Healthcare & Pharma — regulation across countries

Regulator	Country	Official site
DFAT Department of Foreign Affairs and Trade	Australia	source
OAIC Office of the Australian Information Commissioner	Australia	source
ANPD Autoridade Nacional de Proteção de Dados	Brazil	source
OPC Office of the Privacy Commissioner of Canada	Canada	source
CAC Cyberspace Administration of China	China	source
CNIL Commission nationale de l'informatique et des libertés	France	source
BfDI Federal Commissioner for Data Protection and Freedom of Information	Germany	source
DPBI Data Protection Board of India	India	source
PPC Personal Information Protection Commission	Japan	source
MACC Malaysian Anti-Corruption Commission	Malaysia	—
PDPC-MY Personal Data Protection Commissioner	Malaysia	source
RMCD Royal Malaysian Customs Department	Malaysia	source
AP Autoriteit Persoonsgegevens	Netherlands	source
NDPC Nigeria Data Protection Commission	Nigeria	source
SDAIA Saudi Data and AI Authority	Saudi Arabia	source
PDPC Personal Data Protection Commission	Singapore	source
IR Information Regulator	South Africa	source
OFSI Office of Financial Sanctions Implementation	United Kingdom	source
OFAC Office of Foreign Assets Control	United States	source
Applies across all sectors
MoLSA Ministry of Labour and Social Affairs	Afghanistan	source
IDPC Commissioner for the Right to Information and Protection of Personal Data (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale)	Albania	source
AIF Financial Intelligence Agency (Agjencia e Inteligjencës Financiare)	Albania	source
QKB National Business Centre (Qendra Kombëtare e Biznesit)	Albania	source
ISHPSHSH State Labour and Social Services Inspectorate (Inspektorati Shtetëror i Punës dhe Shërbimeve Shoqërore)	Albania	source
CTRF Cellule de Traitement du Renseignement Financier (Financial Intelligence Processing Unit)	Algeria	—
HATPLC Haute autorité de transparence, de prévention et de lutte contre la corruption (High Authority for Transparency, Prevention and Combating of Corruption)	Algeria	source
MTESS Ministère du Travail, de l'Emploi et de la Sécurité Sociale (Ministry of Labour, Employment and Social Security)	Algeria	source
APDA Agència Andorrana de Protecció de Dades	Andorra	source
ANC-AD Agència Nacional de Ciberseguretat d'Andorra	Andorra	source
UIF Unidade de Informação Financeira	Angola	source
Integrity Commission Integrity Commission	Antigua and Barbuda	—
AAIP Agencia de Acceso a la Información Pública	Argentina	source
OA Oficina Anticorrupción	Argentina	source
UIF Unidad de Información Financiera	Argentina	source
Anti-Corruption Committee of the Republic of Armenia Anti-Corruption Committee of the Republic of Armenia	Armenia	source
Corruption Prevention Commission Corruption Prevention Commission	Armenia	source
FMC Financial Monitoring Center	Armenia	source
ACSC Australian Cyber Security Centre	Australia	source
ATO Australian Taxation Office	Australia	source
NACC National Anti-Corruption Commission	Australia	source
Arbeitsinspektion (Zentral-Arbeitsinspektorat and Arbeitsinspektorate) Arbeitsinspektion (Zentral-Arbeitsinspektorat and Arbeitsinspektorate)	Austria	source
BCS Bundesamt für Cybersicherheit	Austria	source
BAK Bundesamt zur Korruptionsprävention und Korruptionsbekämpfung	Austria	source
DSB Datenschutzbehörde (Austrian Data Protection Authority)	Austria	source
Financial Monitoring Service of the Republic of Azerbaijan Financial Monitoring Service of the Republic of Azerbaijan	Azerbaijan	source
Ministry of Labour and Social Protection of Population of the Republic of Azerbaijan Ministry of Labour and Social Protection of Population of the Republic of Azerbaijan	Azerbaijan	source
State Labour Inspection Service State Labour Inspection Service	Azerbaijan	source
LMRA Labour Market Regulatory Authority	Bahrain	source
NCSC National Cyber Security Center	Bahrain	source
BGD e-GOV CIRT BGD e-GOV CIRT	Bangladesh	source
Ministry of Labour and Social Protection of the Republic of Belarus Ministry of Labour and Social Protection of the Republic of Belarus	Belarus	source
CCB Centre for Cybersecurity Belgium	Belgium	source
