Healthcare & Pharma — regulation across countries

Regulator	Country	Official site
DFAT Department of Foreign Affairs and Trade	Australia	source
OAIC Office of the Australian Information Commissioner	Australia	source
ANPD Autoridade Nacional de Proteção de Dados	Brazil	source
OPC Office of the Privacy Commissioner of Canada	Canada	source
CAC Cyberspace Administration of China	China	source
CNIL Commission nationale de l'informatique et des libertés	France	source
BfDI Federal Commissioner for Data Protection and Freedom of Information	Germany	source
DPBI Data Protection Board of India	India	source
PPC Personal Information Protection Commission	Japan	source
MACC Malaysian Anti-Corruption Commission	Malaysia	—
PDPC-MY Personal Data Protection Commissioner	Malaysia	source
RMCD Royal Malaysian Customs Department	Malaysia	source
AP Autoriteit Persoonsgegevens	Netherlands	source
NDPC Nigeria Data Protection Commission	Nigeria	source
SDAIA Saudi Data and AI Authority	Saudi Arabia	source
PDPC Personal Data Protection Commission	Singapore	source
IR Information Regulator	South Africa	source
OFSI Office of Financial Sanctions Implementation	United Kingdom	source
OFAC Office of Foreign Assets Control	United States	source
Applies across all sectors
MoLSA Ministry of Labour and Social Affairs	Afghanistan	source
IDPC Commissioner for the Right to Information and Protection of Personal Data (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale)	Albania	source
AIF Financial Intelligence Agency (Agjencia e Inteligjencës Financiare)	Albania	source
QKB National Business Centre (Qendra Kombëtare e Biznesit)	Albania	source
ISHPSHSH State Labour and Social Services Inspectorate (Inspektorati Shtetëror i Punës dhe Shërbimeve Shoqërore)	Albania	source
CTRF Cellule de Traitement du Renseignement Financier (Financial Intelligence Processing Unit)	Algeria	—
HATPLC Haute autorité de transparence, de prévention et de lutte contre la corruption (High Authority for Transparency, Prevention and Combating of Corruption)	Algeria	source
MTESS Ministère du Travail, de l'Emploi et de la Sécurité Sociale (Ministry of Labour, Employment and Social Security)	Algeria	source
APDA Agència Andorrana de Protecció de Dades	Andorra	source
ANC-AD Agència Nacional de Ciberseguretat d'Andorra	Andorra	source
UIF Unidade de Informação Financeira	Angola	source
Integrity Commission Integrity Commission	Antigua and Barbuda	—
AAIP Agencia de Acceso a la Información Pública	Argentina	source
OA Oficina Anticorrupción	Argentina	source
UIF Unidad de Información Financiera	Argentina	source
Anti-Corruption Committee of the Republic of Armenia Anti-Corruption Committee of the Republic of Armenia	Armenia	source
Corruption Prevention Commission Corruption Prevention Commission	Armenia	source
FMC Financial Monitoring Center	Armenia	source
ACSC Australian Cyber Security Centre	Australia	source
ATO Australian Taxation Office	Australia	source
NACC National Anti-Corruption Commission	Australia	source
Arbeitsinspektion (Zentral-Arbeitsinspektorat and Arbeitsinspektorate) Arbeitsinspektion (Zentral-Arbeitsinspektorat and Arbeitsinspektorate)	Austria	source
BCS Bundesamt für Cybersicherheit	Austria	source
BAK Bundesamt zur Korruptionsprävention und Korruptionsbekämpfung	Austria	source
DSB Datenschutzbehörde (Austrian Data Protection Authority)	Austria	source
Financial Monitoring Service of the Republic of Azerbaijan Financial Monitoring Service of the Republic of Azerbaijan	Azerbaijan	source
Ministry of Labour and Social Protection of Population of the Republic of Azerbaijan Ministry of Labour and Social Protection of Population of the Republic of Azerbaijan	Azerbaijan	source
State Labour Inspection Service State Labour Inspection Service	Azerbaijan	source
LMRA Labour Market Regulatory Authority	Bahrain	source
NCSC National Cyber Security Center	Bahrain	source
BGD e-GOV CIRT BGD e-GOV CIRT	Bangladesh	source
Ministry of Labour and Social Protection of the Republic of Belarus Ministry of Labour and Social Protection of the Republic of Belarus	Belarus	source
CCB Centre for Cybersecurity Belgium	Belgium	source
Federaal Ombudsman / Médiateur fédéral (Federal Ombudsman) — Centre for Integrity Federaal Ombudsman / Médiateur fédéral (Federal Ombudsman) — Centre for Integrity	Belgium	source
FPS Employment Federal Public Service Employment, Labour and Social Dialogue (FPS Employment)	Belgium	source
APD-GBA Gegevensbeschermingsautoriteit / Autorité de protection des données (Data Protection Authority)	Belgium	source
OCRC Office central pour la répression de la corruption (OCRC) of the Federal Judicial Police (Central Office for the Repression of Corruption)	Belgium	source
FIU Financial Intelligence Unit	Belize	source
