Healthcare & Pharma — regulation across countries

Regulator	Country	Official site
DFAT Department of Foreign Affairs and Trade	Australia	source
OAIC Office of the Australian Information Commissioner	Australia	source
ANPD Autoridade Nacional de Proteção de Dados	Brazil	source
OPC Office of the Privacy Commissioner of Canada	Canada	source
CAC Cyberspace Administration of China	China	source
CNIL Commission nationale de l'informatique et des libertés	France	source
BfDI Federal Commissioner for Data Protection and Freedom of Information	Germany	source
DPBI Data Protection Board of India	India	source
PPC Personal Information Protection Commission	Japan	source
MACC Malaysian Anti-Corruption Commission	Malaysia	—
PDPC-MY Personal Data Protection Commissioner	Malaysia	source
RMCD Royal Malaysian Customs Department	Malaysia	source
AP Autoriteit Persoonsgegevens	Netherlands	source
NDPC Nigeria Data Protection Commission	Nigeria	source
SDAIA Saudi Data and AI Authority	Saudi Arabia	source
PDPC Personal Data Protection Commission	Singapore	source
IR Information Regulator	South Africa	source
OFSI Office of Financial Sanctions Implementation	United Kingdom	source
OFAC Office of Foreign Assets Control	United States	source
Applies across all sectors
MoLSA Ministry of Labour and Social Affairs	Afghanistan	source
IDPC Commissioner for the Right to Information and Protection of Personal Data (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale)	Albania	source
AIF Financial Intelligence Agency (Agjencia e Inteligjencës Financiare)	Albania	source
QKB National Business Centre (Qendra Kombëtare e Biznesit)	Albania	source
ISHPSHSH State Labour and Social Services Inspectorate (Inspektorati Shtetëror i Punës dhe Shërbimeve Shoqërore)	Albania	source
CTRF Cellule de Traitement du Renseignement Financier (Financial Intelligence Processing Unit)	Algeria	—
HATPLC Haute autorité de transparence, de prévention et de lutte contre la corruption (High Authority for Transparency, Prevention and Combating of Corruption)	Algeria	source
MTESS Ministère du Travail, de l'Emploi et de la Sécurité Sociale (Ministry of Labour, Employment and Social Security)	Algeria	source
APDA Agència Andorrana de Protecció de Dades	Andorra	source
ANC-AD Agència Nacional de Ciberseguretat d'Andorra	Andorra	source
UIF Unidade de Informação Financeira	Angola	source
Integrity Commission Integrity Commission	Antigua and Barbuda	—
AAIP Agencia de Acceso a la Información Pública	Argentina	source
OA Oficina Anticorrupción	Argentina	source
UIF Unidad de Información Financiera	Argentina	source
Anti-Corruption Committee of the Republic of Armenia Anti-Corruption Committee of the Republic of Armenia	Armenia	source
Corruption Prevention Commission Corruption Prevention Commission	Armenia	source
FMC Financial Monitoring Center	Armenia	source
ACSC Australian Cyber Security Centre	Australia	source
ATO Australian Taxation Office	Australia	source
NACC National Anti-Corruption Commission	Australia	source
Arbeitsinspektion (Zentral-Arbeitsinspektorat and Arbeitsinspektorate) Arbeitsinspektion (Zentral-Arbeitsinspektorat and Arbeitsinspektorate)	Austria	source
BCS Bundesamt für Cybersicherheit	Austria	source
BAK Bundesamt zur Korruptionsprävention und Korruptionsbekämpfung	Austria	source
DSB Datenschutzbehörde (Austrian Data Protection Authority)	Austria	source
Financial Monitoring Service of the Republic of Azerbaijan Financial Monitoring Service of the Republic of Azerbaijan	Azerbaijan	source
Ministry of Labour and Social Protection of Population of the Republic of Azerbaijan Ministry of Labour and Social Protection of Population of the Republic of Azerbaijan	Azerbaijan	source
State Labour Inspection Service State Labour Inspection Service	Azerbaijan	source
LMRA Labour Market Regulatory Authority	Bahrain	source
NCSC National Cyber Security Center	Bahrain	source
BGD e-GOV CIRT BGD e-GOV CIRT	Bangladesh	source
Ministry of Labour and Social Protection of the Republic of Belarus Ministry of Labour and Social Protection of the Republic of Belarus	Belarus	source
CCB Centre for Cybersecurity Belgium	Belgium	source
Federaal Ombudsman / Médiateur fédéral (Federal Ombudsman) — Centre for Integrity Federaal Ombudsman / Médiateur fédéral (Federal Ombudsman) — Centre for Integrity	Belgium	source
FPS Employment Federal Public Service Employment, Labour and Social Dialogue (FPS Employment)	Belgium	source
