The laws, and what they mean in practice

Privacy, AI and cybersecurity laws that shape digital trust work, from the GDPR to every US state privacy law. Each entry says who it applies to, who enforces it and when, in plain words, with the sources. Free for everyone.

Regulations library Regulatory Watch US state map Compare laws

102laws explained

24US states with a privacy law

5coming into force

94in force today

Topic Privacy AI Health Children Biometrics Cybersecurity Breach notification Data brokers Marketing Financial International transfers

Status In force Coming into force Challenged or stayed Clear filters

US states 3

SHIELD Act

New York

In force

Broadened New York's breach notification law and requires reasonable administrative, technical and physical safeguards.

Since Mar 21, 2020

201 CMR 17.00

Massachusetts

In force

One of the first prescriptive state security rules: a written information security program, encryption and vendor oversight.

Since Mar 1, 2010

NYDFS Part 500

New York

In force

A detailed cybersecurity program regulation with annual certification, CISO reporting, incident notice within 72 hours and personal liability exposure for certifying executives.

Since Mar 1, 2017 Guide in progress

This library explains laws for practitioners. It is not legal advice, and laws change: check the sources on each page and take advice from counsel before acting.