CENTIF Cellule Nationale de Traitement des Informations Financières du Bénin (National Financial Information Processing Unit)	Benin	source
ACC Anti-Corruption Commission of Bhutan	Bhutan	source
BtCIRT Bhutan Computer Incident Response Team (Government Technology Agency)	Bhutan	source
UIF Unidad de Investigaciones Financieras	Bolivia	source
APIK Agency for Prevention of Corruption and Coordination of the Fight against Corruption (Agencija za prevenciju korupcije i koordinaciju borbe protiv korupcije)	Bosnia and Herzegovina	source
FUZIP Federal Administration for Inspection Affairs (Federalna uprava za inspekcijske poslove)	Bosnia and Herzegovina	source
Personal Data Protection Agency in Bosnia and Herzegovina (Agencija za zaštitu ličnih podataka u Bosni i Hercegovini) Personal Data Protection Agency in Bosnia and Herzegovina (Agencija za zaštitu ličnih podataka u Bosni i Hercegovini)	Bosnia and Herzegovina	source
CGU Controladoria-Geral da União	Brazil	source
GSI/PR Gabinete de Segurança Institucional da Presidência da República	Brazil	source
MTE Ministério do Trabalho e Emprego	Brazil	source
ACB Anti-Corruption Bureau	Brunei	source
CSB Cyber Security Brunei	Brunei	source
Дирекция „Финансово разузнаване“ на Държавна агенция „Национална сигурност“ (Financial Intelligence Directorate, State Agency for National Security) Дирекция „Финансово разузнаване“ на Държавна агенция „Национална сигурност“ (Financial Intelligence Directorate, State Agency for National Security)	Bulgaria	source
Изпълнителна агенция „Главна инспекция по труда“ (Executive Agency General Labour Inspectorate) Изпълнителна агенция „Главна инспекция по труда“ (Executive Agency General Labour Inspectorate)	Bulgaria	—
КЗЛД Комисия за защита на личните данни (Commission for Personal Data Protection)	Bulgaria	source
МТСП Министерство на труда и социалната политика (Ministry of Labour and Social Policy)	Bulgaria	source
ASCE-LC Autorité supérieure de contrôle d'État et de lutte contre la corruption (Supreme State Audit and Anti-Corruption Authority)	Burkina Faso	source
CNRF Cellule Nationale de Renseignement Financier (National Financial Intelligence Unit)	Burundi	source
CNPD Comissão Nacional de Proteção de Dados	Cabo Verde	source
CPC Conselho da Prevenção da Corrupção	Cabo Verde	—
ANIF Agence Nationale d'Investigation Financière (National Agency for Financial Investigation)	Cameroon	source
CONAC Commission Nationale Anti-Corruption (National Anti-Corruption Commission)	Cameroon	source
Corporations Canada Corporations Canada	Canada	source
ESDC Employment and Social Development Canada - Labour Program (Labour Standards Program)	Canada	source
PSIC Office of the Public Sector Integrity Commissioner of Canada	Canada	source
ANCI Agencia Nacional de Ciberseguridad	Chile	source
Ministerio Público (Fiscalía de Chile) Ministerio Público (Fiscalía de Chile)	Chile	source
Procuraduría General de la Nación Procuraduría General de la Nación	Colombia	source
SIC Superintendencia de Industria y Comercio	Colombia	source
UIAF Unidad de Información y Análisis Financiero	Colombia	source
Inspection du Travail et des Lois Sociales Inspection du Travail et des Lois Sociales	Comoros	—
PEP Procuraduría de la Ética Pública (Procuraduría General de la República)	Costa Rica	source
CENTIF Cellule Nationale de Traitement des Informations Financières	Côte d'Ivoire	source
HABG Haute Autorité pour la Bonne Gouvernance	Côte d'Ivoire	source
AZOP Agencija za zaštitu osobnih podataka (Personal Data Protection Agency)	Croatia	source
Državni inspektorat (State Inspectorate) Državni inspektorat (State Inspectorate)	Croatia	source
CERT Nacionalni CERT (National CERT, operated by CARNET)	Croatia	source
Povjerenstvo za odlučivanje o sukobu interesa (Commission for Resolving Conflicts of Interest) Povjerenstvo za odlučivanje o sukobu interesa (Commission for Resolving Conflicts of Interest)	Croatia	source
Pučki pravobranitelj (Ombudsman) Pučki pravobranitelj (Ombudsman)	Croatia	source
SOA Sigurnosno-obavještajna agencija (Security and Intelligence Agency)	Croatia	source
USKOK Ured za suzbijanje korupcije i organiziranog kriminaliteta (Office for the Suppression of Corruption and Organised Crime)	Croatia	source
Ministerstvo spravedlnosti ČR (Ministry of Justice of the Czech Republic) Ministerstvo spravedlnosti ČR (Ministry of Justice of the Czech Republic)	Czechia	source
SÚIP Státní úřad inspekce práce (State Labour Inspection Office)	Czechia	source

Law or regulation	Type	Country	Year	Source
Applies across all sectors
Decreto nº 11.129, de 11 de julho de 2022 (Decree 11,129/2022 regulating Law 12,846/2013)	Regulation	Brazil	2022	source
Lei nº 13.974, de 7 de janeiro de 2020 (Law 13,974/2020 on the Financial Activities Control Council – Coaf)	Act	Brazil	2020	source
