Healthcare & Pharma — regulation across countries

Regulator	Country	Official site
Applies across all sectors
IGF Inspection Générale des Finances	Democratic Republic of the Congo	source
Arbejdstilsynet (Danish Working Environment Authority) Arbejdstilsynet (Danish Working Environment Authority)	Denmark	source
Datatilsynet (Danish Data Protection Agency) Datatilsynet (Danish Data Protection Agency)	Denmark	source
Erhvervsstyrelsen (Danish Business Authority) Erhvervsstyrelsen (Danish Business Authority)	Denmark	source
NSK Nationale enhed for Særlig Kriminalitet (National Unit for Special Crime)	Denmark	source
Integrity Commission Integrity Commission	Dominica	—
DGII Dirección General de Impuestos Internos (Internal Revenue Directorate)	Dominican Republic	source
UAF Unidad de Análisis Financiero (Financial Analysis Unit)	Dominican Republic	source
SPDP Superintendencia de Protección de Datos Personales	Ecuador	source
ACA Administrative Control Authority	Egypt	source
ACE Agencia de Ciberseguridad del Estado	El Salvador	source
AKI Data Protection Inspectorate (Andmekaitse Inspektsioon)	Estonia	source
Labour Inspectorate (Tööinspektsioon) Labour Inspectorate (Tööinspektsioon)	Estonia	source
Ministry of Justice and Digital Affairs (Justiits- ja Digiministeerium) Ministry of Justice and Digital Affairs (Justiits- ja Digiministeerium)	Estonia	source
Prosecutor's Office (Prokuratuur) Prosecutor's Office (Prokuratuur)	Estonia	source
EDPA Eswatini Data Protection Authority	Eswatini	source
FICAC Fiji Independent Commission Against Corruption	Fiji	source
Oikeusministeriö (Ministry of Justice) Oikeusministeriö (Ministry of Justice)	Finland	source
PRH Patentti- ja rekisterihallitus (Finnish Patent and Registration Office)	Finland	source
FIU Rahanpesun selvittelykeskus (Financial Intelligence Unit, National Bureau of Investigation)	Finland	source
Tietosuojavaltuutetun toimisto (Office of the Data Protection Ombudsman) Tietosuojavaltuutetun toimisto (Office of the Data Protection Ombudsman)	Finland	source
AFA Agence française anticorruption	France	source
ANSSI Agence nationale de la sécurité des systèmes d'information	France	source
Défenseur des droits Défenseur des droits	France	source
DG Trésor Direction générale du Trésor	France	source
HATVP Haute Autorité pour la transparence de la vie publique	France	source
APDPVP Autorité pour la Protection des Données Personnelles et de la Vie Privée (Personal Data and Privacy Protection Authority)	Gabon	source
gmCSIRT The Gambia Computer Security Incident Response Team	Gambia	source
Anti-Corruption Bureau of Georgia Anti-Corruption Bureau of Georgia	Georgia	source
DEA Data Exchange Agency (operator of CERT.GOV.GE)	Georgia	source
Labour Inspection Service Labour Inspection Service	Georgia	—
BAFA Federal Office for Economic Affairs and Export Control (Bundesamt für Wirtschaft und Ausfuhrkontrolle)	Germany	source
BSI Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik)	Germany	source
CHRAJ Commission on Human Rights and Administrative Justice	Ghana	source
DPC Data Protection Commission	Ghana	source
EOCO Economic and Organised Crime Office	Ghana	source
FIC Financial Intelligence Centre	Ghana	source
OSP Office of the Special Prosecutor	Ghana	source
HDPA Hellenic Data Protection Authority	Greece	source
NCSA National Cybersecurity Authority	Greece	source
NTA National Transparency Authority	Greece	source
MARN Ministerio de Ambiente y Recursos Naturales	Guatemala	source
FIU Financial Intelligence Unit	Guyana	source
Ministry of Labour and Manpower Planning Ministry of Labour and Manpower Planning	Guyana	source
UCREF Unité Centrale de Renseignements Financiers	Haiti	source
SETRASS Secretaría de Trabajo y Seguridad Social	Honduras	source
TSC Tribunal Superior de Cuentas	Honduras	source
ICAC Independent Commission Against Corruption	Hong Kong	source
Labour Department Labour Department	Hong Kong	source
Office of the Commissioner of Critical Infrastructure (Computer-system Security) Office of the Commissioner of Critical Infrastructure (Computer-system Security)	Hong Kong	source
Integritás Hatóság (Integrity Authority) Integritás Hatóság (Integrity Authority)	Hungary	source
NAIH Nemzeti Adatvédelmi és Információszabadság Hatóság (National Authority for Data Protection and Freedom of Information)	Hungary	source
NAV PEI Nemzeti Adó- és Vámhivatal Központi Irányítás Pénzmosás és Terrorizmusfinanszírozás Elleni Iroda (NAV Anti-Money Laundering and Counter-Terrorist Financing Office, Hungary's FIU)	Hungary	source
Persónuvernd (Icelandic Data Protection Authority) Persónuvernd (Icelandic Data Protection Authority)	Iceland	source