Federaal Ombudsman / Médiateur fédéral (Federal Ombudsman) — Centre for Integrity Federaal Ombudsman / Médiateur fédéral (Federal Ombudsman) — Centre for Integrity	Belgium	source
FPS Employment Federal Public Service Employment, Labour and Social Dialogue (FPS Employment)	Belgium	source
APD-GBA Gegevensbeschermingsautoriteit / Autorité de protection des données (Data Protection Authority)	Belgium	source
OCRC Office central pour la répression de la corruption (OCRC) of the Federal Judicial Police (Central Office for the Repression of Corruption)	Belgium	source
FIU Financial Intelligence Unit	Belize	source
CENTIF Cellule Nationale de Traitement des Informations Financières du Bénin (National Financial Information Processing Unit)	Benin	source
ACC Anti-Corruption Commission of Bhutan	Bhutan	source
BtCIRT Bhutan Computer Incident Response Team (Government Technology Agency)	Bhutan	source
UIF Unidad de Investigaciones Financieras	Bolivia	source
APIK Agency for Prevention of Corruption and Coordination of the Fight against Corruption (Agencija za prevenciju korupcije i koordinaciju borbe protiv korupcije)	Bosnia and Herzegovina	source
FUZIP Federal Administration for Inspection Affairs (Federalna uprava za inspekcijske poslove)	Bosnia and Herzegovina	source
Personal Data Protection Agency in Bosnia and Herzegovina (Agencija za zaštitu ličnih podataka u Bosni i Hercegovini) Personal Data Protection Agency in Bosnia and Herzegovina (Agencija za zaštitu ličnih podataka u Bosni i Hercegovini)	Bosnia and Herzegovina	source
CGU Controladoria-Geral da União	Brazil	source
GSI/PR Gabinete de Segurança Institucional da Presidência da República	Brazil	source
MTE Ministério do Trabalho e Emprego	Brazil	source
ACB Anti-Corruption Bureau	Brunei	source
CSB Cyber Security Brunei	Brunei	source
Дирекция „Финансово разузнаване“ на Държавна агенция „Национална сигурност“ (Financial Intelligence Directorate, State Agency for National Security) Дирекция „Финансово разузнаване“ на Държавна агенция „Национална сигурност“ (Financial Intelligence Directorate, State Agency for National Security)	Bulgaria	source
Изпълнителна агенция „Главна инспекция по труда“ (Executive Agency General Labour Inspectorate) Изпълнителна агенция „Главна инспекция по труда“ (Executive Agency General Labour Inspectorate)	Bulgaria	—
КЗЛД Комисия за защита на личните данни (Commission for Personal Data Protection)	Bulgaria	source
МТСП Министерство на труда и социалната политика (Ministry of Labour and Social Policy)	Bulgaria	source
ASCE-LC Autorité supérieure de contrôle d'État et de lutte contre la corruption (Supreme State Audit and Anti-Corruption Authority)	Burkina Faso	source
CNRF Cellule Nationale de Renseignement Financier (National Financial Intelligence Unit)	Burundi	source
CNPD Comissão Nacional de Proteção de Dados	Cabo Verde	source
CPC Conselho da Prevenção da Corrupção	Cabo Verde	—
ANIF Agence Nationale d'Investigation Financière (National Agency for Financial Investigation)	Cameroon	source
CONAC Commission Nationale Anti-Corruption (National Anti-Corruption Commission)	Cameroon	source
Corporations Canada Corporations Canada	Canada	source
ESDC Employment and Social Development Canada - Labour Program (Labour Standards Program)	Canada	source
PSIC Office of the Public Sector Integrity Commissioner of Canada	Canada	source
ANCI Agencia Nacional de Ciberseguridad	Chile	source
Ministerio Público (Fiscalía de Chile) Ministerio Público (Fiscalía de Chile)	Chile	source
Procuraduría General de la Nación Procuraduría General de la Nación	Colombia	source
SIC Superintendencia de Industria y Comercio	Colombia	source
UIAF Unidad de Información y Análisis Financiero	Colombia	source
Inspection du Travail et des Lois Sociales Inspection du Travail et des Lois Sociales	Comoros	—
PEP Procuraduría de la Ética Pública (Procuraduría General de la República)	Costa Rica	source
CENTIF Cellule Nationale de Traitement des Informations Financières	Côte d'Ivoire	source
HABG Haute Autorité pour la Bonne Gouvernance	Côte d'Ivoire	source
AZOP Agencija za zaštitu osobnih podataka (Personal Data Protection Agency)	Croatia	source
Državni inspektorat (State Inspectorate) Državni inspektorat (State Inspectorate)	Croatia	source