Lei nº 14.063, de 23 de setembro de 2020 (Law 14,063/2020 on electronic signatures in interactions with public bodies, in acts of private entities and in health matters)	Act	Brazil	2020	source
Lei nº 13.608, de 10 de janeiro de 2018 (Law 13,608/2018 on the crime-reporting service and whistleblower protection)	Act	Brazil	2018	source
Lei nº 12.846/2013 – Lei Anticorrupção (Law 12,846/2013 – Clean Company Act)	Act	Brazil	2013	source
Lei nº 12.737, de 30 de novembro de 2012 (Law 12,737/2012 on the criminal classification of computer crimes)	Act	Brazil	2012	source
Medida Provisória nº 2.200-2, de 24 de agosto de 2001 (Provisional Measure 2,200-2/2001 establishing ICP-Brasil, the Brazilian Public Key Infrastructure)	Act	Brazil	2001	source
Código Penal (Decreto-Lei nº 2.848, de 7 de dezembro de 1940) (Penal Code)	Act	Brazil	1940	source
Cybersecurity Act (Chapter 272)	Act	Brunei	2023	source
Правилник за прилагане на Закона за мерките срещу изпирането на пари (Rules for Implementing the Measures Against Money Laundering Act)	Regulation	Bulgaria	2018	source
Закон за инспектиране на труда (Law on Labour Inspection)	Act	Bulgaria	2008	source
Loi n°004-2015/CNT du 3 mars 2015 portant prévention et répression de la corruption au Burkina Faso, modifiée par la loi n°033-2018/AN du 26 juillet 2018 (Law No. 004-2015/CNT on the prevention and repression of corruption, as amended)	Act	Burkina Faso	2015	source
Loi n°028-2008/AN du 13 mai 2008 portant Code du travail au Burkina Faso (Law No. 028-2008/AN on the Labour Code)	Act	Burkina Faso	2008	source
Décret n° 100/044 du 16 mars 2020 portant création, missions, organisation et fonctionnement de la Cellule Nationale de Renseignement Financier (Decree n° 100/044 on the creation, missions, organisation and functioning of the CNRF)	Regulation	Burundi	2020	source
Loi n° 1/02 du 4 février 2008 relative à la lutte contre le blanchiment de capitaux et le financement du terrorisme (Law n° 1/02 of 4 February 2008 on the fight against money laundering and terrorism financing)	Act	Burundi	2008	source
Loi n° 1/12 du 18 avril 2006 portant mesures de prévention et de répression de la corruption et des infractions connexes (Act n° 1/12 of 18 April 2006 providing measures for prevention and repression of corruption and related offences)	Act	Burundi	2006	source
Lei n.º 121/IX/2021, de 17 de março — Segunda alteração ao regime jurídico geral de proteção de dados pessoais (Law 121/IX/2021, second amendment to the General Legal Regime for the Protection of Personal Data)	Act	Cabo Verde	2021	source
Lei n.º 77/IX/2020, de 23 de março — Cria o Conselho da Prevenção da Corrupção (Law 77/IX/2020 creating the Corruption Prevention Council)	Act	Cabo Verde	2020	source
Lei n.º 41/VIII/2013, de 17 de setembro — Altera a Lei n.º 133/V/2001, Regime jurídico geral de proteção de dados pessoais das pessoas singulares (Law 41/VIII/2013 amending the General Legal Regime for the Protection of Personal Data)	Act	Cabo Verde	2013	source
Draft Law on Personal Data Protection (final version, 23 June 2025)	Act	Cambodia	2025	source
Loi n°2010/012 du 21 décembre 2010 relative à la cybersécurité et la cybercriminalité au Cameroun (Law No. 2010/012 on cybersecurity and cybercrime in Cameroon)	Act	Cameroon	2010	source
Loi N°2010/021 du 21 décembre 2010 régissant le commerce électronique au Cameroun (Law No. 2010/021 governing electronic commerce in Cameroon)	Act	Cameroon	2010	source
Loi n° 92/007 du 14 août 1992 portant Code du Travail (Act No. 92/007 of 14 August 1992 establishing the Labour Code)	Act	Cameroon	1992	source
Fighting Against Forced Labour and Child Labour in Supply Chains Act	Act	Canada	2023	source
Public Servants Disclosure Protection Act	Act	Canada	2005	source
Secure Electronic Signature Regulations	Regulation	Canada	2005	source
Corruption of Foreign Public Officials Act	Act	Canada	1998	source
Canada Labour Code	Act	Canada	1985	source
Canada Business Corporations Act	Act	Canada	1985	source
Act respecting the protection of personal information in the private sector	Act	Canada	—	source
Loi N°038/PR/96 du 11 décembre 1996 portant Code du travail (Law No. 038/PR/96 of 11 December 1996 on the Labour Code)	Act	Chad	1996	source
Ley N° 21.459, que establece normas sobre delitos informáticos, deroga la Ley N° 19.223 y modifica otros cuerpos legales con el objeto de adecuarlos al Convenio de Budapest	Act	Chile	2022	source
Ley N° 20.393, que establece la responsabilidad penal de las personas jurídicas en los delitos que indica	Act	Chile	2009	source
Ley N° 20.205, que protege al funcionario que denuncia irregularidades y faltas al principio de probidad (Law 20,205 protecting the official who reports irregularities and breaches of probity)	Act	Chile	2007	source