Vinnueftirlit ríkisins (Administration of Occupational Safety and Health) Vinnueftirlit ríkisins (Administration of Occupational Safety and Health)	Iceland	source
Lokpal of India Lokpal of India	India	source
Ministry of Labour and Employment Ministry of Labour and Employment	India	source
NCIIPC National Critical Information Infrastructure Protection Centre	India	source
KPK Komisi Pemberantasan Korupsi (Corruption Eradication Commission)	Indonesia	source
PPATK Pusat Pelaporan dan Analisis Transaksi Keuangan (Indonesian Financial Transaction Reports and Analysis Centre)	Indonesia	source
Office of Combating Money Laundering and Terrorist Financing (مكتب مكافحة غسل الأموال وتمويل الإرهاب) Office of Combating Money Laundering and Terrorist Financing (مكتب مكافحة غسل الأموال وتمويل الإرهاب)	Iraq	source
CCPC Competition and Consumer Protection Commission	Ireland	source
IMPA Israel Money Laundering and Terror Financing Prohibition Authority	Israel	source
State Comptroller and Ombudsman of Israel State Comptroller and Ombudsman of Israel	Israel	source
AGCM Autorità Garante della Concorrenza e del Mercato	Italy	source
Garante per la protezione dei dati personali Garante per la protezione dei dati personali	Italy	source
INL Ispettorato Nazionale del Lavoro	Italy	source
UIF Unità di Informazione Finanziaria per l'Italia	Italy	source
FID Financial Investigations Division	Jamaica	source
OIC Office of the Information Commissioner	Jamaica	source
Consumer Affairs Agency Consumer Affairs Agency	Japan	source
Ministry of Economy, Trade and Industry Ministry of Economy, Trade and Industry	Japan	source
Ministry of Health, Labour and Welfare Ministry of Health, Labour and Welfare	Japan	source
Ministry of Justice Ministry of Justice	Japan	source
AMLU Anti-Money Laundering and Counter-Terrorism Financing Unit	Jordan	source
JIACC Jordan Integrity and Anti-Corruption Commission	Jordan	source
Ministry of Labour Ministry of Labour	Jordan	source
NCSC National Cyber Security Centre	Jordan	source
PDPD Personal Data Protection Council and Directorate, Ministry of Digital Economy and Entrepreneurship	Jordan	source
Anti-Corruption Agency of the Republic of Kazakhstan (Anti-Corruption Service) Anti-Corruption Agency of the Republic of Kazakhstan (Anti-Corruption Service)	Kazakhstan	source
CAK Competition Authority of Kenya	Kenya	source
EACC Ethics and Anti-Corruption Commission	Kenya	source
ODPC Office of the Data Protection Commissioner	Kenya	source
PSO Public Service Office - Integrity and Corruption Control Division (Anti-Corruption Unit)	Kiribati	source
AKK Anti-Corruption Agency (Agjencia Kundër Korrupsionit; named in Law No. 08/L-017 as the Agency for the Prevention of Corruption)	Kosovo	source
AIP Information and Privacy Agency (Agjencia për Informim dhe Privatësi)	Kosovo	source
Nazaha Public Authority for Anti-Corruption (Nazaha)	Kuwait	source
CERT.LV CERT.LV (Cyber Incident Response Institution of the Republic of Latvia)	Latvia	source
DVI Datu valsts inspekcija (Data State Inspectorate)	Latvia	source
Finanšu izlūkošanas dienests (Financial Intelligence Unit of Latvia) Finanšu izlūkošanas dienests (Financial Intelligence Unit of Latvia)	Latvia	source
KNAB Korupcijas novēršanas un apkarošanas birojs (Corruption Prevention and Combating Bureau)	Latvia	source
Latvijas Republikas Uzņēmumu reģistrs (Register of Enterprises of the Republic of Latvia) Latvijas Republikas Uzņēmumu reģistrs (Register of Enterprises of the Republic of Latvia)	Latvia	source
NKDC Nacionālais kiberdrošības centrs (National Cyber Security Centre)	Latvia	source
VDI Valsts darba inspekcija (State Labour Inspectorate)	Latvia	source
DCEO Directorate on Corruption and Economic Offences	Lesotho	source
FIU Financial Intelligence Unit	Lesotho	source
EPA Environmental Protection Agency of Liberia	Liberia	source
NACC National Anti-Corruption Commission (الهيئة الوطنية لمكافحة الفساد)	Libya	source
NISSA National Information Security and Safety Authority (الهيئة الوطنية لأمن وسلامة المعلومات)	Libya	source
Amt für Justiz Amt für Justiz	Liechtenstein	source

Law or regulation	Type	Country	Year	Source
Applies across all sectors
Decreto nº 11.129, de 11 de julho de 2022 (Decree 11,129/2022 regulating Law 12,846/2013)	Regulation	Brazil	2022	source
Lei nº 13.974, de 7 de janeiro de 2020 (Law 13,974/2020 on the Financial Activities Control Council – Coaf)	Act	Brazil	2020	source
Lei nº 14.063, de 23 de setembro de 2020 (Law 14,063/2020 on electronic signatures in interactions with public bodies, in acts of private entities and in health matters)	Act	Brazil	2020	source
Lei nº 13.608, de 10 de janeiro de 2018 (Law 13,608/2018 on the crime-reporting service and whistleblower protection)	Act	Brazil	2018	source
