PrivacyTerrainStructured privacy law intelligence

Editorial workflow

Review queue

Critical

10 jurisdictions need urgent attention.

Elevated

0 jurisdictions have meaningful editorial risk.

Stale or unknown

22 jurisdictions need source freshness follow-up.

PriorityRiskJurisdictionQuality stateConfidenceCompletenessSourcesFreshnessEditorial note
highcriticalADGMsplit-regimemedium55%0 primary / 0 secondaryunknownSeparate free-zone regime and should not be conflated with the UAE federal framework.
highcriticalCanadafederal-splitmedium55%1 primary / 1 secondaryunknownPublic comparison should distinguish PIPEDA from substantially similar provincial private-sector laws and separate public-sector frameworks.
highcriticalChiletransitioning-frameworkmedium45%1 primary / 1 secondaryunknownThe current framework is active, but public comparison should emphasize the jurisdiction's ongoing modernization trajectory.
highcriticalChinacomplex-frameworkmedium60%1 primary / 1 secondaryunknownRequires dedicated treatment of localization, transfer assessments, security review, and interaction with broader Chinese digital regulation.
highcriticalDIFCsplit-regimemedium55%0 primary / 0 secondaryunknownSeparate free-zone regime and should not be conflated with the UAE federal framework.
highcriticalIndiaemerging-frameworkmedium45%1 primary / 1 secondaryunknownImplementation remains partial and rule-dependent, so field-level caution is needed until operational rules and regulator practice mature.
highcriticalMexicofederal-splitmedium55%1 primary / 1 secondaryunknownPublic comparison should distinguish Mexico's private-sector federal regime from separate public-sector transparency and data frameworks.
highcriticalNigeriaemerging-frameworkmedium45%1 primary / 1 secondaryunknownThe national regime is newer and should be reviewed against regulator practice as it stabilizes.
highcriticalUnited Arab Emiratessplit-regimemedium55%1 primary / 1 secondaryunknownFederal UAE should eventually be modeled distinctly from major free-zone regimes such as DIFC and ADGM.
highcriticalUnited Statesfragmented-systemmedium40%0 primary / 0 secondaryunknownModeled as umbrella context rather than a single omnibus law. State-level regimes should be interpreted within this fragmented federal structure.
mediumnormalArgentinaseeded-expandedmedium65%1 primary / 1 secondaryunknownNeeds modernization watch and regulator-practice refinement.
mediumnormalColombiaseeded-expandedmedium65%1 primary / 1 secondaryunknownShould get a tighter pass on registry and enforcement details.
mediumnormalColoradoseeded-expandedmedium65%1 primary / 0 secondaryfreshMajor US state privacy regime with core rights and enforcement structure seeded, but rulemaking and operational nuance still need deeper treatment.
mediumnormalConnecticutseeded-expandedmedium65%1 primary / 0 secondaryfreshImportant US state privacy regime with core rights and enforcement structure seeded, but still part of a broader state-law patchwork requiring additional depth.
mediumnormalIsraelseeded-expandedmedium65%1 primary / 1 secondaryunknownNeeds cleanup around modernization changes and database-law overlays.
mediumnormalJapanseeded-expandedmedium65%1 primary / 1 secondaryunknownStrong base, but transfer and consent nuance should be deepened.
mediumnormalKenyaseeded-expandedmedium65%1 primary / 1 secondaryunknownRequires a more detailed pass on transfer and registration mechanics.
mediumnormalNew Zealandseeded-expandedmedium65%1 primary / 1 secondaryunknownSolid seeded coverage, with moderate enforcement detail still to improve.
mediumnormalSaudi Arabiaseeded-expandedmedium65%1 primary / 1 secondaryunknownNeeds a closer pass on implementing regulations and transfer restrictions.
mediumnormalSingaporeseeded-expandedmedium65%1 primary / 1 secondaryunknownGood baseline, but legitimate interests and business improvement exceptions need more nuance.
mediumnormalSouth Africaseeded-expandedmedium65%1 primary / 1 secondaryunknownNeeds refinement on administrative enforcement and responsible-party mechanics.
mediumnormalSouth Koreaseeded-expandedmedium65%1 primary / 1 secondaryunknownNeeds more precision on recent reforms and sector overlap.
mediumnormalSwitzerlandseeded-expandedmedium65%1 primary / 1 secondaryunknownGood core structure, but public/private split and enforcement nuances should be refined.
mediumnormalTurkeyseeded-expandedmedium65%1 primary / 1 secondaryunknownNeeds a closer pass on transfer derogations, recent amendments, and regulator-driven operational nuance.
mediumnormalVirginiaseeded-expandedmedium65%1 primary / 0 secondaryfreshEarly US state privacy regime with core rights and enforcement structure seeded, but broader operational nuance still needs expansion.
lownormalAustraliareviewed-corehigh85%1 primary / 1 secondaryfreshStrong current baseline with reform watch needed.
lownormalBrazilreviewed-corehigh85%1 primary / 1 secondaryfreshStable seeded coverage with regulator-guidance tracking already modeled.
lownormalCaliforniareviewed-core-subnationalhigh80%1 primary / 1 secondaryfreshLeading US state regime with expanded rights and enforcement field coverage. Public interpretation should still frame it as one subnational layer within a wider US privacy model.
lownormalEuropean Unionreviewed-corehigh85%1 primary / 1 secondaryfreshFlagship benchmark jurisdiction with mature structured coverage. Continue maintaining transfer and enforcement nuance.
lownormalUnited Kingdomreviewed-corehigh85%1 primary / 1 secondaryfreshStrong coverage base. Needs continued tracking of reform and regulator guidance updates.