Ley N° 19.913, que crea la Unidad de Análisis Financiero y modifica diversas disposiciones en materia de lavado y blanqueo de activos	Act	Chile	2003	source
大型个人信息处理者个人信息保护规定（征求意见稿） (Regulations on Personal Information Protection of Large Personal Information Processors, Draft for Comment)	Regulation	China	2026	source
国家网络安全事件报告管理办法 (National Cybersecurity Incident Reporting Management Measures)	Regulation	China	2025	source
中华人民共和国监察法（2024修正） (Supervision Law of the People's Republic of China, 2024 amendment)	Act	China	2024	source
中华人民共和国电子签名法（2019年修正） (Electronic Signature Law of the People's Republic of China, 2019 amendment)	Act	China	2019	source
Decreto 1122 de 2024, Programas de Transparencia y Ética Pública (Decree 1122 of 2024 on public transparency and ethics programmes)	Regulation	Colombia	2024	source
Ley 2195 de 2022, medidas en materia de transparencia, prevención y lucha contra la corrupción (Law 2195 of 2022 on transparency, prevention and fight against corruption)	Act	Colombia	2022	source
Ley 1778 de 2016, responsabilidad de las personas jurídicas por actos de corrupción transnacional (Law 1778 of 2016 on liability of legal entities for transnational corruption)	Act	Colombia	2016	source
Ley Estatutaria 1581 de 2012, disposiciones generales para la protección de datos personales (Statutory Law 1581 of 2012, general provisions for the protection of personal data)	Act	Colombia	2012	source
Ley 1273 de 2009, protección de la información y de los datos (Law 1273 of 2009 on protection of information and data)	Act	Colombia	2009	source
Ley 1121 de 2006, normas para la prevención, detección, investigación y sanción de la financiación del terrorismo (Law 1121 of 2006 on preventing, detecting, investigating and punishing terrorist financing)	Act	Colombia	2006	source
Ley 526 de 1999, por medio de la cual se crea la Unidad de Información y Análisis Financiero (Law 526 of 1999 creating the Financial Information and Analysis Unit)	Act	Colombia	1999	source
Loi n°12-008/AU du 28 juin 2012 relative à la lutte contre le blanchiment d'argent et le financement du terrorisme (Law 12-008/AU of 28 June 2012 on Combating Money Laundering and the Financing of Terrorism)	Act	Comoros	2012	source
Code du travail 2012 (Loi n°12-12/AU modifiant et complétant la loi n°84-108/PR portant Code du travail) (Labour Code, Law 12-12/AU amending Law 84-108/PR)	Act	Comoros	2012	source
Ley 8968 de Protección de la persona frente al tratamiento de sus datos personales (Law 8968 on the protection of individuals regarding the processing of personal data)	Act	Costa Rica	2011	source
Loi n°2018-570 du 13 juin 2018 relative à la protection des témoins, victimes, dénonciateurs, experts et autres personnes concernées (Law No. 2018-570 on the protection of witnesses, victims, whistleblowers, experts and other persons concerned)	Act	Côte d'Ivoire	2018	source
Zakon o kibernetičkoj sigurnosti (Cybersecurity Act)	Act	Croatia	2024	source
Zakon o zaštiti prijavitelja nepravilnosti (Whistleblower Protection Act)	Act	Croatia	2022	source
Zakon o provedbi Opće uredbe o zaštiti podataka (Act on the Implementation of the General Data Protection Regulation)	Act	Croatia	2018	source
Zakon o provedbi Uredbe (EU) br. 910/2014 o elektroničkoj identifikaciji i uslugama povjerenja za elektroničke transakcije na unutarnjem tržištu (Act implementing Regulation (EU) No 910/2014 on electronic identification and trust services)	Act	Croatia	2017	source
Resolución 58 de 2022 del Ministerio de Comunicaciones — Reglamento para la Seguridad y Protección de los Datos Personales en Soporte Electrónico (Regulation on the Security and Protection of Personal Data in Electronic Form)	Regulation	Cuba	2022	source
Ley 158 de la Contraloría General de la República de Cuba y del sistema de control superior de los fondos públicos y de la gestión administrativa (Law 158 on the Comptroller General of the Republic and the system of higher control of public funds and administrative management)	Act	Cuba	2022	source
Protection of Persons Who Report Breaches of Union and National Law Law of 2022 (Ο περί της Προστασίας Προσώπων που Αναφέρουν Παραβάσεις του Ενωσιακού και Εθνικού Δικαίου Νόμος του 2022, 6(I)/2022)	Act	Cyprus	2022	source
Establishment and Operation of the Independent Authority Against Corruption Law of 2022 (Ο περί της Σύστασης και Λειτουργίας της Ανεξάρτητης Αρχής κατά της Διαφθοράς Νόμος του 2022, 19(I)/2022)	Act	Cyprus	2022	source
Establishment of the Labour Inspection Service in the Ministry of Labour, Welfare and Social Insurance Law of 2020 (Ο περί της Σύστασης Υπηρεσίας Επιθεωρήσεων στο Υπουργείο Εργασίας, Προνοίας και Κοινωνικών Ασφαλίσεων Νόμος του 2020, 88(I)/2020)	Act	Cyprus	2020	source