Lei nº 12.846/2013 – Lei Anticorrupção (Law 12,846/2013 – Clean Company Act)	Act	Brazil	2013	source
Lei nº 12.737, de 30 de novembro de 2012 (Law 12,737/2012 on the criminal classification of computer crimes)	Act	Brazil	2012	source
Medida Provisória nº 2.200-2, de 24 de agosto de 2001 (Provisional Measure 2,200-2/2001 establishing ICP-Brasil, the Brazilian Public Key Infrastructure)	Act	Brazil	2001	source
Código Penal (Decreto-Lei nº 2.848, de 7 de dezembro de 1940) (Penal Code)	Act	Brazil	1940	source
Cybersecurity Act (Chapter 272)	Act	Brunei	2023	source
Правилник за прилагане на Закона за мерките срещу изпирането на пари (Rules for Implementing the Measures Against Money Laundering Act)	Regulation	Bulgaria	2018	source
Закон за инспектиране на труда (Law on Labour Inspection)	Act	Bulgaria	2008	source
Loi n°004-2015/CNT du 3 mars 2015 portant prévention et répression de la corruption au Burkina Faso, modifiée par la loi n°033-2018/AN du 26 juillet 2018 (Law No. 004-2015/CNT on the prevention and repression of corruption, as amended)	Act	Burkina Faso	2015	source
Loi n°028-2008/AN du 13 mai 2008 portant Code du travail au Burkina Faso (Law No. 028-2008/AN on the Labour Code)	Act	Burkina Faso	2008	source
Décret n° 100/044 du 16 mars 2020 portant création, missions, organisation et fonctionnement de la Cellule Nationale de Renseignement Financier (Decree n° 100/044 on the creation, missions, organisation and functioning of the CNRF)	Regulation	Burundi	2020	source
Loi n° 1/02 du 4 février 2008 relative à la lutte contre le blanchiment de capitaux et le financement du terrorisme (Law n° 1/02 of 4 February 2008 on the fight against money laundering and terrorism financing)	Act	Burundi	2008	source
Loi n° 1/12 du 18 avril 2006 portant mesures de prévention et de répression de la corruption et des infractions connexes (Act n° 1/12 of 18 April 2006 providing measures for prevention and repression of corruption and related offences)	Act	Burundi	2006	source
Lei n.º 121/IX/2021, de 17 de março — Segunda alteração ao regime jurídico geral de proteção de dados pessoais (Law 121/IX/2021, second amendment to the General Legal Regime for the Protection of Personal Data)	Act	Cabo Verde	2021	source
Lei n.º 77/IX/2020, de 23 de março — Cria o Conselho da Prevenção da Corrupção (Law 77/IX/2020 creating the Corruption Prevention Council)	Act	Cabo Verde	2020	source
Lei n.º 41/VIII/2013, de 17 de setembro — Altera a Lei n.º 133/V/2001, Regime jurídico geral de proteção de dados pessoais das pessoas singulares (Law 41/VIII/2013 amending the General Legal Regime for the Protection of Personal Data)	Act	Cabo Verde	2013	source
Draft Law on Personal Data Protection (final version, 23 June 2025)	Act	Cambodia	2025	source
Loi n°2010/012 du 21 décembre 2010 relative à la cybersécurité et la cybercriminalité au Cameroun (Law No. 2010/012 on cybersecurity and cybercrime in Cameroon)	Act	Cameroon	2010	source
Loi N°2010/021 du 21 décembre 2010 régissant le commerce électronique au Cameroun (Law No. 2010/021 governing electronic commerce in Cameroon)	Act	Cameroon	2010	source
Loi n° 92/007 du 14 août 1992 portant Code du Travail (Act No. 92/007 of 14 August 1992 establishing the Labour Code)	Act	Cameroon	1992	source
Fighting Against Forced Labour and Child Labour in Supply Chains Act	Act	Canada	2023	source
Public Servants Disclosure Protection Act	Act	Canada	2005	source
Secure Electronic Signature Regulations	Regulation	Canada	2005	source
Corruption of Foreign Public Officials Act	Act	Canada	1998	source
Canada Labour Code	Act	Canada	1985	source
Canada Business Corporations Act	Act	Canada	1985	source
Act respecting the protection of personal information in the private sector	Act	Canada	—	source
Loi N°038/PR/96 du 11 décembre 1996 portant Code du travail (Law No. 038/PR/96 of 11 December 1996 on the Labour Code)	Act	Chad	1996	source
Ley N° 21.459, que establece normas sobre delitos informáticos, deroga la Ley N° 19.223 y modifica otros cuerpos legales con el objeto de adecuarlos al Convenio de Budapest	Act	Chile	2022	source
Ley N° 20.393, que establece la responsabilidad penal de las personas jurídicas en los delitos que indica	Act	Chile	2009	source
Ley N° 20.205, que protege al funcionario que denuncia irregularidades y faltas al principio de probidad (Law 20,205 protecting the official who reports irregularities and breaches of probity)	Act	Chile	2007	source
Ley N° 19.913, que crea la Unidad de Análisis Financiero y modifica diversas disposiciones en materia de lavado y blanqueo de activos	Act	Chile	2003	source
大型个人信息处理者个人信息保护规定（征求意见稿） (Regulations on Personal Information Protection of Large Personal Information Processors, Draft for Comment)	Regulation	China	2026	source
