The laws, and what they mean in practice

Privacy, AI and cybersecurity laws that shape digital trust work, from the GDPR to every US state privacy law. Each entry says who it applies to, who enforces it and when, in plain words, with the sources. Free for everyone.

Regulations library Regulatory Watch US state map Compare laws

102laws explained

24US states with a privacy law

5coming into force

94in force today

Topic Privacy AI Health Children Biometrics Cybersecurity Breach notification Data brokers Marketing Financial International transfers

Status In force Coming into force Challenged or stayed Clear filters

European Union 3

NIS2

European Union

In force

Cybersecurity risk management, management accountability and staged incident reporting starting with an early warning within 24 hours.

See details Guide in progress

DORA

European Union

In force

ICT risk management, incident reporting, resilience testing and a register of ICT third-party arrangements for the financial sector.

Since Jan 17, 2025

CRA

European Union

In force

Security requirements across the life of hardware and software products, with vulnerability handling and reporting duties.

Since Dec 10, 2024

This library explains laws for practitioners. It is not legal advice, and laws change: check the sources on each page and take advice from counsel before acting.