Protection of Natural Persons with regard to the Processing of Personal Data and on the Free Movement of such Data Law of 2018 (Ο περί της Προστασίας των Φυσικών Προσώπων Έναντι της Επεξεργασίας των Δεδομένων Προσωπικού Χαρακτήρα και της Ελεύθερης Κυκλοφορίας των Δεδομένων αυτών Νόμος του 2018, 125(I)/2018)	Act	Cyprus	2018	source
Attacks Against Information Systems Law of 2015 (Ο περί Επιθέσεων κατά Συστημάτων Πληροφοριών Νόμος του 2015, 147(I)/2015)	Act	Cyprus	2015	source
Termination of Employment Law of 1967 (Ο περί Τερματισμού Απασχολήσεως Νόμος του 1967, 24/1967)	Act	Cyprus	1967	source
Zákon č. 171/2023 Sb., o ochraně oznamovatelů (Act No. 171/2023 Coll. on the Protection of Whistleblowers)	Act	Czechia	2023	source
Act of 12 March 2019 on personal data processing (Act No. 110/2019 Coll.)	Act	Czechia	2019	source
Loi n° 16/010 du 15 juillet 2016 modifiant et complétant la loi n° 015-2002 portant Code du travail (Law 16/010 amending the Labour Code)	Act	Democratic Republic of the Congo	2016	source
Regulation (EU) 2016/679 (General Data Protection Regulation)	Regulation	Denmark	2016	source
Loi n°106/AN/24/9ème L relative à la lutte contre le blanchiment des capitaux, le financement du terrorisme et la prolifération des armes de destruction massive (Law 106/AN/24/9th L on Combating Money Laundering, Terrorist Financing and Proliferation of Weapons of Mass Destruction)	Act	Djibouti	2024	source
Loi n°104/AN/24/9ème L modifiant la Loi n°110/AN/11/6ème L relative à la lutte contre le financement du terrorisme (Law 104/AN/24/9th L amending Law 110/AN/11/6th L on Combating the Financing of Terrorism)	Act	Djibouti	2024	source
Décret n°2024-314/PR/MI portant application de la loi n°106/AN/24/9ème L relative à la lutte contre le blanchiment des capitaux, le financement du terrorisme et la prolifération des armes de destruction massive (Decree 2024-314 Implementing Law 106/AN/24/9th L)	Regulation	Djibouti	2024	source
Loi n°103/AN/24/9ème L relative à la prévention et à la lutte contre la corruption et les infractions assimilées (Law 103/AN/24/9th L on the Prevention of and Fight against Corruption and Related Offences)	Act	Djibouti	2024	source
Loi n°133/AN/05/5ème L du 28 janvier 2006 portant Code du Travail (Law 133/AN/05/5th L of 28 January 2006, Labour Code)	Act	Djibouti	2006	source
Ley No. 172-13 sobre la Protección Integral de los Datos Personales (Law 172-13 on Comprehensive Protection of Personal Data)	Act	Dominican Republic	2013	source
Ley No. 53-07 sobre Crímenes y Delitos de Alta Tecnología (Law 53-07 on High-Technology Crimes and Offences)	Act	Dominican Republic	2007	source
Ley No. 126-02 sobre Comercio Electrónico, Documentos y Firmas Digitales (Law 126-02 concerning Electronic Commerce, Documents, and Digital Signatures)	Act	Dominican Republic	2002	source
Resolución SPDP-SPD-2025-0022-R - Reglamento para la aplicación de la metodología para el cálculo de las multas en el régimen administrativo sancionatorio de la Superintendencia de Protección de Datos Personales (Regulation applying the methodology for calculating fines in the administrative sanctions regime of the Data Protection Superintendency)	Regulation	Ecuador	2025	source
Ley Orgánica de Protección de Datos Personales (Organic Law on Personal Data Protection)	Act	Ecuador	2021	source
Law No. 14 of 2025 promulgating the Labour Law	Act	Egypt	2025	source
Social Insurance and Pensions Law No. 148 of 2019	Act	Egypt	2019	source
Law No. 175 of 2018 on Anti-Cyber and Information Technology Crimes	Act	Egypt	2018	source
Law No. 181 of 2018 on Consumer Protection	Act	Egypt	2018	source
Law No. 207 of 2017 amending certain provisions of Law No. 54 of 1964 on the Administrative Control Authority	Act	Egypt	2017	source
Anti-Terrorism Law No. 94 of 2015	Act	Egypt	2015	source
Law No. 8 of 2015 on the Regulation of Lists of Terrorist Entities and Terrorists	Act	Egypt	2015	source
Decree of the Minister of Communications and Information Technology No. 109 of 2005 (Executive Regulations of Law No. 15 of 2004)	Regulation	Egypt	2005	source
Law No. 15 of 2004 on E-signature and Establishment of the Information Technology Industry Development Authority (ITIDA)	Act	Egypt	2004	source
Executive Regulations of the Anti-Money Laundering Law (Prime Minister Decree No. 951 of 2003, as updated 2023)	Regulation	Egypt	2003	source
Law No. 54 of 1964 on the Administrative Control Authority	Act	Egypt	1964	source
Eswatini Cash Threshold Reporting Guideline (September 2024)	Guideline	Eswatini	2024	source
Data Protection Act, 2022 (Act No. 5 of 2022)	Act	Eswatini	2022	source
Revised Federal Ethics and Anti-Corruption Commission Establishment Proclamation No. 1236/2021	Act	Ethiopia	2021	source
Labour Proclamation No. 1156/2019	Act	Ethiopia	2019	source
Computer Crime Proclamation No. 958/2016	Act	Ethiopia	2016	source