国家网络安全事件报告管理办法 (National Cybersecurity Incident Reporting Management Measures)	Regulation	China	2025	source
中华人民共和国监察法（2024修正） (Supervision Law of the People's Republic of China, 2024 amendment)	Act	China	2024	source
中华人民共和国电子签名法（2019年修正） (Electronic Signature Law of the People's Republic of China, 2019 amendment)	Act	China	2019	source
Decreto 1122 de 2024, Programas de Transparencia y Ética Pública (Decree 1122 of 2024 on public transparency and ethics programmes)	Regulation	Colombia	2024	source
Ley 2195 de 2022, medidas en materia de transparencia, prevención y lucha contra la corrupción (Law 2195 of 2022 on transparency, prevention and fight against corruption)	Act	Colombia	2022	source
Ley 1778 de 2016, responsabilidad de las personas jurídicas por actos de corrupción transnacional (Law 1778 of 2016 on liability of legal entities for transnational corruption)	Act	Colombia	2016	source
Ley Estatutaria 1581 de 2012, disposiciones generales para la protección de datos personales (Statutory Law 1581 of 2012, general provisions for the protection of personal data)	Act	Colombia	2012	source
Ley 1273 de 2009, protección de la información y de los datos (Law 1273 of 2009 on protection of information and data)	Act	Colombia	2009	source
Ley 1121 de 2006, normas para la prevención, detección, investigación y sanción de la financiación del terrorismo (Law 1121 of 2006 on preventing, detecting, investigating and punishing terrorist financing)	Act	Colombia	2006	source
Ley 526 de 1999, por medio de la cual se crea la Unidad de Información y Análisis Financiero (Law 526 of 1999 creating the Financial Information and Analysis Unit)	Act	Colombia	1999	source
Loi n°12-008/AU du 28 juin 2012 relative à la lutte contre le blanchiment d'argent et le financement du terrorisme (Law 12-008/AU of 28 June 2012 on Combating Money Laundering and the Financing of Terrorism)	Act	Comoros	2012	source
Code du travail 2012 (Loi n°12-12/AU modifiant et complétant la loi n°84-108/PR portant Code du travail) (Labour Code, Law 12-12/AU amending Law 84-108/PR)	Act	Comoros	2012	source
Ley 8968 de Protección de la persona frente al tratamiento de sus datos personales (Law 8968 on the protection of individuals regarding the processing of personal data)	Act	Costa Rica	2011	source
Loi n°2018-570 du 13 juin 2018 relative à la protection des témoins, victimes, dénonciateurs, experts et autres personnes concernées (Law No. 2018-570 on the protection of witnesses, victims, whistleblowers, experts and other persons concerned)	Act	Côte d'Ivoire	2018	source
Zakon o kibernetičkoj sigurnosti (Cybersecurity Act)	Act	Croatia	2024	source
Zakon o zaštiti prijavitelja nepravilnosti (Whistleblower Protection Act)	Act	Croatia	2022	source
Zakon o provedbi Opće uredbe o zaštiti podataka (Act on the Implementation of the General Data Protection Regulation)	Act	Croatia	2018	source
Zakon o provedbi Uredbe (EU) br. 910/2014 o elektroničkoj identifikaciji i uslugama povjerenja za elektroničke transakcije na unutarnjem tržištu (Act implementing Regulation (EU) No 910/2014 on electronic identification and trust services)	Act	Croatia	2017	source
Resolución 58 de 2022 del Ministerio de Comunicaciones — Reglamento para la Seguridad y Protección de los Datos Personales en Soporte Electrónico (Regulation on the Security and Protection of Personal Data in Electronic Form)	Regulation	Cuba	2022	source
Ley 158 de la Contraloría General de la República de Cuba y del sistema de control superior de los fondos públicos y de la gestión administrativa (Law 158 on the Comptroller General of the Republic and the system of higher control of public funds and administrative management)	Act	Cuba	2022	source
Protection of Persons Who Report Breaches of Union and National Law Law of 2022 (Ο περί της Προστασίας Προσώπων που Αναφέρουν Παραβάσεις του Ενωσιακού και Εθνικού Δικαίου Νόμος του 2022, 6(I)/2022)	Act	Cyprus	2022	source
Establishment and Operation of the Independent Authority Against Corruption Law of 2022 (Ο περί της Σύστασης και Λειτουργίας της Ανεξάρτητης Αρχής κατά της Διαφθοράς Νόμος του 2022, 19(I)/2022)	Act	Cyprus	2022	source
Establishment of the Labour Inspection Service in the Ministry of Labour, Welfare and Social Insurance Law of 2020 (Ο περί της Σύστασης Υπηρεσίας Επιθεωρήσεων στο Υπουργείο Εργασίας, Προνοίας και Κοινωνικών Ασφαλίσεων Νόμος του 2020, 88(I)/2020)	Act	Cyprus	2020	source
Protection of Natural Persons with regard to the Processing of Personal Data and on the Free Movement of such Data Law of 2018 (Ο περί της Προστασίας των Φυσικών Προσώπων Έναντι της Επεξεργασίας των Δεδομένων Προσωπικού Χαρακτήρα και της Ελεύθερης Κυκλοφορίας των Δεδομένων αυτών Νόμος του 2018, 125(I)/2018)	Act	Cyprus	2018	source