CERT Nacionalni CERT (National CERT, operated by CARNET)	Croatia	source
Povjerenstvo za odlučivanje o sukobu interesa (Commission for Resolving Conflicts of Interest) Povjerenstvo za odlučivanje o sukobu interesa (Commission for Resolving Conflicts of Interest)	Croatia	source
Pučki pravobranitelj (Ombudsman) Pučki pravobranitelj (Ombudsman)	Croatia	source
SOA Sigurnosno-obavještajna agencija (Security and Intelligence Agency)	Croatia	source
USKOK Ured za suzbijanje korupcije i organiziranog kriminaliteta (Office for the Suppression of Corruption and Organised Crime)	Croatia	source
Ministerstvo spravedlnosti ČR (Ministry of Justice of the Czech Republic) Ministerstvo spravedlnosti ČR (Ministry of Justice of the Czech Republic)	Czechia	source
SÚIP Státní úřad inspekce práce (State Labour Inspection Office)	Czechia	source

Law or regulation	Type	Country	Year	Source
Applies across all sectors
Financial Intelligence Unit Act, Cap 174	Act	Saint Vincent and the Grenadines	2001	source
Counter Terrorism Act 2014	Act	Samoa	2014	source
Labour and Employment Relations Act 2013	Act	Samoa	2013	source
Electronic Transactions Act 2008	Act	Samoa	2008	source
Decreto Delegato 30 novembre 2021 n. 193 – Disposizioni in materia di frodi e falsificazioni di strumenti di pagamento diversi dai contanti in recepimento della direttiva (UE) 2019/713 (Delegated Decree no. 193 of 30 November 2021 – Fraud and counterfeiting of non-cash payment instruments, transposing Directive (EU) 2019/713)	Act	San Marino	2021	source
Protection of Natural Persons with Regard to the Processing of Personal Data (Consolidated Text) – Legge 21 dicembre 2018 n. 171 (Law no. 171 of 21 December 2018)	Act	San Marino	2018	source
Computer crimes – Legge 23 agosto 2016 n. 114 (Law no. 114 of 23 August 2016); Italian title not seen	Act	San Marino	2016	source
Urgent provisions to prevent and combat corruption offences – Decreto Legge 16 giugno 2014 n. 90 (Decree-Law no. 90 of 16 June 2014)	Act	San Marino	2014	source
Código do Trabalho — Lei n.º 6/2019 (Labour Code)	Act	São Tomé and Príncipe	2019	source
Lei n.º 03/2016 de Protecção de Dados Pessoais (Personal Data Protection Law)	Act	São Tomé and Príncipe	2016	source
Executive Regulations of the Labor Law	Regulation	Saudi Arabia	2025	source
Essential Cybersecurity Controls (ECC-2:2024)	Rule	Saudi Arabia	2024	source
Anti-Cyber Crime Law	Act	Saudi Arabia	2007	source
Electronic Transactions Law	Act	Saudi Arabia	2007	source
Implementing Regulations of the Personal Data Protection Law	Regulation	Saudi Arabia	—	source
Regulation on Personal Data Transfer Outside the Kingdom	Regulation	Saudi Arabia	—	source
Loi n° 2008-11 du 25 janvier 2008 portant sur la Cybercriminalité (Law No. 2008-11 on Cybercrime)	Act	Senegal	2008	source
Zakon o elektronskom dokumentu, elektronskoj identifikaciji i uslugama od poverenja u elektronskom poslovanju (Law on Electronic Document, Electronic Identification and Trust Services in Electronic Business) (Official Gazette RS Nos 94/2017 and 52/2021)	Act	Serbia	2017	source
Law on the Protection of Whistleblowers (Official Gazette RS No 128/2014)	Act	Serbia	2014	source
Zakon o radu (Labour Law) (Official Gazette RS Nos 24/2005 to 109/2025)	Act	Serbia	2005	source
Beneficial Ownership Act, 2020 (Act 4 of 2020)	Act	Seychelles	2020	source
Data Protection and Right to Access Information Bill, 2025	Act	Sierra Leone	2025	source
Employment Act, 2023	Act	Sierra Leone	2023	source
Environmental Protection Agency Act, 2022	Act	Sierra Leone	2022	source
Cyber Security and Crime Act, 2021	Act	Sierra Leone	2021	source
The Anti-Corruption (Amendment) Act, 2019 (Act No. 9 of 2019)	Act	Sierra Leone	2019	source
Carbon Pricing Act 2018	Act	Singapore	2018	source
Electronic Transactions Act 2010	Act	Singapore	2010	source
Computer Misuse Act 1993	Act	Singapore	1993	source
Employment Act 1968	Act	Singapore	1968	source
Prevention of Corruption Act 1960	Act	Singapore	1960	source
Penal Code 1871	Act	Singapore	1871	source
Zákon č. 54/2019 Z. z. o ochrane oznamovateľov protispoločenskej činnosti a o zmene a doplnení niektorých zákonov (Act No. 54/2019 Coll. on the Protection of Whistleblowers of Anti-Social Activity)	Act	Slovakia	2019	source