Cybercrime Act 2021	Act	Fiji	2021	source
Laki Euroopan unionin ja kansallisen oikeuden rikkomisesta ilmoittavien henkilöiden suojelusta 1171/2022 (Act on the Protection of Persons Reporting Breaches of European Union and National Law)	Act	Finland	2022	source
Tietosuojalaki 1050/2018 (Data Protection Act)	Act	Finland	2018	source
Projet de loi relatif à la résilience des infrastructures critiques et au renforcement de la cybersécurité (Bill on the resilience of critical infrastructure and strengthening of cybersecurity, transposing NIS 2)	Act	France	2024	source
Regulation (EU) 2016/679 (General Data Protection Regulation)	Regulation	France	2016	source
Code du travail (Labour Code)	Act	France	—	source
Loi N°025/2021 du 28 décembre 2021 portant réglementation des transactions électroniques en République gabonaise (Law No. 025/2021 regulating electronic transactions)	Act	Gabon	2021	source
The Gambia Anti-Corruption Commission Act, 2012	Act	Gambia	2012	source

Obligation	Country	Nature	Verified	Source	Detail
Applies across all sectors
Internal whistleblowing reporting procedure	Netherlands	Acknowledgement within 7 days; feedback within 3 months	—	source	View →
Occupational risk inventory and evaluation	Netherlands	Ongoing	—	source	View →
No retaliation against employees who make protected disclosures	New Zealand	Ongoing	—	source	View →
Deal with each other in good faith in the employment relationship	New Zealand	Ongoing	—	source	View →
Lawful basis, notice and data subject rights	Niger	—	—	source	View →
Personal data breach notification to the HAPDP	Niger	Without delay (controller to HAPDP); processor to controller within 72 hours	—	source	View →
Freeze assets of designated persons and report within 24 hours	Nigeria	Immediately, no later than 24 hours	—	source	View →
Data privacy impact assessment for high-risk processing	Nigeria	Before processing begins	—	source	View →
Report persons with significant control	Nigeria	PSC to company within 7 days; company to CAC within one month	—	source	View →
Written terms of employment and notice of termination	Nigeria	Within 3 months of starting work	—	source	View →
Beneficial ownership register entry	North Macedonia	Within 15 days of registration and of any change	—	source	View →
Lawful basis, notice and data subject rights	North Macedonia	—	—	source	View →
Personal data breach notification	North Macedonia	Immediately and no later than 72 hours after becoming aware	—	source	View →
Whistleblowing channel and protection	North Macedonia	Reply to the whistleblower within 15 days	—	source	View →
Report significant incidents under the Digital Security Act	Norway	Without undue delay (sections 8 and 11); NSM states 24 hours for essential-service providers	—	source	View →
Internal whistleblowing routines	Norway	—	—	source	View →
Register beneficial owners	Norway	Within 14 days of registration or of a change	—	source	View →
Consent, notice and data subject rights	Oman	—	—	source	View →
Protection of workers who complain, and grievance system	Oman	—	—	source	View →
Protection of whistleblowers from victimisation	Pakistan	Ongoing	—	source	View →
Cash courier declaration of US$10,000 or more	Palau	On entering or leaving Palau	—	source	View →
Lawful basis, privacy notice and data subject rights	Peru	—	—	source	View →
Lawful basis for processing, privacy notice and data subject rights	Philippines	Ongoing	—	source	View →
Notify the President of UODO of the appointment of a data protection officer	Poland	Within 14 days of designation or change	—	source	View →
Personal data breach notification to the President of UODO	Poland	Without undue delay and, where feasible, within 72 hours of becoming aware	—	source	View →
Internal whistleblowing channel and handling of reports	Poland	Acknowledge within 7 days; feedback within 3 months	—	source	View →
Beneficial-owner declaration to the central register (RCBE)	Portugal	Initial and updates within 30 days; annual confirmation by 31 December	—	source	View →
Lawful basis, notice and data subject rights	Portugal	One month from receipt, extendable by two months	—	source	View →
Personal data breach notification to the CNPD	Portugal	Within 72 hours of becoming aware	—	source	View →
Internal whistleblowing channel	Portugal	Acknowledge within 7 days; feedback within 3 months	—	source	View →
Corruption-prevention compliance programme and compliance officer	Portugal	Ongoing; risk plan reviewed every three years	—	source	View →
Cybersecurity incident notification to the competent authority	Portugal	Initial notification within 24 hours; end-of-impact notice within 24 hours; final report within 30 working days	—	source	View →
Personal data breach notification to the QFC Data Protection Office	Qatar	Within 72 hours	—	source	View →