APD-GBA Gegevensbeschermingsautoriteit / Autorité de protection des données (Data Protection Authority)	Belgium	source
OCRC Office central pour la répression de la corruption (OCRC) of the Federal Judicial Police (Central Office for the Repression of Corruption)	Belgium	source
FIU Financial Intelligence Unit	Belize	source
CENTIF Cellule Nationale de Traitement des Informations Financières du Bénin (National Financial Information Processing Unit)	Benin	source
ACC Anti-Corruption Commission of Bhutan	Bhutan	source
BtCIRT Bhutan Computer Incident Response Team (Government Technology Agency)	Bhutan	source
UIF Unidad de Investigaciones Financieras	Bolivia	source
APIK Agency for Prevention of Corruption and Coordination of the Fight against Corruption (Agencija za prevenciju korupcije i koordinaciju borbe protiv korupcije)	Bosnia and Herzegovina	source
FUZIP Federal Administration for Inspection Affairs (Federalna uprava za inspekcijske poslove)	Bosnia and Herzegovina	source
Personal Data Protection Agency in Bosnia and Herzegovina (Agencija za zaštitu ličnih podataka u Bosni i Hercegovini) Personal Data Protection Agency in Bosnia and Herzegovina (Agencija za zaštitu ličnih podataka u Bosni i Hercegovini)	Bosnia and Herzegovina	source
CGU Controladoria-Geral da União	Brazil	source
GSI/PR Gabinete de Segurança Institucional da Presidência da República	Brazil	source
MTE Ministério do Trabalho e Emprego	Brazil	source
ACB Anti-Corruption Bureau	Brunei	source
CSB Cyber Security Brunei	Brunei	source
Дирекция „Финансово разузнаване“ на Държавна агенция „Национална сигурност“ (Financial Intelligence Directorate, State Agency for National Security) Дирекция „Финансово разузнаване“ на Държавна агенция „Национална сигурност“ (Financial Intelligence Directorate, State Agency for National Security)	Bulgaria	source
Изпълнителна агенция „Главна инспекция по труда“ (Executive Agency General Labour Inspectorate) Изпълнителна агенция „Главна инспекция по труда“ (Executive Agency General Labour Inspectorate)	Bulgaria	—
КЗЛД Комисия за защита на личните данни (Commission for Personal Data Protection)	Bulgaria	source
МТСП Министерство на труда и социалната политика (Ministry of Labour and Social Policy)	Bulgaria	source
ASCE-LC Autorité supérieure de contrôle d'État et de lutte contre la corruption (Supreme State Audit and Anti-Corruption Authority)	Burkina Faso	source
CNRF Cellule Nationale de Renseignement Financier (National Financial Intelligence Unit)	Burundi	source
CNPD Comissão Nacional de Proteção de Dados	Cabo Verde	source
CPC Conselho da Prevenção da Corrupção	Cabo Verde	—
ANIF Agence Nationale d'Investigation Financière (National Agency for Financial Investigation)	Cameroon	source
CONAC Commission Nationale Anti-Corruption (National Anti-Corruption Commission)	Cameroon	source
Corporations Canada Corporations Canada	Canada	source
ESDC Employment and Social Development Canada - Labour Program (Labour Standards Program)	Canada	source
PSIC Office of the Public Sector Integrity Commissioner of Canada	Canada	source
ANCI Agencia Nacional de Ciberseguridad	Chile	source
Ministerio Público (Fiscalía de Chile) Ministerio Público (Fiscalía de Chile)	Chile	source
Procuraduría General de la Nación Procuraduría General de la Nación	Colombia	source
SIC Superintendencia de Industria y Comercio	Colombia	source
UIAF Unidad de Información y Análisis Financiero	Colombia	source
Inspection du Travail et des Lois Sociales Inspection du Travail et des Lois Sociales	Comoros	—
PEP Procuraduría de la Ética Pública (Procuraduría General de la República)	Costa Rica	source
CENTIF Cellule Nationale de Traitement des Informations Financières	Côte d'Ivoire	source
HABG Haute Autorité pour la Bonne Gouvernance	Côte d'Ivoire	source
AZOP Agencija za zaštitu osobnih podataka (Personal Data Protection Agency)	Croatia	source
Državni inspektorat (State Inspectorate) Državni inspektorat (State Inspectorate)	Croatia	source
CERT Nacionalni CERT (National CERT, operated by CARNET)	Croatia	source
Povjerenstvo za odlučivanje o sukobu interesa (Commission for Resolving Conflicts of Interest) Povjerenstvo za odlučivanje o sukobu interesa (Commission for Resolving Conflicts of Interest)	Croatia	source
Pučki pravobranitelj (Ombudsman) Pučki pravobranitelj (Ombudsman)	Croatia	source
SOA Sigurnosno-obavještajna agencija (Security and Intelligence Agency)	Croatia	source
USKOK Ured za suzbijanje korupcije i organiziranog kriminaliteta (Office for the Suppression of Corruption and Organised Crime)	Croatia	source
