ANGOLA REGULATION ENFORCING BODIES
As mentioned above, the competent authority for the enforcement of Data Protection Law is the APD...
ARGENTINA REGULATION ENFORCING BODIES
There are several enforcement mechanisms...
AUSTRALIA REGULATION ENFORCING BODIES
The Privacy Commissioner is responsible for the enforcement of the Privacy Act and will investigate an act or...
AUSTRIA REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
BELGIUM REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
BAHRAIN REGULATION ENFORCING BODIES
The Authority can issue orders to stop violations, including emergency orders and fines...
BELARUS REGULATION ENFORCING BODIES
The key authority involved in enforcement of the Law on Information Protection is the Centre...
BERMUDA REGULATION ENFORCING BODIES
Once fully in force, PIPA will make provision for investigations and inquiries by the Privacy Commissioner and for...
BOLIVIA REGULATION ENFORCING BODIES
The competent authority for the enforcement of Data Protection Law is the Personal Data Authority...
BULGARIA REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
BOSNIA AND HERZEGOVINA REGULATION ENFORCING BODIES
The DPA enforces the DP Law. The DPA is authorised and obliged to monitor implementation of the DP Law...
BOTSWANA REGULATION ENFORCING BODIES
As mentioned earlier, the Commission is the competent authority that will be tasked with protection of...
BRAZIL REGULATION ENFORCING BODIES
The LGPD provides for penalties in case of violations its provisions...
BRITISH VIRGIN ISLANDS REGULATION ENFORCING BODIES
The Commission and the BVI courts are responsible for enforcement of violations of the duty of privacy and confidentiality...
BURUNDI REGULATION ENFORCING BODIES
The relevant sector specific agency or regulator is generally authorized to enforce violations of confidentiality requirements...
CROATIA REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
CANADA REGULATION ENFORCING BODIES
Privacy regulatory authorities have an obligation to investigate complaints, as well as the authority to initiate complaints...
CAPE VERDE REGULATION ENFORCING BODIES
Enforcement of the Data Protection Law is done by the data protection authority...
CAYMAN ISLANDS REGULATION ENFORCING BODIES
A breach of the duty of confidentiality may give rise to a claim for, among other remedies, damages and / or an injunction...
CHILE REGULATION ENFORCING BODIES
The data subject has the right to require that the responsible person provide information on...
CHINA REGULATION ENFORCING BODIES
Possible enforcement of, and sanctions for, a data protection breach in the PRC will depend on the specific data...
COLOMBIA REGULATION ENFORCING BODIES
Since privacy and proper maintenance of personal data are fundamental constitutional rights in Colombia...
COSTA RICA REGULATION ENFORCING BODIES
PRODHAB has begun to enforce the obligations established under the Laws. Individuals may file their claims directly with PRODHAB...
CYPRUS REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
CZECH REPUBLIC REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
DENMARK REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
DOMINICAN REPUBLIC REGULATION ENFORCING BODIES
Data subjects have the right to institute habeas data proceedings to obtain information about the data held that refers to the relevant data subject...
ESTONIA REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
EGYPT REGULATION ENFORCING BODIES
As a general rule, civil liability may be raised in connection with violations against the individuals’ right to privacy...
ETHIOPIA REGULATION ENFORCING BODIES
Ethiopian courts are responsible for enforcing data protection and privacy provisions in the law...
FINLAND REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
GHANA REGULATION ENFORCING BODIES
Where the Commission is satisfied that a data controller has contravened or is contravening any of...
FRANCE REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
GERMANY REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
GREECE REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
GIBRALTAR REGULATION ENFORCING BODIES
In Gibraltar, the DPC is responsible for the enforcement of the Act..
GUERNSEY REGULATION ENFORCING BODIES
The Authority and the ODPA are responsible for administering and enforcing the DPL 2017 (Section 61(1)(a) DPL 2017)...
HUNGARY REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
HONDURAS REGULATION ENFORCING BODIES
The Institute for the Access to Public Information may receive complaints about abuses regarding the collection of personal or confidential data...
HONG KONG, SAR REGULATION ENFORCING BODIES
The PCPD is responsible for enforcing the Ordinance. Generally, unless a specific offence applies...
INDIA REGULATION ENFORCING BODIES
Civil penalties of up to €694,450 for failure to protect data including sensitive personal information may be...