Attacks Against Information Systems Law of 2015 (Ο περί Επιθέσεων κατά Συστημάτων Πληροφοριών Νόμος του 2015, 147(I)/2015)	Act	Cyprus	2015	source
Termination of Employment Law of 1967 (Ο περί Τερματισμού Απασχολήσεως Νόμος του 1967, 24/1967)	Act	Cyprus	1967	source
Zákon č. 171/2023 Sb., o ochraně oznamovatelů (Act No. 171/2023 Coll. on the Protection of Whistleblowers)	Act	Czechia	2023	source
Act of 12 March 2019 on personal data processing (Act No. 110/2019 Coll.)	Act	Czechia	2019	source
Loi n° 16/010 du 15 juillet 2016 modifiant et complétant la loi n° 015-2002 portant Code du travail (Law 16/010 amending the Labour Code)	Act	Democratic Republic of the Congo	2016	source
Regulation (EU) 2016/679 (General Data Protection Regulation)	Regulation	Denmark	2016	source
Loi n°106/AN/24/9ème L relative à la lutte contre le blanchiment des capitaux, le financement du terrorisme et la prolifération des armes de destruction massive (Law 106/AN/24/9th L on Combating Money Laundering, Terrorist Financing and Proliferation of Weapons of Mass Destruction)	Act	Djibouti	2024	source
Loi n°104/AN/24/9ème L modifiant la Loi n°110/AN/11/6ème L relative à la lutte contre le financement du terrorisme (Law 104/AN/24/9th L amending Law 110/AN/11/6th L on Combating the Financing of Terrorism)	Act	Djibouti	2024	source
Décret n°2024-314/PR/MI portant application de la loi n°106/AN/24/9ème L relative à la lutte contre le blanchiment des capitaux, le financement du terrorisme et la prolifération des armes de destruction massive (Decree 2024-314 Implementing Law 106/AN/24/9th L)	Regulation	Djibouti	2024	source
Loi n°103/AN/24/9ème L relative à la prévention et à la lutte contre la corruption et les infractions assimilées (Law 103/AN/24/9th L on the Prevention of and Fight against Corruption and Related Offences)	Act	Djibouti	2024	source
Loi n°133/AN/05/5ème L du 28 janvier 2006 portant Code du Travail (Law 133/AN/05/5th L of 28 January 2006, Labour Code)	Act	Djibouti	2006	source
Ley No. 172-13 sobre la Protección Integral de los Datos Personales (Law 172-13 on Comprehensive Protection of Personal Data)	Act	Dominican Republic	2013	source
Ley No. 53-07 sobre Crímenes y Delitos de Alta Tecnología (Law 53-07 on High-Technology Crimes and Offences)	Act	Dominican Republic	2007	source
Ley No. 126-02 sobre Comercio Electrónico, Documentos y Firmas Digitales (Law 126-02 concerning Electronic Commerce, Documents, and Digital Signatures)	Act	Dominican Republic	2002	source
Resolución SPDP-SPD-2025-0022-R - Reglamento para la aplicación de la metodología para el cálculo de las multas en el régimen administrativo sancionatorio de la Superintendencia de Protección de Datos Personales (Regulation applying the methodology for calculating fines in the administrative sanctions regime of the Data Protection Superintendency)	Regulation	Ecuador	2025	source
Ley Orgánica de Protección de Datos Personales (Organic Law on Personal Data Protection)	Act	Ecuador	2021	source
Law No. 14 of 2025 promulgating the Labour Law	Act	Egypt	2025	source
Social Insurance and Pensions Law No. 148 of 2019	Act	Egypt	2019	source
Law No. 175 of 2018 on Anti-Cyber and Information Technology Crimes	Act	Egypt	2018	source
Law No. 181 of 2018 on Consumer Protection	Act	Egypt	2018	source
Law No. 207 of 2017 amending certain provisions of Law No. 54 of 1964 on the Administrative Control Authority	Act	Egypt	2017	source
Anti-Terrorism Law No. 94 of 2015	Act	Egypt	2015	source
Law No. 8 of 2015 on the Regulation of Lists of Terrorist Entities and Terrorists	Act	Egypt	2015	source
Decree of the Minister of Communications and Information Technology No. 109 of 2005 (Executive Regulations of Law No. 15 of 2004)	Regulation	Egypt	2005	source
Law No. 15 of 2004 on E-signature and Establishment of the Information Technology Industry Development Authority (ITIDA)	Act	Egypt	2004	source
Executive Regulations of the Anti-Money Laundering Law (Prime Minister Decree No. 951 of 2003, as updated 2023)	Regulation	Egypt	2003	source
Law No. 54 of 1964 on the Administrative Control Authority	Act	Egypt	1964	source
Eswatini Cash Threshold Reporting Guideline (September 2024)	Guideline	Eswatini	2024	source
Data Protection Act, 2022 (Act No. 5 of 2022)	Act	Eswatini	2022	source
Revised Federal Ethics and Anti-Corruption Commission Establishment Proclamation No. 1236/2021	Act	Ethiopia	2021	source
Labour Proclamation No. 1156/2019	Act	Ethiopia	2019	source
Computer Crime Proclamation No. 958/2016	Act	Ethiopia	2016	source
Cybercrime Act 2021	Act	Fiji	2021	source
