Data Protection Frameworks Worldwide

In short: Besides the EU GDPR, many countries have their own data protection laws.

In more detail: Anyone operating internationally must check which rules apply.

In Depth

• EU: GDPR, ePrivacy, TDDDG (DE).
• UK: UK GDPR and Data Protection Act 2018.
• USA: no federal law; states such as California (CCPA/CPRA).
• Brazil: LGPD.
• China: PIPL.
• Switzerland: revised DSG since 2023.

For data transfers to the USA there is the EU-US Data Privacy Framework (adequacy decision July 2023); otherwise standard contractual clauses. See GDPR, BDSG.

See also: GDPR (DSGVO), BDSG, TDDDG