CyphrQData Breach Notification Deadlines by Country: Comparison Table
Who must be told about a data breach, and by when: GDPR, UK, Australia, Brazil, Canada, the SEC and NIS2 side by side, each linked to its source.
Data Protection Law
Data protection laws and regulators, from GDPR to the UAE PDPL, and what they require in practice.
6 articles
India DPDP Rules 2025: Timeline, Duties, Rights and Penalties
What India's DPDP Act 2023 and DPDP Rules 2025 require: the 12- and 18-month timeline, 72-hour breach reports, 90-day rights, ₹250 crore cap.
Saudi PDPL Requirements: What Organisations Must Do Now
What Saudi Arabia's Personal Data Protection Law requires: scope, consent, 72-hour breach reports, transfers, registration, fines, and a checklist.
UAE Data Protection Law (PDPL) and AI Tools: What It Means in Practice
What the UAE Data Protection Law (PDPL) means for a business using AI tools: scope, consent, transfers, DIFC and ADGM, and a 7-question checklist.
Singapore PDPA Requirements: Duties, 3-Day Breach Rule, Penalties
What Singapore's PDPA requires: core duties, the 3-calendar-day breach notification rule, PDPC penalties up to 10% of turnover, and a checklist.
GDPR Requirements for Businesses: Bases, Rights, 72 Hours, Fines
GDPR requirements for businesses in plain language: lawful basis, people's rights, the 72-hour breach report, data transfers, fines, and a checklist.