Zákon č. 69/2018 Z. z. o kybernetickej bezpečnosti a o zmene a doplnení niektorých zákonov (Act No. 69/2018 Coll. on Cybersecurity and on Amendments to Certain Acts)	Act	Slovakia	2018	source
Zákon č. 272/2016 Z. z. o dôveryhodných službách pre elektronické transakcie na vnútornom trhu a o zmene a doplnení niektorých zákonov (zákon o dôveryhodných službách) (Act No. 272/2016 Coll. on Trust Services for Electronic Transactions in the Internal Market)	Act	Slovakia	2016	source
Zákon č. 297/2008 Z. z. o ochrane pred legalizáciou príjmov z trestnej činnosti a o ochrane pred financovaním terorizmu a o zmene a doplnení niektorých zákonov (Act No. 297/2008 Coll. on the prevention of the legalisation of proceeds of crime and the financing of terrorism and on amendments to certain laws)	Act	Slovakia	2008	source
Zákon č. 311/2001 Z. z. Zákonník práce (Labour Code)	Act	Slovakia	2001	source
Zakon o zaščiti prijaviteljev (ZZPri) (Reporting Persons Protection Act)	Act	Slovenia	2023	source
Zakon o Informacijskem pooblaščencu (ZInfP) (Information Commissioner Act)	Act	Slovenia	2005	source
Anti-Corruption Act 2018	Act	Solomon Islands	2018	source
General Laws (Anti-Money Laundering and Combating Terrorism Financing) Amendment Act 22 of 2022	Act	South Africa	2022	source
Cybercrimes Act 19 of 2020	Act	South Africa	2020	source
Prevention and Combating of Corrupt Activities Act 12 of 2004	Act	South Africa	2004	source
Electronic Communications and Transactions Act 25 of 2002	Act	South Africa	2002	source
Protected Disclosures Act 26 of 2000	Act	South Africa	2000	source
Prevention of Organised Crime Act 121 of 1998	Act	South Africa	1998	source
Basic Conditions of Employment Act 75 of 1997	Act	South Africa	1997	source
Labour Relations Act 66 of 1995	Act	South Africa	1995	source
Improper Solicitation and Graft Act	Act	South Korea	2016	source
The Penal Code Act, 2008	Act	South Sudan	2008	source
Real Decreto 1101/2024, de 29 de octubre, por el que se aprueba el Estatuto de la Autoridad Independiente de Protección del Informante, A.A.I. (Royal Decree 1101/2024 approving the Statute of the Independent Whistleblower Protection Authority)	Regulation	Spain	2024	source
Real Decreto 609/2023, de 11 de julio, por el que se crea el Registro Central de Titularidades Reales y se aprueba su Reglamento (Royal Decree 609/2023 creating the Central Register of Beneficial Ownership)	Regulation	Spain	2023	source
Ley 2/2023, de 20 de febrero, reguladora de la protección de las personas que informen sobre infracciones normativas y de lucha contra la corrupción (Law 2/2023 on the protection of persons who report regulatory breaches and on combating corruption)	Act	Spain	2023	source
Ley 6/2020, de 11 de noviembre, reguladora de determinados aspectos de los servicios electrónicos de confianza (Law 6/2020 regulating certain aspects of electronic trust services)	Act	Spain	2020	source
Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales (Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights)	Act	Spain	2018	source
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation)	Regulation	Spain	2016	source
Real Decreto Legislativo 2/2015, de 23 de octubre, por el que se aprueba el texto refundido de la Ley del Estatuto de los Trabajadores (Royal Legislative Decree 2/2015 approving the consolidated Workers' Statute)	Act	Spain	2015	source
Ley 23/2015, de 21 de julio, Ordenadora del Sistema de Inspección de Trabajo y Seguridad Social (Law 23/2015 on the Labour and Social Security Inspectorate System)	Act	Spain	2015	source
Anti Corruption (Declaration of Assets and Liabilities) Rules 2025	Rule	Sri Lanka	2025	source
Personal Data Protection Act, No. 9 of 2022	Act	Sri Lanka	2022	source
Computer Crime Act, No. 24 of 2007	Act	Sri Lanka	2007	source
Electronic Transactions Act, No. 19 of 2006	Act	Sri Lanka	2006	source
Termination of Employment of Workmen (Special Provisions) Act, No. 45 of 1971	Act	Sri Lanka	1971	source
قانون المعاملات الإلكترونية لسنة 2007 (Electronic Transactions Act 2007)	Act	Sudan	2007	source
قانون جرائم المعلوماتية لسنة 2007 (Informatic Offences (Combating) Act 2007)	Act	Sudan	2007	source