Laki Euroopan unionin ja kansallisen oikeuden rikkomisesta ilmoittavien henkilöiden suojelusta 1171/2022 (Act on the Protection of Persons Reporting Breaches of European Union and National Law)	Act	Finland	2022	source
Tietosuojalaki 1050/2018 (Data Protection Act)	Act	Finland	2018	source
Projet de loi relatif à la résilience des infrastructures critiques et au renforcement de la cybersécurité (Bill on the resilience of critical infrastructure and strengthening of cybersecurity, transposing NIS 2)	Act	France	2024	source
Regulation (EU) 2016/679 (General Data Protection Regulation)	Regulation	France	2016	source
Code du travail (Labour Code)	Act	France	—	source
Loi N°025/2021 du 28 décembre 2021 portant réglementation des transactions électroniques en République gabonaise (Law No. 025/2021 regulating electronic transactions)	Act	Gabon	2021	source
The Gambia Anti-Corruption Commission Act, 2012	Act	Gambia	2012	source

Obligation	Country	Nature	Verified	Source	Detail
Applies across all sectors
Incident notification to the National Cybersecurity Authority (NIS2)	Greece	Early warning 24 hours; update 72 hours; final report 1 month	—	source	View →
Protection of public officers who make protected disclosures	Grenada	Ongoing	—	source	View →
No victimisation of employees who complain or take part in proceedings	Grenada	Ongoing	—	source	View →
Valid reason, written notice and termination allowance on dismissal	Grenada	Event-triggered on dismissal; complaint to the Labour Commissioner within 3 months (s.82)	—	source	View →
Handling of personal data by public bodies: consent, access and correction	Guatemala	—	—	source	View →
Annual declaration of income, assets and liabilities by persons in public life	Guyana	Annually on or before 30 June	—	source	View →
Beneficial ownership registration and annual update	Honduras	Annually by 30 May; changes within the first 10 business days of the following month	—	source	View →
Employment contracts and changes in writing	Honduras	At hiring and on any change	—	source	View →
No reprisals against workers for exercising labour rights	Honduras	Ongoing	—	source	View →
Employer duties to employees admitted to the witness protection programme	Honduras	Event-triggered on admission to the programme	—	source	View →
Report computer-system security incidents to the Commissioner's Office	Hong Kong	12 hours (serious) or 48 hours (other); written report within 14 days	—	source	View →
Pay wages within seven days of the wage period	Hong Kong	Within 7 days after the wage period ends	—	source	View →
Keep wage and employment records	Hong Kong	12 months of history; keep for 6 months after employment ends	—	source	View →
No dismissal for giving evidence or union activity	Hong Kong	Applies at all times	—	source	View →
Make mandatory MPF contributions for employees	Hong Kong	Monthly, by the 10th of the following month	—	source	View →
Private-sector agents must not accept advantages without principal's permission	Hong Kong	Applies at all times	—	source	View →
Cybersecurity registration of covered organisations	Hungary	Within 30 days of coming under the Act	—	source	View →
Data subject rights	Hungary	Within one month of request (extendable by two months)	—	source	View →
Beneficial owner registration and updates	Iceland	Changes within 2 weeks	—	source	View →
Lawful processing, notice and data subject rights	Iceland	—	—	source	View →
Personal data breach notification	Iceland	Without undue delay and, if possible, within 72 hours	—	source	View →
Incident notification by operators of essential services	Iceland	As soon as possible ('svo fljótt sem verða má')	—	source	View →
Internal whistleblowing procedures	Iceland	—	—	source	View →
Report cyber incidents to CERT-In within six hours	India	Within 6 hours of noticing the incident	—	source	View →
Keep system logs for 180 days within India	India	Rolling 180 days (logs); 5 years (VASP KYC and transaction records)	—	source	View →
Lawful basis, notice and data subject rights	Indonesia	Ongoing	—	source	View →
Sustainability report	Indonesia	Annually; 30 April if filed separately from the annual report	—	source	View →
Corporate social and environmental responsibility	Indonesia	Ongoing; reported in the annual report	—	source	View →
Internal reporting channels for protected disclosures	Ireland	Acknowledge within 7 days; feedback within 3 months	—	source	View →
Anti-corruption compliance: reasonable steps defence	Ireland	—	—	source	View →
Weekly working time and rest limits	Ireland	—	—	source	View →
Non-discrimination in employment	Ireland	—	—	source	View →
Employer justification for dismissal	Ireland	Claims within 6 months of dismissal	—	source	View →
