A library of every framework that matters.

The cornerstone of modern data protection - governs how organisations collect, process and protect personal data of EU residents, anywhere in the world.

The UK's post-Brexit data protection regime - closely mirrors the EU GDPR with UK-specific nuances.

Grants California residents broad rights over personal information and creates strict obligations for businesses that meet the revenue or data thresholds.

US federal standard for safeguarding Protected Health Information (PHI) held by covered entities and their business associates.

Canada's federal private-sector privacy law - likely to be replaced by the Consumer Privacy Protection Act (CPPA) under Bill C-27.

The international standard for an Information Security Management System (ISMS) - increasingly demanded by enterprise buyers worldwide.

Extends ISO/IEC 27001 with privacy-specific controls - the de-facto international certification for a Privacy Information Management System (PIMS).

Voluntary, risk-based frameworks from the US National Institute of Standards and Technology - widely adopted globally as the gold standard.

Mandatory technical and operational standard for any organisation that stores, processes or transmits cardholder data.

The AICPA Trust Services Criteria report demanded by enterprise buyers - a must-have for B2B SaaS.

Gives effect to the constitutional right of access to information held by the State and by private bodies in certain circumstances.

Criminalises cyber-offences and gives effect to investigation, prosecution and international cooperation on cybercrime in Kenya.

Strengthens consumer rights in transactions - including disclosures, unfair practices and electronic agreements.

Kenya's flagship data protection statute, enforced by the Office of the Data Protection Commissioner (ODPC).

Nigeria's comprehensive privacy law, enforced by the Nigeria Data Protection Commission (NDPC).

South Africa's comprehensive privacy law, enforced by the Information Regulator.

Singapore's PDPA balances individual rights with the needs of organisations to use data responsibly.

Brazil's GDPR-aligned data protection law, enforced by the ANPD.