Ministerstvo spravedlnosti ČR (Ministry of Justice of the Czech Republic) Ministerstvo spravedlnosti ČR (Ministry of Justice of the Czech Republic)	Czechia	source
SÚIP Státní úřad inspekce práce (State Labour Inspection Office)	Czechia	source

Law or regulation	Type	Country	Year	Source
Privacy Act 1988	Act	Australia	1988	source
Lei Geral de Proteção de Dados (LGPD), Law No. 13,709/2018	Act	Brazil	2018	source
Personal Information Protection Law (PIPL)	Act	China	2021	source
Personal Data Protection Law No. 151 of 2020	Act	Egypt	2020	source
GDPR (Regulation (EU) 2016/679)	Regulation	Germany	2016	source
Lög um öryggi net- og upplýsingakerfa mikilvægra innviða nr. 78/2019 (Act No. 78/2019 on the Security of Network and Information Systems of Critical Infrastructure)	Act	Iceland	2019	source
Digital Personal Data Protection Act, 2023	Act	India	2023	source
Act on the Protection of Personal Information (APPI)	Act	Japan	2003	source
Lei n.º 13/2019 Lei da Cibersegurança (Law 13/2019, Cybersecurity Law)	Act	Macao	2019	source
Nigeria Data Protection Act 2023	Act	Nigeria	2023	source
Law No. 13 of 2016 on Personal Data Privacy Protection	Act	Qatar	2016	source
Personal Data Protection Law (PDPL)	Act	Saudi Arabia	2021	source
Protection of Personal Information Act 4 of 2013 (POPIA)	Act	South Africa	2013	source
The Network and Information Systems Regulations 2018	Regulation	United Kingdom	2018	source
Applies across all sectors
Law No. 124/2024 "Për mbrojtjen e të dhënave personale" (Law No. 124/2024 on the Protection of Personal Data)	Act	Albania	2024	source
Law No. 112/2020 "Për regjistrin e pronarëve përfitues" (Law No. 112/2020 on the Register of Beneficial Owners), as amended	Act	Albania	2020	source
Law No. 10237 dated 18.02.2010 "Për sigurinë dhe shëndetin në punë" (Law on Safety and Health at Work)	Act	Albania	2010	source
Law No. 10273 dated 29.04.2010 "Për dokumentin elektronik" (Law No. 10273/2010 on the Electronic Document)	Act	Albania	2010	source
Law No. 9049 dated 10.04.2003 "Për deklarimin dhe kontrollin e pasurive, të detyrimeve financiare të të zgjedhurve dhe të disa nëpunësve publikë" (Law on the Declaration and Audit of Assets, Financial Obligations of Elected Persons and Certain Public Officials)	Act	Albania	2003	source
Loi n° 25-11 du 24 juillet 2025 modifiant et complétant la loi n° 18-07 (Law 25-11 of 24 July 2025 amending and supplementing Law 18-07)	Act	Algeria	2025	source
Loi n° 23-01 du 7 février 2023 modifiant et complétant la loi n° 05-01 (Law 23-01 of 7 February 2023 amending and supplementing Law 05-01)	Act	Algeria	2023	source
Loi n° 22-08 du 5 mai 2022 fixant l'organisation, la composition et les attributions de la Haute autorité de transparence, de prévention et de lutte contre la corruption (Law 22-08 of 5 May 2022 on the High Authority for Transparency, Prevention and Combating of Corruption)	Act	Algeria	2022	source
Décret exécutif n° 22-36 du 4 janvier 2022 fixant les missions, l'organisation et le fonctionnement de la cellule de traitement du renseignement financier (Executive Decree 22-36 of 4 January 2022 on the Missions, Organisation and Operation of the CTRF)	Regulation	Algeria	2022	source
Décret présidentiel n° 20-05 du 20 janvier 2020 portant mise en place d'un dispositif national de la sécurité des systèmes d'information (Presidential Decree 20-05 of 20 January 2020 Establishing a National Information Systems Security Framework)	Regulation	Algeria	2020	source
Loi n° 18-07 du 10 juin 2018 relative à la protection des personnes physiques dans le traitement des données à caractère personnel (Law 18-07 of 10 June 2018 on the Protection of Natural Persons in Personal Data Processing)	Act	Algeria	2018	source
Llei 5/2022, del 3 de març, d'aplicació de sancions internacionals (Law 5/2022 on the application of international sanctions)	Act	Andorra	2022	source
Llei 22/2022, del 9 de juny, de mesures per a la seguretat de les xarxes i dels sistemes d'informació (Ciberseguretat) (Law 22/2022 on measures for the security of networks and information systems)	Act	Andorra	2022	source
Llei 29/2021, del 28 d'octubre, qualificada de protecció de dades personals (Qualified Law 29/2021 on personal data protection)	Act	Andorra	2021	source
Lei n.º 8/26, de 19 de Agosto — Lei que altera a Lei n.º 5/20 (Law 8/26 amending the AML/CFT/CPF Law)	Act	Angola	2026	source