ICELAND REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
IRELAND REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
INDONESIA REGULATION ENFORCING BODIES
In Indonesia, the sanctions for breaches of data privacy are found under the relevant legislation and are essentially fines...
IRAN REGULATION ENFORCING BODIES
Iranian courts generally enforce violations through statutorily defined remedies of the applicable law or regulation...
ISRAEL REGULATION ENFORCING BODIES
IPA has the authority and obligation to supervise compliance and enforce the provisions of the PPL and appoint inspectors to carry out those activities...
ITALY REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
JAPAN REGULATION ENFORCING BODIES
If the PPC finds any violation or potential violation of the APPI, the PPC may request the business operator...
JERSEY REGULATION ENFORCING BODIES
In Jersey, the Authority is responsible for the enforcement of the DPJL and DPAJL. Its day-to-day powers are delegated to...
LATVIA REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
KAZAKHSTAN REGULATION ENFORCING BODIES
Generally, all state authorities of Kazakhstan, depending on their competences...
KENYA REGULATION ENFORCING BODIES
The DPC has the duty to ensure the implementation and enforcement of the Act...
KUWAIT REGULATION ENFORCING BODIES
Violations of the E-Commerce Law are punishable by a maximum of three years imprisonment, and fines of no less than...
KYRGYZSTAN REGULATION ENFORCING BODIES
Although the Law on Personal Data has been adopted, there is no enforcement practice of...
LESOTHO REGULATION ENFORCING BODIES
The Commission is responsible for the enforcement of the DP Act...
LITHUANIA REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
MACAU REGULATION ENFORCING BODIES
Violations of the Law are subject to civil liability and administrative and criminal sanctions, including fines and / or imprisonment...
LUXEMBOURG REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
MALTA REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
MADAGASCAR REGULATION ENFORCING BODIES
The CMIL has the power to proceed with verifications of any data processing, and, as the case may be...
MALAYSIA REGULATION ENFORCING BODIES
Under the PDPA, the Commissioner is empowered to implement and enforce the personal data protection laws...
MAURITIUS REGULATION ENFORCING BODIES
The DPA 2017 provides the Commissioner with enforcement authority...
NETHERLANDS REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
MEXICO REGULATION ENFORCING BODIES
Data subjects can enforce their ARCO Rights, when no response is obtained from the data controller via INAI and ultimately the court system...
MOLDOVA REGULATION ENFORCING BODIES
The NCPDP is responsible for the enforcement of the Law on Personal Data Protection. The NCPDP is entitled to...
MONACO REGULATION ENFORCING BODIES
The CCIN and Monegasque Courts are responsible for enforcing the DPL...
MONTENEGRO REGULATION ENFORCING BODIES
The CCIN and Monegasque Courts are responsible for enforcing the DPL...
MOROCCO REGULATION ENFORCING BODIES
The Data Protection National Commission enforces compliance of the DP Law...
MOZAMBIQUE REGULATION ENFORCING BODIES
The Penal Code (Law n.º 35/2014 of December 31) provides for certain computer-related crimes...
NAMIBIA REGULATION ENFORCING BODIES
There is no enforcement mechanism in place...
NEW ZEALAND REGULATION ENFORCING BODIES
In New Zealand, the Privacy Commissioner is responsible for investigating a breach of privacy laws...
NORWAY REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
NIGERIA REGULATION ENFORCING BODIES
A breach of the Regulations is construed as a breach of the NITDA 2007...
NORTH MACEDONIA REGULATION ENFORCING BODIES
The DPA has DP Law enforcement and oversight authority, and may monitor DP Law compliance through...
PAKISTAN REGULATION ENFORCING BODIES
There is no enforcement mechanism. Appropriate relief may be sought through courts of law having jurisdiction in the matter...
POLAND REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
PANAMA REGULATION ENFORCING BODIES
ANTAI, through a Directorate created for this purpose, is empowered to sanction data controllers or...
PARAGUAY REGULATION ENFORCING BODIES
The current legal regime contemplates the following enforcement mechanisms...
PERU REGULATION ENFORCING BODIES
The General Directorate of Sanctions (part of the NDPA) instructs on and resolves...
PHILIPPINES REGULATION ENFORCING BODIES
The National Privacy Commission is responsible for ensuring compliance of the...