Lawful basis, notice and data subject rights	Republic of the Congo	Ongoing	—	source	View →
Personal data breach notification	Republic of the Congo	Within 72 hours where possible	—	source	View →
Cyber-incident notification to the national security agency	Republic of the Congo	Without delay	—	source	View →
Whistleblower protection and anti-retaliation	Republic of the Congo	Ongoing	—	source	View →
Public-interest whistleblowing channel and follow-up	Romania	Acknowledge within 7 calendar days; feedback within 3 months	—	source	View →
Personal data incident notification to the authorised body	Russia	Within 24 hours (initial notice) and within 72 hours (investigation results)	—	source	View →
Person responsible for organising personal data processing	Russia	Ongoing	—	source	View →
Lawful processing, consent and data subject rights	Rwanda	Ongoing; 30 days for objection and portability requests	—	source	View →
Personal data breach notification	Rwanda	Within 48 hours to the NCSA; report within 72 hours	—	source	View →
Report systems used for cybercrime and cyber threat incidents	Rwanda	On becoming aware	—	source	View →
Anti-corruption prevention mechanisms in public and private institutions	Rwanda	Ongoing	—	source	View →
No dismissal for making a complaint against the employer	Saint Kitts and Nevis	—	—	source	View →
Do not penalise employees for complying with, enforcing or giving evidence under the Labour Act	Saint Lucia	—	—	source	View →
Do not take employment reprisals against a person who complains to the Special Prosecutor	Saint Lucia	—	—	source	View →
Beneficial ownership reporting by companies and trusts	San Marino	—	—	source	View →
Lawful basis, notice and data subject rights	San Marino	—	—	source	View →
Personal data breach notification	San Marino	Within 72 hours of awareness, where feasible	—	source	View →
Confidentiality of persons reporting corruption-related facts	San Marino	—	—	source	View →
Just cause or justified reason for dismissal of permanent staff	San Marino	—	—	source	View →
Lawful basis, information to data subjects and data subject rights	São Tomé and Príncipe	Ongoing	—	source	View →
Appoint a personal data protection officer	Saudi Arabia	Ongoing, in the listed cases	—	source	View →
Lawful basis, notice and data subject rights	Senegal	—	—	source	View →
Notify significant ICT incidents to the competent authority	Serbia	Within 24 hours of learning of the incident	—	source	View →
Lawful basis, notice and data subject rights	Serbia	Ongoing; response within 30 days	—	source	View →
Internal whistleblowing procedure	Serbia	Rules adopted and published; reports acted on within 15 days	—	source	View →
Beneficial ownership register and updates	Seychelles	Within 14 days of a declaration or change	—	source	View →
Lawful basis, notice and data subject rights	Seychelles	Ongoing	—	source	View →
Personal data breach notification	Seychelles	Not later than 72 hours after becoming aware	—	source	View →
Written particulars of employment	Sierra Leone	Within 12 weeks of the start date	—	source	View →
Internal whistleblowing channel	Slovenia	Acknowledge within 7 days; outcome within 3 months	—	source	View →
Prohibition of retaliation against reporting persons	Slovenia	—	—	source	View →
Whistleblowing channel: authorise internal procedures for protected disclosures	South Africa	Ongoing	—	source	View →
Protect employees who report corrupt practices	South Sudan	—	—	source	View →
Declare income, assets and liabilities to the Anti-Corruption Commission	South Sudan	Within 30 days of taking office, then annually by the end of February	—	source	View →
Beneficial ownership declaration to the Central Register	Spain	Within 1 month of formation; updates within 10 days; annual declaration in January	—	source	View →
Notification of security incidents through the reference CSIRT	Spain	Initial notification without undue delay, then intermediate and final (Art. 22)	—	source	View →
Internal whistleblowing channel	Spain	Ongoing; acknowledgement within 7 calendar days; response within 3 months	—	source	View →
Anti-bribery and criminal compliance model	Spain	Ongoing (exemption condition)	—	source	View →
Lawful basis, transparency and data subject rights	Spain	Ongoing	—	source	View →
Personal data breach notification to the AEPD	Spain	Within 72 hours of becoming aware	—	source	View →
Lawful basis, notice and data subject rights	Sri Lanka	Ongoing	—	source	View →
Credit information: customer access, appeal and correction of errors	Sudan	Ongoing; appeals reviewed within 15 days	—	source	View →
Registration with FIU Suriname	Suriname	Within 3 months of starting business (Art. 28)	—	source	View →
Internal reporting channels for employers with 50 or more employees	Sweden	Ongoing	—	source	View →