Wet van 2 augustus 2024, houdende wijziging van de Wet ter voorkoming en bestrijding van Money Laundering en Terrorismefinanciering (Act of 2 August 2024 amending the WMTF Act)	Act	Suriname	2024	source
Wet van 5 september 2023, houdende nadere wijziging van het Wetboek van Strafrecht en intrekking van de Wet Strafbaarstelling Money Laundering (Act of 5 September 2023 amending the Criminal Code and repealing the Money Laundering Penalisation Act)	Act	Suriname	2023	source
Wet van 24 september 2017, houdende regels inzake preventie en bestrijding van corruptie en instelling van een Anti-corruptie Commissie (Anti-corruptiewet) (Anti-Corruption Act)	Act	Suriname	2017	source
Cybersäkerhetslag (2025:1506) (Cybersecurity Act)	Act	Sweden	2025	source
Cybersäkerhetsförordning (2025:1507) (Cybersecurity Ordinance)	Regulation	Sweden	2025	source
Lag (2021:890) om skydd för personer som rapporterar om missförhållanden (Act on protection for persons who report wrongdoing)	Act	Sweden	2021	source
Lag (2018:218) med kompletterande bestämmelser till EU:s dataskyddsförordning (Act with supplementary provisions to the EU General Data Protection Regulation)	Act	Sweden	2018	source
Lag (2017:631) om registrering av verkliga huvudmän (Act on registration of beneficial owners)	Act	Sweden	2017	source
Lag (2014:307) om straff för penningtvättsbrott (Act on penalties for money laundering offences)	Act	Sweden	2014	source
Lag (1982:80) om anställningsskydd (Employment Protection Act)	Act	Sweden	1982	source
Arbetsmiljölag (1977:1160) (Work Environment Act)	Act	Sweden	1977	source
Federal Act of 26 September 2025 on the Transparency of Legal Persons and the Identification of Beneficial Owners (TLPA)	Act	Switzerland	2025	source
Federal Act of 25 September 2020 on Data Protection (Data Protection Act, FADP)	Act	Switzerland	2020	source
Bundesgesetz vom 13. März 1964 über die Arbeit in Industrie, Gewerbe und Handel (Arbeitsgesetz, ArG) (Labour Act)	Act	Switzerland	1964	source
Labour Law No. 17 of 2010	Act	Syria	2010	source
Public Interest Whistleblower Protection Act	Act	Taiwan	2025	source
Personal Data Protection Act	Act	Taiwan	1995	source
Money Laundering Control Act	Act	Taiwan	—	source
Regulations Governing the Reporting, Response and Drills for Cyber Security Incidents	Regulation	Taiwan	—	source
Electronic Signatures Act	Act	Taiwan	—	source
Labor Standards Act	Act	Taiwan	—	source
Закон Республики Таджикистан «О противодействии коррупции» (Law of the Republic of Tajikistan on Countering Corruption)	Act	Tajikistan	2020	source
Labour Code of the Republic of Tajikistan (Трудовой кодекс Республики Таджикистан), Law No. 1329	Act	Tajikistan	2016	source
Закон Республики Таджикистан «Об Агентстве по государственному финансовому контролю и борьбе с коррупцией Республики Таджикистан» (Law of the Republic of Tajikistan on the Agency for State Financial Control and Combating Corruption)	Act	Tajikistan	2008	source
Personal Data Protection Act, 2022 (Act No. 11 of 2022)	Act	Tanzania	2022	source
The Electronic Transactions Act, 2015	Act	Tanzania	2015	source
Thailand Taxonomy: A Reference Tool for Sustainable Economy	Guideline	Thailand	2023	source
Computer-Related Crime Act, B.E. 2550 (2007)	Act	Thailand	2007	source
Anti-Money Laundering Act, B.E. 2542 (1999)	Act	Thailand	1999	source
Lei n.º 7/2020, de 26 de Agosto – Medidas de Prevenção e Combate à Corrupção (Law No. 7/2020 – Measures to Prevent and Combat Corruption)	Act	Timor-Leste	2020	source
Lei n.º 8/2016, de 8 de Julho – Lei de Proteção ao Consumidor (Law No. 8/2016 of 8 July – Consumer Protection Law)	Act	Timor-Leste	2016	source
Lei n.º 4/2012, de 21 de Fevereiro – Lei do Trabalho (Law No. 4/2012 of 21 February – Labour Law)	Act	Timor-Leste	2012	source
Código Penal, aprovado pelo Decreto-Lei n.º 19/2009, de 8 de Abril (Penal Code, approved by Decree-Law No. 19/2009 of 8 April)	Act	Timor-Leste	2009	source
Loi n° 2018-026 du 07 décembre 2018 sur la cybersécurité et la cybercriminalité (Law No. 2018-026 of 7 December 2018 on cybersecurity and cybercrime), as amended by Loi n° 2022-009	Act	Togo	2018	source
Computer Crimes Act 2025	Act	Tonga	2025	source

Obligation	Country	Nature	Verified	Source	Detail
Applies across all sectors