Database registration and data subject access	Israel	Ongoing	—	source	View →
Personal data breach notification	Italy	Without undue delay and, where possible, within 72 hours	—	source	View →
Whistleblowing channels and protection of reporters	Italy	Ongoing; ANAC acknowledgement within 7 days, feedback within 3 months	—	source	View →
Security control measures for personal data	Japan	—	—	source	View →
Consent for provision of personal data to third parties abroad	Japan	Before each transfer	—	source	View →
Whistleblowing report handling system	Japan	—	—	source	View →
Working hours limits and overtime agreements	Japan	40 hours a week; overtime 45 hours a month and 360 hours a year	—	source	View →
Work rules for employers with ten or more workers	Japan	On preparation and on each change	—	source	View →
Lawful basis, consent and data subject rights	Kazakhstan	Ongoing	—	source	View →
Appoint a person responsible for organising personal data processing	Kazakhstan	Ongoing	—	source	View →
Lawful basis, notice and data subject rights	Kenya	Ongoing	—	source	View →
Personal data breach notification	Kenya	Within 72 hours of becoming aware (s.43(1)(a))	—	source	View →
Anti-bribery procedures	Kenya	Ongoing	—	source	View →
Duty to report bribery to the Commission	Kenya	Within 24 hours (s.14)	—	source	View →
Protection of whistle-blowers and witnesses	Kenya	Ongoing	—	source	View →
Beneficial ownership register and filing with the Registrar	Kenya	On incorporation and on each change	—	source	View →
Retention of employment records	Kenya	5 years after termination (s.10(6))	—	source	View →
Declaration of cash above $5,000 at the border	Kiribati	On each entry or exit carrying cash above $5,000 equivalent	—	source	View →
Lawful basis, notice and data subject rights	Kosovo	Ongoing	—	source	View →
Personal data breach notification to the Agency	Kosovo	Not later than 72 hours after becoming aware	—	source	View →
Duty to report corruption and protection of whistleblowers	Kuwait	—	—	source	View →
Respect data subject rights (access, rectification, erasure, restriction, portability, objection)	Latvia	Respond to requests within one month	—	source	View →
No adverse consequences for employees who report suspected offences at work	Latvia	—	—	source	View →
Lawful processing, notice and data subject rights	Lesotho	—	—	source	View →
Personal data breach notification	Lesotho	As soon as reasonably possible after discovery (s. 23)	—	source	View →
Beneficial owner identification and reporting to the register	Liechtenstein	Within 30 days of commercial register entry and of each change	—	source	View →
Lawful basis, notice and data subject rights	Liechtenstein	—	—	source	View →
Cyber-incident reporting to the Stabsstelle Cyber-Sicherheit	Liechtenstein	Early warning 24 hours; notification 72 hours; final report within one month	—	source	View →
Record of processing activities	Luxembourg	Ongoing; kept current	—	source	View →
Lawful basis, notice and data subject rights	Macao	Ongoing	—	source	View →
Notification of data processing to the public authority	Macao	In writing within 8 days of the start of processing	—	source	View →
Lawful basis, notice and data subject rights	Madagascar	—	—	source	View →
Prior declaration or authorisation to the CMIL and data protection officer	Madagascar	Before processing starts	—	source	View →
Asset and interest declarations by listed officials	Madagascar	Within 3 months of appointment; renewal every 2 years or after a major change	—	source	View →
Protect people who report corruption	Malawi	Ongoing	—	source	View →
Give a valid reason and fair procedure before dismissal	Malawi	Ongoing	—	source	View →
Lawful basis, notice and data subject rights	Mali	—	—	source	View →
Asset declaration by public officials	Mali	Before taking office, updated annually, and on leaving office	—	source	View →
Internal whistleblowing reporting channel	Malta	Acknowledge within 7 days; feedback within 3 months	—	source	View →
Lawful basis, notice to data subjects and data subject rights	Mauritania	—	—	source	View →
Annual independent IT security audit for critical information infrastructure	Mauritius	Annually or after major changes	—	source	View →
Registration as data controller or processor	Mauritius	Certificate valid 3 years; renewal application no later than 3 months before expiry	—	source	View →
Freezing and reporting assets of UN-designated parties	Mauritius	Immediately: without delay and not later than 24 hours (s. 2)	—	source	View →
Declaration of assets by public officials	Mauritius	Within 30 days of taking office; every 5 years for certain officers	—	source	View →
Written statement of particulars of employment	Mauritius	For workers engaged for more than one month	—	source	View →
