Limited United Kingdom Monetary Penalty £1,000,920.59 source
9 JUN 2026 Capricorp Investments B.V. Norway Monetary Penalty NOK 100,000≈ US$10,085 source
5 JUN 2026 INEA AB Sweden Monetary Penalty SEK 110,000≈ US$11,782 source
5 JUN 2026 Caisse populaire Alliance limitée Canada Monetary Penalty CAD 82,500≈ US$59,250 source
4 JUN 2026 Martins Redovisningsbyrå AB Sweden Monetary Penalty SEK 70,000≈ US$7,489 source