Instrução n.º 001/DG-UIF/2026 — prazo para comunicação imediata de operações suspeitas (UIF Instruction 001/DG-UIF/2026 on the deadline for immediate reporting of suspicious operations)	Direction	Angola	2026	source
Decreto Presidencial n.º 263/25, de 10 de Dezembro — Criação do Centro Nacional de Cibersegurança e Estatuto Orgânico (Presidential Decree 263/25 creating the National Cybersecurity Centre)	Regulation	Angola	2025	source
Lei n.º 11/24, de 4 de Julho — Lei que altera a Lei n.º 5/20 (Law 11/24 amending the AML/CFT/CPF Law)	Act	Angola	2024	source
Decreto Executivo n.º 127/24, de 13 de Junho — Regulamento Interno da Direcção de Inteligência Inspectiva, Transparência e Combate à Corrupção da IGAE (Executive Decree 127/24 on the IGAE directorate for inspection intelligence, transparency and anti-corruption)	Regulation	Angola	2024	source
Lei n.º 5/20, de 27 de Janeiro — Lei de Prevenção e Combate ao Branqueamento de Capitais, do Financiamento do Terrorismo e da Proliferação de Armas de Destruição em Massa (Law 5/20 on the Prevention and Combating of Money Laundering, Terrorist Financing and Proliferation of Weapons of Mass Destruction)	Act	Angola	2020	source
Lei n.º 7/17, de 16 de Fevereiro — Lei de Protecção das Redes e Sistemas Informáticos (Law 7/17 on the Protection of Networks and Computer Systems)	Act	Angola	2017	source
Companies (Amendment) Act, 2022 (No. 22 of 2022)	Act	Antigua and Barbuda	2022	source
Electronic Transactions (Amendment) Act, 2016 (No. 10 of 2016)	Act	Antigua and Barbuda	2016	source
Electronic Evidence Act, 2013 (No. 11 of 2013)	Act	Antigua and Barbuda	2013	source
The Prevention of Corruption Act, 2004 (No. 21 of 2004)	Act	Antigua and Barbuda	2004	source
The Integrity in Public Life Act, 2004 (No. 23 of 2004)	Act	Antigua and Barbuda	2004	source
Resolución 27/2018 — Lineamientos de Integridad para el mejor cumplimiento de lo establecido en los artículos 22 y 23 de la Ley N° 27.401 de Responsabilidad Penal de Personas Jurídicas (Integrity Guidelines for Articles 22 and 23 of Law 27,401)	Guideline	Argentina	2018	source
Ley 26.388 — Modificación del Código Penal (Law 26,388 amending the Criminal Code on computer crimes)	Act	Argentina	2008	source
Ley 25.877 — Régimen Laboral, Arts. 25–27 Balance Social (Law 25,877 on the Labour Regime: annual social balance sheet)	Act	Argentina	2004	source
Ley 25.326 de Protección de los Datos Personales (Law 25,326 on Personal Data Protection)	Act	Argentina	2000	source
Law on Cybersecurity (HO-442-N)	Act	Armenia	2025	source
Law on Protection of Personal Data (HO-49-N)	Act	Armenia	2015	source
Law on Combating Money Laundering and Terrorism Financing	Act	Armenia	2008	source
Cyber Security Act 2024	Act	Australia	2024	source
Security of Critical Infrastructure Act 2018	Act	Australia	2018	source
Modern Slavery Act 2018	Act	Australia	2018	source
Competition and Consumer Act 2010	Act	Australia	2010	source
Fair Work Act 2009	Act	Australia	2009	source
Bundesgesetz zur Gewährleistung eines hohen Cybersicherheitsniveaus von Netz- und Informationssystemen (Netz- und Informationssystemsicherheitsgesetz 2026 – NISG 2026) (Federal Act ensuring a high level of cybersecurity of network and information systems)	Act	Austria	2026	source
Bundesgesetz über elektronische Signaturen und Vertrauensdienste für elektronische Transaktionen (Signatur- und Vertrauensdienstegesetz – SVG) (Federal Act on electronic signatures and trust services for electronic transactions)	Act	Austria	2016	source
Bundesgesetz über die Einrichtung und Organisation des Bundesamts zur Korruptionsprävention und Korruptionsbekämpfung (BAK-G)	Act	Austria	2009	source
Bundesgesetz über die Verantwortlichkeit von Verbänden für Straftaten (Verbandsverantwortlichkeitsgesetz – VbVG) (Federal Act on the liability of associations for criminal offences)	Act	Austria	2005	source
Bundesgesetz zum Schutz natürlicher Personen bei der Verarbeitung personenbezogener Daten (Datenschutzgesetz – DSG) (Federal Act on the Protection of Natural Persons with regard to the Processing of Personal Data)	Act	Austria	1999	source
Bundesgesetz über die Arbeitsinspektion (Arbeitsinspektionsgesetz 1993 – ArbIG) (Labour Inspectorate Act 1993)	Act	Austria	1993	source
Elektron ticarət haqqında Qanun (Law on Electronic Commerce, No. 908-IIQ, 10 May 2005)	Act	Azerbaijan	2005	source
Elektron imza və elektron sənəd haqqında Qanun (Law on Electronic Signature and Electronic Document, No. 602-IIQ, 9 March 2004)	Act	Azerbaijan	2004	source