QATAR REGULATION ENFORCING BODIES
In Qatar, the MoTC is responsible for the enforcement of the Data Protection Law...
PORTUGAL REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
ROMANIA REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
QATAR – FINANCIAL CENTRE REGULATION ENFORCING BODIES
In the QFC, the ESO oversees the enforcement of the DPL...
RUSSIA REGULATION ENFORCING BODIES
In Russia, the Agency is responsible for the enforcement of the DPA...
SLOVAK REPUBLIC REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
SAUDI ARABIA REGULATION ENFORCING BODIES
At this time, there is no clear designated authority responsible for the enforcement of data protection and privacy equivalent to...
SERBIA REGULATION ENFORCING BODIES
The DPA is responsible for the enforcement of the DP Law...
SEYCHELLES REGULATION ENFORCING BODIES
If the Data Protection Commissioner is satisfied that a registered person has contravened or is...
SINGAPORE REGULATION ENFORCING BODIES
Enforcement of the Act is carried out by the Commission...
SOUTH AFRICA REGULATION ENFORCING BODIES
Any person may submit a complaint to the Information Regulator alleging non-compliance with POPIA...
SLOVENIA REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
SPAIN REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
SOUTH KOREA REGULATION ENFORCING BODIES
The competent authorities may request reports on the handling of Personal Data...
SWITZERLAND REGULATION ENFORCING BODIES
The FDPIC does not have specific direct powers to enforce the DPA...
SWEDEN REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
UNITED KINGDOM REGULATION ENFORCING BODIES
The GDPR empowers supervisory authorities to impose fines of up to 4% of annual worldwide turnover, or EUR 20 million (whichever is higher)...
TAIWAN, CHINA REGULATION ENFORCING BODIES
Under the PDPL, the competent authority may perform an inspection...
TAJIKISTAN REGULATION ENFORCING BODIES
Enforcement of Data Protection Law ('DPL') is primary done by the Main Department for the Protection of...
THAILAND REGULATION ENFORCING BODIES
There is a one-year grace period before the PDPA is enforced...
TRINIDAD AND TOBAGO REGULATION ENFORCING BODIES
The Office of the Information Commissioner is responsible for monitoring the administration of this Act to...
TUNISIA REGULATION ENFORCING BODIES
The National Authority for Protection of Personal Data is legally mandated to ensure compliance with the...
TURKEY REGULATION ENFORCING BODIES
Under the DPL, the Board may apply administrative fines up to TRY 1.000.000 for each incident...
TURKMENISTAN REGULATION ENFORCING BODIES
General enforcement of the Data Protection Law is performed by the General Prosecutor’s Office...
UAE – ABU DHABI GLOBAL MARKET FREE ZONE REGULATION ENFORCING BODIES
In the ADGM, the Office of Data Protection (forming part of the Registrar) oversees the enforcement of the DPR 2015...
UAE – DUBAI (DIFC) REGULATION ENFORCING BODIES
In the DIFC, the CDP oversees the enforcement of the DPL (DPL, Article 26)...
UAE – DUBAI HEALTH CARE CITY FREE ZONE REGULATION ENFORCING BODIES
The CPQ is responsible for the compliance and enforcement of the HDPR and may delegate its powers and duties to...
UAE – GENERAL REGULATION ENFORCING BODIES
There are four possible methods of enforcement from a UAE law perspective...
UGANDA REGULATION ENFORCING BODIES
The Act empowers the National Information Technology Authority-Uganda to enforce penalties for...
UKRAINE REGULATION ENFORCING BODIES
According to Data Protection Law, the Ombudsman and Ukrainian courts are responsible for...
UNITED STATES REGULATION ENFORCING BODIES
Various entities enforce US national and state privacy laws...
URUGUAY REGULATION ENFORCING BODIES
The URCDP is responsible for enforcement of the Act. In the context of its powers...
UZBEKISTAN REGULATION ENFORCING BODIES
Following the adoption of the Law on Personal Data, a number of amendments aimed at enforcing data protection rules...
VIETNAM REGULATION ENFORCING BODIES
Subject to specific data protection laws and the regulations breached...
ZAMBIA REGULATION ENFORCING BODIES
General penalties under the ECTA include...
ZIMBABWE REGULATION ENFORCING BODIES
The Constitution mandates the Human Rights Commission (HRC) to enforce a citizen's human rights where they have been violated...