Incident notification to the National Cybersecurity Authority (NIS2)	Greece	Early warning 24 hours; update 72 hours; final report 1 month	—	source	View →
Protection of public officers who make protected disclosures	Grenada	Ongoing	—	source	View →
No victimisation of employees who complain or take part in proceedings	Grenada	Ongoing	—	source	View →
Valid reason, written notice and termination allowance on dismissal	Grenada	Event-triggered on dismissal; complaint to the Labour Commissioner within 3 months (s.82)	—	source	View →
Handling of personal data by public bodies: consent, access and correction	Guatemala	—	—	source	View →
Annual declaration of income, assets and liabilities by persons in public life	Guyana	Annually on or before 30 June	—	source	View →
Beneficial ownership registration and annual update	Honduras	Annually by 30 May; changes within the first 10 business days of the following month	—	source	View →
Employment contracts and changes in writing	Honduras	At hiring and on any change	—	source	View →
No reprisals against workers for exercising labour rights	Honduras	Ongoing	—	source	View →
Employer duties to employees admitted to the witness protection programme	Honduras	Event-triggered on admission to the programme	—	source	View →
Report computer-system security incidents to the Commissioner's Office	Hong Kong	12 hours (serious) or 48 hours (other); written report within 14 days	—	source	View →
Pay wages within seven days of the wage period	Hong Kong	Within 7 days after the wage period ends	—	source	View →
Keep wage and employment records	Hong Kong	12 months of history; keep for 6 months after employment ends	—	source	View →
No dismissal for giving evidence or union activity	Hong Kong	Applies at all times	—	source	View →
Make mandatory MPF contributions for employees	Hong Kong	Monthly, by the 10th of the following month	—	source	View →
Private-sector agents must not accept advantages without principal's permission	Hong Kong	Applies at all times	—	source	View →
Cybersecurity registration of covered organisations	Hungary	Within 30 days of coming under the Act	—	source	View →
Data subject rights	Hungary	Within one month of request (extendable by two months)	—	source	View →
Beneficial owner registration and updates	Iceland	Changes within 2 weeks	—	source	View →
Lawful processing, notice and data subject rights	Iceland	—	—	source	View →
Personal data breach notification	Iceland	Without undue delay and, if possible, within 72 hours	—	source	View →
Incident notification by operators of essential services	Iceland	As soon as possible ('svo fljótt sem verða má')	—	source	View →
Internal whistleblowing procedures	Iceland	—	—	source	View →
Report cyber incidents to CERT-In within six hours	India	Within 6 hours of noticing the incident	—	source	View →
Keep system logs for 180 days within India	India	Rolling 180 days (logs); 5 years (VASP KYC and transaction records)	—	source	View →
Lawful basis, notice and data subject rights	Indonesia	Ongoing	—	source	View →
Sustainability report	Indonesia	Annually; 30 April if filed separately from the annual report	—	source	View →
Corporate social and environmental responsibility	Indonesia	Ongoing; reported in the annual report	—	source	View →
Internal reporting channels for protected disclosures	Ireland	Acknowledge within 7 days; feedback within 3 months	—	source	View →
Anti-corruption compliance: reasonable steps defence	Ireland	—	—	source	View →
Weekly working time and rest limits	Ireland	—	—	source	View →
Non-discrimination in employment	Ireland	—	—	source	View →
Employer justification for dismissal	Ireland	Claims within 6 months of dismissal	—	source	View →
Database registration and data subject access	Israel	Ongoing	—	source	View →
Personal data breach notification	Italy	Without undue delay and, where possible, within 72 hours	—	source	View →
Whistleblowing channels and protection of reporters	Italy	Ongoing; ANAC acknowledgement within 7 days, feedback within 3 months	—	source	View →
Security control measures for personal data	Japan	—	—	source	View →
Consent for provision of personal data to third parties abroad	Japan	Before each transfer	—	source	View →
Whistleblowing report handling system	Japan	—	—	source	View →