Monthly payment of remuneration and payslips	Mauritius	Monthly	—	source	View →
Lawful basis, privacy notice and data subject rights	Mexico	At collection and on request	—	source	View →
Notify data subjects of security breaches	Mexico	Immediately (no fixed period stated)	—	source	View →
Adopt an integrity policy (weighed in corporate liability)	Mexico	—	—	source	View →
Lawful basis, notice and data subject rights	Moldova	Ongoing	—	source	View →
Personal data breach notification	Moldova	Within 72 hours of becoming aware, where possible	—	source	View →
Whistleblowing channel and protection from retaliation	Moldova	Ongoing	—	source	View →
Lawful basis, transparency notice and data subject rights	Monaco	Ongoing; responses generally within one month (art. 10)	—	source	View →
Personal data breach notification	Monaco	As soon as possible, if possible within 72 hours of becoming aware	—	source	View →
Notice periods for ending an employment contract	Monaco	Notice 1 to 3 months depending on service	—	source	View →
Lawful basis, consent and data subject rights	Mongolia	—	—	source	View →
Personal data breach notification	Mongolia	Immediately (shortest possible duration; no fixed deadline)	—	source	View →
Cyber-incident notification	Mongolia	Immediately	—	source	View →
Set up an internal whistleblowing channel	Montenegro	Acknowledge within 7 days; outcome within 45 days	—	source	View →
Cybersecurity incident declaration to the national authority	Morocco	As soon as the entity becomes aware (Art. 8); without delay (Art. 30)	—	source	View →
Reporting channel and protection for corruption whistleblowers	Morocco	Ongoing	—	source	View →
Data subject notice, consent and rights	Morocco	Ongoing	—	source	View →
Virtual asset service provider licensing	Namibia	Before offering virtual asset services	—	source	View →
Travel-rule information for virtual asset transfers	Namibia	With each virtual asset transfer	—	source	View →
Report gratification offers to the Anti-Corruption Commission	Namibia	On receiving or soliciting gratification	—	source	View →
No prejudice to employees for disclosing information	Namibia	—	—	source	View →
Nominated officer and beneficial ownership information	Nauru	Notify appointment within 30 days; keep details 7 years	—	source	View →

Date	Entity	Country	Action	Penalty	Source
13 OCT 2026	Bank of America, N.A.	United States	Settlement	US$11,662,930	source
9 OCT 2026	Pegasus Worldwide Logistics	United States	Settlement	US$175,015	source
10 SEP 2026	An Individual	United States	Settlement	US$1,427,230	source
2 SEP 2026	Citibank, N.A., London Branch	United Kingdom	Monetary Penalty	£4,732,830.58	source
19 AUG 2026	KDDI株式会社 (KDDI Corporation)	Japan	Formal Reprimand	—	source
12 AUG 2026	Rice Lake Weighing Systems, Inc.	United States	Settlement	US$60,764	source
21 JUL 2026	EXTIA	France	Monetary Penalty	€300,000	source
21 JUL 2026	Hôpital Privé de la Loire	France	Monetary Penalty · Remedial Direction	€500,000	source
17 JUN 2026	Sabre Global Technologies Limited	United Kingdom	Monetary Penalty	£1,000,920.59	source
10 JUN 2026	Unnamed data controller (savings finance company; not named in the published summary), Board decision 2026/1183	Türkiye	Monetary Penalty	TRY 1,000,000	source
1 JUN 2026	FTI Consulting, Inc.	United States	Settlement	US$1,050,000	source
26 MAY 2026	IQVIA OPERATIONS FRANCE	France	Monetary Penalty · Remedial Direction	€5,000,000	source
22 MAY 2026	Central Johannesburg TVET College	South Africa	Remedial Direction	—	source
19 MAY 2026	Deutsche Bank AG London Branch	United Kingdom	Monetary Penalty	£165,000	source
18 MAY 2026	Adani Enterprises Limited	United States	Settlement	US$275,000,000	source
29 APR 2026	Blouberg Local Municipality	South Africa	Monetary Penalty	ZAR 250,000≈ US$15,274	source
17 APR 2026	Cream della Cream Switzerland GmbH and Philipp Plein International AG	Switzerland	Remedial Direction	—	source
30 MAR 2026	Apple Distribution International Limited	United Kingdom	Monetary Penalty	£390,000	source
17 MAR 2026	TradeStation Securities, Inc.	United States	Settlement	US$1,110,661	source
25 FEB 2026	埼玉県所沢市 (Tokorozawa City, Saitama Prefecture)	Japan	Formal Reprimand	—	source
25 FEB 2026	An Individual	United States	Settlement	US$3,777,000	source
12 FEB 2026	IMG Academy, LLC	United States	Settlement	US$1,720,000	source
26 JAN 2026	Bank of Scotland PLC	United Kingdom	Monetary Penalty	£160,000	source
22 JAN 2026	FRANCE TRAVAIL	France	Monetary Penalty · Remedial Direction	€5,000,000	source
8 JAN 2026	FREE	France	Monetary Penalty · Remedial Direction	€15,000,000	source

• US sanctions bill targets Russian energy sector under Graham legislation 3 Oct 2026