Skip to Main Content
Main Menu
Search Opener
Search Close
Contact us
Regulations

Global privacy and security compliance

TrustArc provides continuous compliance on global regulations, laws, and standards on data privacy and security globally.

Act on the Protection of Personal Information (APPI) – Japan

Japan’s personal data protection law

California Consumer Privacy Act (CCPA)

California’s comprehensive statewide privacy legislation

Children’s Online Privacy Protection Act (COPPA)

U.S. federal-level protection over children’s online safety

Colorado Privacy Act (CPA)

Colorado’s comprehensive privacy legislation

Connecticut Data Privacy Act (CTDPA)

Connecticut's data privacy and online morning law

Data Privacy Framework (DPF)

Transatlantic data transfer framework

Data Protection Act (DPA) – Nigeria

Nigeria’s data protection law

Digital Personal Data Protection Act – India

India's comprehensive data protection law

EU Artificial Intelligence Act (EU AI Act)

EU’s regulation on the use of AI and the world’s first comprehensive AI law

EU Cloud Code of Conduct

EU Data Protection Code of Conduct

Family Educational Rights and Privacy Act (FERPA)

U.S. federal law that protects student privacy

Florida Digital Bill of Rights (FDBR)

Florida’s data privacy and protection law

General Data Protection Regulation (GDPR)

Europe’s comprehensive data privacy and protection law

General Personal Data Protection Act (LGPD) – Brazil

Brazil’s data protection law

Gramm-Leach-Bliley Act (GLBA)

U.S. federal law safeguarding consumer privacy with financial institutions

Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule

Federal sectoral rule protecting privacy in the healthcare industry

Health Insurance Portability and Accountability Act (HIPAA) Security Rule

Federal sectoral rule safeguarding individuals’ electronic health information

ISO 27701 International Standard

ISO standard for managing Privacy Information Management Systems

ISO 27550 International Standard

ISO standard focused on privacy engineering across system lifecycle processes

ISO 31700-01 International Standard

ISO standard for the lifecycle of consumer products

ISO/IEC 27001 International Standard

Information security management system standard

Massachusetts Standards for the Protection of Personal Information

Regulation focused on safeguarding personal information

Nevada Privacy and Security Law

State privacy and security law focused on data protection and consumer rights

The National Institute of Standards and Technology (NIST) Artificial Intelligence Risk Management

Framework to foster responsible AI systems

The National Institute of Standards and Technology (NIST) Cybersecurity Framework

Framework on cybersecurity risk posture and resilience

The National Institute of Standards and Technology (NIST) SP 800-53

Security and privacy controls to meet Federal Information Security Management Act (FISMA) requirements

Texas Data Privacy and Security Act (TDPSA)

Texas’ comprehensive state privacy law

New Zealand Privacy Act

Comprehensive privacy law for New Zealand

Nymity Privacy Management Accountability Framework (PMAF)

Industry-recognized global privacy framework

Oregon Consumer Data Protection Act

Oregon’s comprehensive data privacy law

PCI Security Standards Council (PCI SSC)

PCI SSC - International payment security standard

Personal Data Protection Law (PDPA) – Argentina

Argentina’s privacy regulation

Personal Data Protection Law (PDPL) – Chile

Chile’s comprehensive privacy law

Personal Data Protection Law (PDPL) – Egypt

Egypt’s data protection law

Personal Data Protection Law (DPDL) – Indonesia

Indonesia’s comprehensive personal data protection law

Personal Data Protection Act (PDPA) – Singapore

Singapore’s sector-specific personal data protection legislation

Personal Information Protection Act (PIPA) – South Korea

South Korea’s privacy law

Personal Information Protection and Electronic Documents Act (PIPEDA) – Canada

Canada’s data privacy law

APEC Cross Border Privacy Rules (APEC CBPR)

APEC Cross Border Privacy Rules

Personal Information Protection Law (PIPL) – China

China’s personal data protection law

Philippines’ Data Privacy Act

Philippines’ data privacy law

Quebec Law 25/ Bill 64

Quebec's comprehensive privacy protection law

SOC2 – International Cybersecurity Standard

SOC2 International cybersecurity standard

Thailand Personal Data protection Act (PDPA)

Thailand’s comprehensive data protection law

TrustArc’s Privacy & Data Governance Framework

TrustArc’s controls-based framework to support operationalization

Turkish Personal Data Protection Law (PDPL)

Turkey's personal data protection law

Utah Consumer Privacy Act (UCPA)

Utah’s comprehensive state privacy legislation

Vietnam Personal Data Protection Decree

Vietnam’s comprehensive data privacy law

Virginia Consumer Data Protection Act (CDPA)

Virginia’s comprehensive state privacy legislation
Back to Top