Cyber incident reporting by essential and important entities	Sweden	Early warning within 24 hours; notification within 24 hours (trust services) or 72 hours (others); final report within one month	—	source	View →
Personal data breach notification to IMY	Sweden	Within 72 hours of becoming aware	—	source	View →
Lawful grounds, information to individuals and data subject rights	Sweden	Ongoing	—	source	View →
Beneficial ownership information held and filed with Bolagsverket	Sweden	At registration or within four weeks; changes without delay	—	source	View →
Information to data subjects and right of access	Switzerland	Ongoing; access requests answered within 30 days (Art. 25 para. 7)	—	source	View →
Notifying the FDPIC of a data security breach	Switzerland	As quickly as possible	—	source	View →
Due diligence and reporting on conflict minerals and child labour	Switzerland	Ongoing	—	source	View →
Prohibition of retaliation against public interest whistleblowers	Taiwan	Ongoing	—	source	View →
Protection of workers who report labour law violations	Taiwan	Authority to notify the worker within 60 days of the complaint	—	source	View →
State protection for persons who help counter corruption	Tajikistan	—	—	source	View →
Lawful basis, notice and data subject rights	Tanzania	Ongoing	—	source	View →
Personal data breach notification	Tanzania	Without any undue delay	—	source	View →
Registration as a data controller or processor	Tanzania	Before processing; renew every 5 years	—	source	View →
Whistleblower disclosure channel and protection	Tanzania	Ongoing	—	source	View →
Written employment contract and particulars; five-year retention	Tanzania	5 years after termination	—	source	View →
Personal data breach notification	Thailand	Within 72 hours of becoming aware, where feasible	—	source	View →
Accept and protect whistleblower reports	Timor-Leste	—	—	source	View →
No dismissal for lodging a complaint with the authorities	Timor-Leste	—	—	source	View →
Lawful basis, notice and data subject rights	Togo	Ongoing	—	source	View →
Personal data breach notification	Tonga	Within 72 hours of becoming aware	—	source	View →
Cyber-incident reporting and annual security audit	Tunisia	Immediately	—	source	View →
Whistleblowing: internal reporting unit in public bodies	Tunisia	—	—	source	View →
Lawful basis, notice and data subject rights	Türkiye	At collection + on request	—	source	View →

Date	Entity	Country	Action	Penalty	Source
13 OCT 2026	Bank of America, N.A.	United States	Settlement	US$11,662,930	source
9 OCT 2026	Pegasus Worldwide Logistics	United States	Settlement	US$175,015	source
10 SEP 2026	An Individual	United States	Settlement	US$1,427,230	source
2 SEP 2026	Citibank, N.A., London Branch	United Kingdom	Monetary Penalty	£4,732,830.58	source
19 AUG 2026	KDDI株式会社 (KDDI Corporation)	Japan	Formal Reprimand	—	source
12 AUG 2026	Rice Lake Weighing Systems, Inc.	United States	Settlement	US$60,764	source
21 JUL 2026	EXTIA	France	Monetary Penalty	€300,000	source
21 JUL 2026	Hôpital Privé de la Loire	France	Monetary Penalty · Remedial Direction	€500,000	source
17 JUN 2026	Sabre Global Technologies Limited	United Kingdom	Monetary Penalty	£1,000,920.59	source
10 JUN 2026	Unnamed data controller (savings finance company; not named in the published summary), Board decision 2026/1183	Türkiye	Monetary Penalty	TRY 1,000,000	source
1 JUN 2026	FTI Consulting, Inc.	United States	Settlement	US$1,050,000	source
26 MAY 2026	IQVIA OPERATIONS FRANCE	France	Monetary Penalty · Remedial Direction	€5,000,000	source
22 MAY 2026	Central Johannesburg TVET College	South Africa	Remedial Direction	—	source
19 MAY 2026	Deutsche Bank AG London Branch	United Kingdom	Monetary Penalty	£165,000	source
18 MAY 2026	Adani Enterprises Limited	United States	Settlement	US$275,000,000	source
29 APR 2026	Blouberg Local Municipality	South Africa	Monetary Penalty	ZAR 250,000≈ US$15,274	source
17 APR 2026	Cream della Cream Switzerland GmbH and Philipp Plein International AG	Switzerland	Remedial Direction	—	source
30 MAR 2026	Apple Distribution International Limited	United Kingdom	Monetary Penalty	£390,000	source
17 MAR 2026	TradeStation Securities, Inc.	United States	Settlement	US$1,110,661	source
25 FEB 2026	埼玉県所沢市 (Tokorozawa City, Saitama Prefecture)	Japan	Formal Reprimand	—	source
25 FEB 2026	An Individual	United States	Settlement	US$3,777,000	source
12 FEB 2026	IMG Academy, LLC	United States	Settlement	US$1,720,000	source
26 JAN 2026	Bank of Scotland PLC	United Kingdom	Monetary Penalty	£160,000	source
22 JAN 2026	FRANCE TRAVAIL	France	Monetary Penalty · Remedial Direction	€5,000,000	source
8 JAN 2026	FREE	France	Monetary Penalty · Remedial Direction	€15,000,000	source

• US sanctions bill targets Russian energy sector under Graham legislation 3 Oct 2026