Computer Misuse Act (Chapter 107A)	Act	Bahamas	2003	source
Electronic Communications and Transactions Act (Chapter 337A)	Act	Bahamas	2003	source
Employment Act (Chapter 321A)	Act	Bahamas	2001	source
Prevention of Bribery Act (Chapter 88)	Act	Bahamas	1976	source
Order No. (43) of 2022 on technical and organisational measures for personal data protection	Regulation	Bahrain	2022	source
Law No. (30) of 2018 with respect to Personal Data Protection Law	Act	Bahrain	2018	source
Law No. (60) of 2014 on Information Technology Crimes	Act	Bahrain	2014	source
Decree-Law No. (28) of 2002 on Electronic Transactions	Act	Bahrain	2002	source
সাইবার সুরক্ষা আইন, ২০২৬ (Cyber Security Act, 2026)	Act	Bangladesh	2026	source
ব্যক্তিগত উপাত্ত সুরক্ষা আইন, ২০২৬ (Personal Data Protection Act, 2026)	Act	Bangladesh	2026	source
The Penal Code, 1860 (Act No. XLV of 1860)	Act	Bangladesh	1860	source
Computer Misuse Act, Cap. 124B	Act	Barbados	2005	source
Forgery Act, Cap. 133	Act	Barbados	—	source
Закон Республики Беларусь «О защите персональных данных» (Law No. 99-Z of 7 May 2021 on personal data protection)	Act	Belarus	2021	source
Закон Республики Беларусь «Об электронном документе и электронной цифровой подписи» (Law No. 113-Z of 28 December 2009 on electronic documents and electronic digital signature)	Act	Belarus	2009	source
Loi du 30 juillet 2018 relative à la protection des personnes physiques à l'égard des traitements de données à caractère personnel (Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data)	Act	Belgium	2018	source
Loi du 3 décembre 2017 portant création de l'Autorité de protection des données (Law of 3 December 2017 establishing the Data Protection Authority)	Act	Belgium	2017	source
Act of 4 August 1996 on the well-being of workers in the performance of their work	Act	Belgium	1996	source
Financial Intelligence Unit Act, Chapter 138:02, Revised Edition 2020	Act	Belize	2020	source
Criminal Code, Chapter 101, Revised Edition 2020	Act	Belize	2020	source
Cybercrime Act, Chapter 106:01, Revised Edition 2020	Act	Belize	2020	source
Money Laundering and Terrorism (Prevention) Act, Chapter 104 (consolidated version as amended December 2023)	Act	Belize	2008	source
Loi uniforme relative à la lutte contre le blanchiment de capitaux, le financement du terrorisme et de la prolifération des armes de destruction massive dans les États membres de l'UMOA (Uniform Law on combating money laundering, terrorist financing and proliferation financing in UMOA member states)	Act	Benin	2023	source
Loi n° 2011-20 du 12 octobre 2011 portant lutte contre la corruption et autres infractions connexes en République du Bénin (Law No. 2011-20 of 12 October 2011 on combating corruption and related offences)	Act	Benin	2011	source
Loi n° 98-004 du 27 janvier 1998 portant Code du Travail en République du Bénin (Law No. 98-004 of 27 January 1998 on the Labour Code)	Act	Benin	1998	source
Anti-Corruption (Amendment) Act of Bhutan 2022	Act	Bhutan	2022	source
Penal Code of Bhutan 2004	Act	Bhutan	2004	source
Decreto Supremo N° 4904, Reglamento de la Unidad de Investigaciones Financieras - UIF (Decree 4904, Regulation of the Financial Investigations Unit)	Act	Bolivia	2023	source
Ley N° 1390 de Fortalecimiento para la Lucha contra la Corrupción (Law 1390 on Strengthening the Fight against Corruption)	Act	Bolivia	2021	source
Ley N° 004 de Lucha contra la Corrupción, Enriquecimiento Ilícito e Investigación de Fortunas «Marcelo Quiroga Santa Cruz» (Law 004 on the fight against corruption, illicit enrichment and investigation of fortunes)	Act	Bolivia	2010	source
Zakon o Agenciji za prevenciju korupcije i koordinaciju borbe protiv korupcije (Law on the Agency for Prevention of Corruption and Coordination of the Fight against Corruption)	Act	Bosnia and Herzegovina	2009	source
Financial Intelligence Act, 2022 (Act No. 2 of 2022)	Act	Botswana	2022	source
Financial Intelligence Regulations, 2022 (S.I. No. 14 of 2022)	Regulation	Botswana	2022	source
Financial Intelligence (Implementation of United Nations Security Council Resolutions) Regulations, 2022 (S.I. No. 13 of 2022)	Regulation	Botswana	2022	source
Corruption and Economic Crime Act (Cap. 08:05)	Act	Botswana	1994	source
Penal Code (Cap. 08:01)	Act	Botswana	1964	source
Resolução CD/ANPD nº 15, de 24 de abril de 2024 (Regulation on communication of security incidents)	Regulation	Brazil	2024	source
