SN COUNTRY DATA PROTECTION LAW COMMENT 1 All African Countries who are signatories to the Malabo Convention 2014 African Union Convention on Cyber Security and Personal Data Protection The Convention is still open to signature and adoption by AU member countries 2 3 All EU and European Economic Area Countries Algeria 4 Argentina 5 EU- General Data Protection Regulation 2018 Algerian law on the Protection of Individuals in the Processing of Personal Data Personal Data Protection Law 2000 (Law No. 25,326) applies to any person or entity in the country that deals with personal data. Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy Latvia, Lithuania, Luxembourg, Malta, Netherlands Norway, Poland, Portugal, Romania, Serbia Slovakia, Slovenia, Spain, Sweden United Kingdom. Every Country has a Supervisory Authority for the implementation of the GDPR in its domain. Autorité National de Protection des Données à Caractère Personnel Agency for Access to Public Information established pursuant to Decree 746 of 2017 Ministry of Justice and Islamic Affairs serves as Data Protection Authority Autorité de protection des données à caractèrepersonnelles (APDP), Bahrain Personal Data Protection Law 2019 Benin Benin Digital Code Brazil General Data Protection Law 2018 (LGPD) very similar to GDPR. Brazil also has snippets of privacy laws from the Constitution and other statutes such as Consumer Protection Code 1990; Internet Act 2014 etc. The Amended LGPD created the National Data Protection Authority (ANPD). The law would take effect in August 2020 Ghana Data Protection Act, 2012 Data Protection Commission 9 10 Mauritius Mauritius Data Protection Office 11 12 Togo THE DATA PROTECTION ACT 2017 The Protection of Personal Information, Act 4 of 2013 Protection of Personal data The Organic Law no. 2004-63 on Personal Data Protection (Tunisian Law) Private sector is governed by Personal Information Protection and Electronic Documents Act (PIPEDA) 2000 amended in 2008 to include mandatory data breach notification and record-keeping laws. the public sector is governed by the Privacy Act of 1983. 6 7 8 South Africa Tunisia 13 Canada 14 of PIPEDA creates the Office of the Privacy Commissioner of Canada Cape Verde The National data protection authority in Cape Verde is the Comissão Nacional de Proteção de Dados Pessoais ('Data Protection Authority'). China Information Technology – Personal Information Security Specification is the latest law on privacy in China. It came into effect in May 2018 Cyberspace Administration of China (CAC) is the data protection authority Cyprus The Protection of Natural Persons with Regard to the Processing of Personal Data and for the Free Movement of Such Data of 2018. Commission for personal data protection 16 18 Togolese Data Protection Authority The National Authority for Protection Personal Data (DPA) Data Protection Law (Law 133/V/2001 (as amended by Law 41/VIII/2013) and Law 132/V/2001, of 22 January 2001. 15 17 The Information Regulator (DPA) Israel Japan The Privacy Protection Regulations (Data Security), 5777-2017, Act on the Protection of Personal Information (APPI) The Israel Privacy Protection Authority (PPA) Personal Information Protection Commission Japan 44 | P a g e