Working hours limits and overtime agreements	Japan	40 hours a week; overtime 45 hours a month and 360 hours a year	—	source	View →
Work rules for employers with ten or more workers	Japan	On preparation and on each change	—	source	View →
Lawful basis, consent and data subject rights	Kazakhstan	Ongoing	—	source	View →
Appoint a person responsible for organising personal data processing	Kazakhstan	Ongoing	—	source	View →
Lawful basis, notice and data subject rights	Kenya	Ongoing	—	source	View →
Personal data breach notification	Kenya	Within 72 hours of becoming aware (s.43(1)(a))	—	source	View →
Anti-bribery procedures	Kenya	Ongoing	—	source	View →
Duty to report bribery to the Commission	Kenya	Within 24 hours (s.14)	—	source	View →
Protection of whistle-blowers and witnesses	Kenya	Ongoing	—	source	View →
Beneficial ownership register and filing with the Registrar	Kenya	On incorporation and on each change	—	source	View →
Retention of employment records	Kenya	5 years after termination (s.10(6))	—	source	View →
Declaration of cash above $5,000 at the border	Kiribati	On each entry or exit carrying cash above $5,000 equivalent	—	source	View →
Lawful basis, notice and data subject rights	Kosovo	Ongoing	—	source	View →
Personal data breach notification to the Agency	Kosovo	Not later than 72 hours after becoming aware	—	source	View →
Duty to report corruption and protection of whistleblowers	Kuwait	—	—	source	View →
Respect data subject rights (access, rectification, erasure, restriction, portability, objection)	Latvia	Respond to requests within one month	—	source	View →
No adverse consequences for employees who report suspected offences at work	Latvia	—	—	source	View →
Lawful processing, notice and data subject rights	Lesotho	—	—	source	View →
Personal data breach notification	Lesotho	As soon as reasonably possible after discovery (s. 23)	—	source	View →
Beneficial owner identification and reporting to the register	Liechtenstein	Within 30 days of commercial register entry and of each change	—	source	View →
Lawful basis, notice and data subject rights	Liechtenstein	—	—	source	View →
Cyber-incident reporting to the Stabsstelle Cyber-Sicherheit	Liechtenstein	Early warning 24 hours; notification 72 hours; final report within one month	—	source	View →
Record of processing activities	Luxembourg	Ongoing; kept current	—	source	View →
Lawful basis, notice and data subject rights	Macao	Ongoing	—	source	View →
Notification of data processing to the public authority	Macao	In writing within 8 days of the start of processing	—	source	View →
Lawful basis, notice and data subject rights	Madagascar	—	—	source	View →
Prior declaration or authorisation to the CMIL and data protection officer	Madagascar	Before processing starts	—	source	View →
Asset and interest declarations by listed officials	Madagascar	Within 3 months of appointment; renewal every 2 years or after a major change	—	source	View →
Protect people who report corruption	Malawi	Ongoing	—	source	View →
Give a valid reason and fair procedure before dismissal	Malawi	Ongoing	—	source	View →
Lawful basis, notice and data subject rights	Mali	—	—	source	View →
Asset declaration by public officials	Mali	Before taking office, updated annually, and on leaving office	—	source	View →
Internal whistleblowing reporting channel	Malta	Acknowledge within 7 days; feedback within 3 months	—	source	View →
Lawful basis, notice to data subjects and data subject rights	Mauritania	—	—	source	View →
Annual independent IT security audit for critical information infrastructure	Mauritius	Annually or after major changes	—	source	View →
Registration as data controller or processor	Mauritius	Certificate valid 3 years; renewal application no later than 3 months before expiry	—	source	View →
Freezing and reporting assets of UN-designated parties	Mauritius	Immediately: without delay and not later than 24 hours (s. 2)	—	source	View →
Declaration of assets by public officials	Mauritius	Within 30 days of taking office; every 5 years for certain officers	—	source	View →
Written statement of particulars of employment	Mauritius	For workers engaged for more than one month	—	source	View →