Lei nº 15.042, de 11 de dezembro de 2024 (Law 15,042/2024 establishing the Brazilian Greenhouse Gas Emissions Trading System – SBCE)	Act	Brazil	2024	source
Decreto nº 11.856, de 26 de dezembro de 2023 (Decree 11,856/2023 establishing the National Cybersecurity Policy and Committee)	Regulation	Brazil	2023	source
Resolução CD/ANPD nº 4, de 24 de fevereiro de 2023 (Regulation on the calculation and application of administrative sanctions)	Regulation	Brazil	2023	source

Obligation	Country	Nature	Verified	Source	Detail
Applies across all sectors
Internal whistleblowing reporting procedure	Netherlands	Acknowledgement within 7 days; feedback within 3 months	—	source	View →
Occupational risk inventory and evaluation	Netherlands	Ongoing	—	source	View →
No retaliation against employees who make protected disclosures	New Zealand	Ongoing	—	source	View →
Deal with each other in good faith in the employment relationship	New Zealand	Ongoing	—	source	View →
Lawful basis, notice and data subject rights	Niger	—	—	source	View →
Personal data breach notification to the HAPDP	Niger	Without delay (controller to HAPDP); processor to controller within 72 hours	—	source	View →
Freeze assets of designated persons and report within 24 hours	Nigeria	Immediately, no later than 24 hours	—	source	View →
Data privacy impact assessment for high-risk processing	Nigeria	Before processing begins	—	source	View →
Report persons with significant control	Nigeria	PSC to company within 7 days; company to CAC within one month	—	source	View →
Written terms of employment and notice of termination	Nigeria	Within 3 months of starting work	—	source	View →
Beneficial ownership register entry	North Macedonia	Within 15 days of registration and of any change	—	source	View →
Lawful basis, notice and data subject rights	North Macedonia	—	—	source	View →
Personal data breach notification	North Macedonia	Immediately and no later than 72 hours after becoming aware	—	source	View →
Whistleblowing channel and protection	North Macedonia	Reply to the whistleblower within 15 days	—	source	View →
Report significant incidents under the Digital Security Act	Norway	Without undue delay (sections 8 and 11); NSM states 24 hours for essential-service providers	—	source	View →
Internal whistleblowing routines	Norway	—	—	source	View →
Register beneficial owners	Norway	Within 14 days of registration or of a change	—	source	View →
Consent, notice and data subject rights	Oman	—	—	source	View →
Protection of workers who complain, and grievance system	Oman	—	—	source	View →
Protection of whistleblowers from victimisation	Pakistan	Ongoing	—	source	View →
Cash courier declaration of US$10,000 or more	Palau	On entering or leaving Palau	—	source	View →
Lawful basis, privacy notice and data subject rights	Peru	—	—	source	View →
Lawful basis for processing, privacy notice and data subject rights	Philippines	Ongoing	—	source	View →
Notify the President of UODO of the appointment of a data protection officer	Poland	Within 14 days of designation or change	—	source	View →
Personal data breach notification to the President of UODO	Poland	Without undue delay and, where feasible, within 72 hours of becoming aware	—	source	View →
Internal whistleblowing channel and handling of reports	Poland	Acknowledge within 7 days; feedback within 3 months	—	source	View →
Beneficial-owner declaration to the central register (RCBE)	Portugal	Initial and updates within 30 days; annual confirmation by 31 December	—	source	View →
Lawful basis, notice and data subject rights	Portugal	One month from receipt, extendable by two months	—	source	View →
Personal data breach notification to the CNPD	Portugal	Within 72 hours of becoming aware	—	source	View →
Internal whistleblowing channel	Portugal	Acknowledge within 7 days; feedback within 3 months	—	source	View →
Corruption-prevention compliance programme and compliance officer	Portugal	Ongoing; risk plan reviewed every three years	—	source	View →
Cybersecurity incident notification to the competent authority	Portugal	Initial notification within 24 hours; end-of-impact notice within 24 hours; final report within 30 working days	—	source	View →
Personal data breach notification to the QFC Data Protection Office	Qatar	Within 72 hours	—	source	View →
Lawful basis, notice and data subject rights	Republic of the Congo	Ongoing	—	source	View →
Personal data breach notification	Republic of the Congo	Within 72 hours where possible	—	source	View →
Cyber-incident notification to the national security agency	Republic of the Congo	Without delay	—	source	View →
Whistleblower protection and anti-retaliation	Republic of the Congo	Ongoing	—	source	View →
Public-interest whistleblowing channel and follow-up	Romania	Acknowledge within 7 calendar days; feedback within 3 months	—	source	View →
Personal data incident notification to the authorised body	Russia	Within 24 hours (initial notice) and within 72 hours (investigation results)	—	source	View →
Person responsible for organising personal data processing	Russia	Ongoing	—	source	View →
Lawful processing, consent and data subject rights	Rwanda	Ongoing; 30 days for objection and portability requests	—	source	View →
Personal data breach notification	Rwanda	Within 48 hours to the NCSA; report within 72 hours	—	source	View →
Report systems used for cybercrime and cyber threat incidents	Rwanda	On becoming aware	—	source	View →
Anti-corruption prevention mechanisms in public and private institutions	Rwanda	Ongoing	—	source	View →
No dismissal for making a complaint against the employer	Saint Kitts and Nevis	—	—	source	View →
Do not penalise employees for complying with, enforcing or giving evidence under the Labour Act	Saint Lucia	—	—	source	View →
Do not take employment reprisals against a person who complains to the Special Prosecutor	Saint Lucia	—	—	source	View →
Beneficial ownership reporting by companies and trusts	San Marino	—	—	source	View →
Lawful basis, notice and data subject rights	San Marino	—	—	source	View →
Personal data breach notification	San Marino	Within 72 hours of awareness, where feasible	—	source	View →
Confidentiality of persons reporting corruption-related facts	San Marino	—	—	source	View →
Just cause or justified reason for dismissal of permanent staff	San Marino	—	—	source	View →
Lawful basis, information to data subjects and data subject rights	São Tomé and Príncipe	Ongoing	—	source	View →
Appoint a personal data protection officer	Saudi Arabia	Ongoing, in the listed cases	—	source	View →
Lawful basis, notice and data subject rights	Senegal	—	—	source	View →
Notify significant ICT incidents to the competent authority	Serbia	Within 24 hours of learning of the incident	—	source	View →
Lawful basis, notice and data subject rights	Serbia	Ongoing; response within 30 days	—	source	View →
Internal whistleblowing procedure	Serbia	Rules adopted and published; reports acted on within 15 days	—	source	View →
Beneficial ownership register and updates	Seychelles	Within 14 days of a declaration or change	—	source	View →
Lawful basis, notice and data subject rights	Seychelles	Ongoing	—	source	View →
Personal data breach notification	Seychelles	Not later than 72 hours after becoming aware	—	source	View →
Written particulars of employment	Sierra Leone	Within 12 weeks of the start date	—	source	View →
Internal whistleblowing channel	Slovenia	Acknowledge within 7 days; outcome within 3 months	—	source	View →
Prohibition of retaliation against reporting persons	Slovenia	—	—	source	View →
Whistleblowing channel: authorise internal procedures for protected disclosures	South Africa	Ongoing	—	source	View →
Protect employees who report corrupt practices	South Sudan	—	—	source	View →
Declare income, assets and liabilities to the Anti-Corruption Commission	South Sudan	Within 30 days of taking office, then annually by the end of February	—	source	View →
Beneficial ownership declaration to the Central Register	Spain	Within 1 month of formation; updates within 10 days; annual declaration in January	—	source	View →
Notification of security incidents through the reference CSIRT	Spain	Initial notification without undue delay, then intermediate and final (Art. 22)	—	source	View →
Internal whistleblowing channel	Spain	Ongoing; acknowledgement within 7 calendar days; response within 3 months	—	source	View →
Anti-bribery and criminal compliance model	Spain	Ongoing (exemption condition)	—	source	View →
Lawful basis, transparency and data subject rights	Spain	Ongoing	—	source	View →
Personal data breach notification to the AEPD	Spain	Within 72 hours of becoming aware	—	source	View →
Lawful basis, notice and data subject rights	Sri Lanka	Ongoing	—	source	View →
Credit information: customer access, appeal and correction of errors	Sudan	Ongoing; appeals reviewed within 15 days	—	source	View →
Registration with FIU Suriname	Suriname	Within 3 months of starting business (Art. 28)	—	source	View →