Monthly payment of remuneration and payslips	Mauritius	Monthly	—	source	View →
Lawful basis, privacy notice and data subject rights	Mexico	At collection and on request	—	source	View →
Notify data subjects of security breaches	Mexico	Immediately (no fixed period stated)	—	source	View →
Adopt an integrity policy (weighed in corporate liability)	Mexico	—	—	source	View →
Lawful basis, notice and data subject rights	Moldova	Ongoing	—	source	View →
Personal data breach notification	Moldova	Within 72 hours of becoming aware, where possible	—	source	View →
Whistleblowing channel and protection from retaliation	Moldova	Ongoing	—	source	View →
Lawful basis, transparency notice and data subject rights	Monaco	Ongoing; responses generally within one month (art. 10)	—	source	View →
Personal data breach notification	Monaco	As soon as possible, if possible within 72 hours of becoming aware	—	source	View →
Notice periods for ending an employment contract	Monaco	Notice 1 to 3 months depending on service	—	source	View →
Lawful basis, consent and data subject rights	Mongolia	—	—	source	View →
Personal data breach notification	Mongolia	Immediately (shortest possible duration; no fixed deadline)	—	source	View →
Cyber-incident notification	Mongolia	Immediately	—	source	View →
Set up an internal whistleblowing channel	Montenegro	Acknowledge within 7 days; outcome within 45 days	—	source	View →
Cybersecurity incident declaration to the national authority	Morocco	As soon as the entity becomes aware (Art. 8); without delay (Art. 30)	—	source	View →
Reporting channel and protection for corruption whistleblowers	Morocco	Ongoing	—	source	View →
Data subject notice, consent and rights	Morocco	Ongoing	—	source	View →
Virtual asset service provider licensing	Namibia	Before offering virtual asset services	—	source	View →
Travel-rule information for virtual asset transfers	Namibia	With each virtual asset transfer	—	source	View →
Report gratification offers to the Anti-Corruption Commission	Namibia	On receiving or soliciting gratification	—	source	View →
No prejudice to employees for disclosing information	Namibia	—	—	source	View →
Nominated officer and beneficial ownership information	Nauru	Notify appointment within 30 days; keep details 7 years	—	source	View →

Date	Entity	Country	Action	Penalty	Source
28 JUL 2010	3M Imtec Corporation	United States	—	US$125,000	source
28 JUL 2010	Maersk Line, Limited	United States	—	US$3,088,400	source
15 JUL 2010	An Individual	United States	—	US$5,000	source
15 JUL 2010	Agar Corporation, Inc.	United States	—	US$860,000	source
15 JUL 2010	United Nations Federal Credit Union	United States	—	US$500,000	source
3 JUN 2010	KLM Cargo	United States	—	US$5,336.26	source
3 JUN 2010	GEICO General Insurance Company	United States	—	US$11,000	source
23 APR 2010	Hilton International Co.	United States	—	US$735,407	source
23 APR 2010	LD Telecommunications, Inc.	United States	—	US$21,671	source
19 MAR 2010	Innospec Inc.	United States	—	US$2,200,000	source
9 MAR 2010	Aviation Services International, B.V.	United States	—	US$750,000	source
8 MAR 2010	An Individual	United States	—	US$525	source
8 MAR 2010	Industrial Maritime Carriers Worldwide, L.L.C.	United States	—	US$72,072	source
5 FEB 2010	Balli Group PLC and Balli Aviation, Ltd.	United States	—	US$15,000,000	source
22 DEC 2009	Lloyds TSB Bank, plc	United States	—	US$217,000,000	source
16 DEC 2009	Credit Suisse AG	United States	—	US$536,000,000	source
30 SEP 2009	Gold & Silver Reserve, Inc.	United States	—	US$2,950,000	source
30 SEP 2009	Barwil Agencies NA, Inc.	United States	—	US$84,000	source
31 AUG 2009	Thermon Manufacturing Company	United States	—	US$14,613.24	source
24 AUG 2009	Australia and New Zealand Bank Group, Ltd.	United States	—	US$5,750,000	source
6 AUG 2009	DPWN Holdings (USA), Inc. and DHL Express (USA), Inc.	United States	—	US$9,444,744	source
31 JUL 2009	An Individual	United States	—	US$8,000	source
31 JUL 2009	An Individual	United States	—	US$15,000	source
31 JUL 2009	First Incentive Travel, Inc.	United States	—	US$8,250	source
31 JUL 2009	MGE UPS Systems, Inc.	United States	—	US$10,341	source

• US sanctions bill targets Russian energy sector under Graham legislation 3 Oct 2026