Internal reporting channels for employers with 50 or more employees	Sweden	Ongoing	—	source	View →
Cyber incident reporting by essential and important entities	Sweden	Early warning within 24 hours; notification within 24 hours (trust services) or 72 hours (others); final report within one month	—	source	View →
Personal data breach notification to IMY	Sweden	Within 72 hours of becoming aware	—	source	View →
Lawful grounds, information to individuals and data subject rights	Sweden	Ongoing	—	source	View →
Beneficial ownership information held and filed with Bolagsverket	Sweden	At registration or within four weeks; changes without delay	—	source	View →
Information to data subjects and right of access	Switzerland	Ongoing; access requests answered within 30 days (Art. 25 para. 7)	—	source	View →
Notifying the FDPIC of a data security breach	Switzerland	As quickly as possible	—	source	View →
Due diligence and reporting on conflict minerals and child labour	Switzerland	Ongoing	—	source	View →
Prohibition of retaliation against public interest whistleblowers	Taiwan	Ongoing	—	source	View →
Protection of workers who report labour law violations	Taiwan	Authority to notify the worker within 60 days of the complaint	—	source	View →
State protection for persons who help counter corruption	Tajikistan	—	—	source	View →
Lawful basis, notice and data subject rights	Tanzania	Ongoing	—	source	View →
Personal data breach notification	Tanzania	Without any undue delay	—	source	View →
Registration as a data controller or processor	Tanzania	Before processing; renew every 5 years	—	source	View →
Whistleblower disclosure channel and protection	Tanzania	Ongoing	—	source	View →
Written employment contract and particulars; five-year retention	Tanzania	5 years after termination	—	source	View →
Personal data breach notification	Thailand	Within 72 hours of becoming aware, where feasible	—	source	View →
Accept and protect whistleblower reports	Timor-Leste	—	—	source	View →
No dismissal for lodging a complaint with the authorities	Timor-Leste	—	—	source	View →
Lawful basis, notice and data subject rights	Togo	Ongoing	—	source	View →
Personal data breach notification	Tonga	Within 72 hours of becoming aware	—	source	View →
Cyber-incident reporting and annual security audit	Tunisia	Immediately	—	source	View →
Whistleblowing: internal reporting unit in public bodies	Tunisia	—	—	source	View →
Lawful basis, notice and data subject rights	Türkiye	At collection + on request	—	source	View →

Date	Entity	Country	Action	Penalty	Source
28 JUL 2010	3M Imtec Corporation	United States	—	US$125,000	source
28 JUL 2010	Maersk Line, Limited	United States	—	US$3,088,400	source
15 JUL 2010	An Individual	United States	—	US$5,000	source
15 JUL 2010	Agar Corporation, Inc.	United States	—	US$860,000	source
15 JUL 2010	United Nations Federal Credit Union	United States	—	US$500,000	source
3 JUN 2010	KLM Cargo	United States	—	US$5,336.26	source
3 JUN 2010	GEICO General Insurance Company	United States	—	US$11,000	source
23 APR 2010	Hilton International Co.	United States	—	US$735,407	source
23 APR 2010	LD Telecommunications, Inc.	United States	—	US$21,671	source
19 MAR 2010	Innospec Inc.	United States	—	US$2,200,000	source
9 MAR 2010	Aviation Services International, B.V.	United States	—	US$750,000	source
8 MAR 2010	An Individual	United States	—	US$525	source
8 MAR 2010	Industrial Maritime Carriers Worldwide, L.L.C.	United States	—	US$72,072	source
5 FEB 2010	Balli Group PLC and Balli Aviation, Ltd.	United States	—	US$15,000,000	source
22 DEC 2009	Lloyds TSB Bank, plc	United States	—	US$217,000,000	source
16 DEC 2009	Credit Suisse AG	United States	—	US$536,000,000	source
30 SEP 2009	Gold & Silver Reserve, Inc.	United States	—	US$2,950,000	source
30 SEP 2009	Barwil Agencies NA, Inc.	United States	—	US$84,000	source
31 AUG 2009	Thermon Manufacturing Company	United States	—	US$14,613.24	source
24 AUG 2009	Australia and New Zealand Bank Group, Ltd.	United States	—	US$5,750,000	source
6 AUG 2009	DPWN Holdings (USA), Inc. and DHL Express (USA), Inc.	United States	—	US$9,444,744	source
31 JUL 2009	An Individual	United States	—	US$8,000	source
31 JUL 2009	An Individual	United States	—	US$15,000	source
31 JUL 2009	First Incentive Travel, Inc.	United States	—	US$8,250	source
31 JUL 2009	MGE UPS Systems, Inc.	United States	—	US$10,341	source

• US sanctions bill targets Russian energy sector under Graham legislation 3 Oct 2026