Dave's annual update to his data privacy laws world map is invaluable as ever - 172 as at the end of 2025. My count is 176 because I include a few that only cover the public sector. Not many left to go ...
#DataProtectionDay 2023
I was honoured develop these guidelines for the @coe.int in 2023
‘Data Protection Day: New guidelines to ensure that national digital identity systems respect human rights standards’
www.coe.int/en/web/human...
#NationalDigitalIdentity
28 Jan is Data Privacy Day 2026. This year it should be not so much about celebrating achievements but rather warning of dangers and suggesting counter-measures. My contribution is 'Defending MAGA-Speech: Trump’s War on Global Data Privacy' papers.ssrn.com/abstract_id=... . Suggestions welcome.
Burundi is the 176th country to adopt a data privacy law, according to various sources including
techafricanews.com/2026/01/16/b... It includes an independent supervisory body. Burundi has ratified the African Union's Malabo Convention. (Thanks Dave Banisar @dbanisar.bsky.social)
Bangladesh is one of the last countries in Asia to enact data privacy legislation - see Personal Data Protection Ordinance 2025; no English version available, but a useful article at www.thedailystar.net/tech-startup... (Thanks Dave Banisar
@dbanisar.bsky.social)
My 'Defending MAGA-speech: Trump’s war on global data privacy' papers.ssrn.com/abstract_id=..., is a non-US analysis of how the authoritarian Trump Administration has developed a systematic foreign & domestic policy ideology with which to attack data privacy globally. Comments much appreciated.
"Munich regional court sided in favour of Germany’s music rights society GEMA, which said ChatGPT had harvested protected lyrics by popular artists to “learn” from them" Paying for the lack of respect and permission
www.theguardian.com/technology/2...
In January 2025 Djibouti in the Horn of Africa became the 174th country to enact a data privacy law: the Digital Code / Code Numerique covers data privacy as well as other e-commerce & cybersecurity topics www.journalofficiel.dj/texte-juridi... Thanks Dave Banisar @dbanisar.bsky.social
Were you on Facebook 10 years ago? papers.ssrn.com/abstract_id=... Meta is paying A$50M - largest ever Australian privacy breach settlement. But the clock is ticking, until only 31/12/25. Who's eligible; how to make a claim; how much the eventual payout might be: here's what you need to know.
2025 marks the 30th anniversary of the founding of the Australasian Legal Information Institute (AustLII). An article by its co-founders/directors Mowbray, Chung & Greenleaf in the Australian Law Journals discusses its history: papers.ssrn.com/abstract_id=...
Gambia's National Assembly passed the Personal Data Protection and Privacy Bill, 2025 on 29 September, 2025. This makes Gambia the 173rd country to enact a data privacy law. It requires Presidential assent. For the other 172 see papers.ssrn.com/abstract_id=...
My article on Malaysia's complex new guidelines on cross-border data transfers is at papers.ssrn.com/abstract_id=... . Still a poor law after 2024 reforms, but definitely improving.
The real reason Disney restored Kimmel's late-night show? We, the people, have extraordinary power. Let me explain. https://robertreich.substack.com/p/the-deeper-story-behind-americas
AustLII www.austlii.edu.au (1995 - ) and the other LIIs in the Free Access to Law Movement still stick to the ideals of the 90s, survive and sometimes thrive.
Cartoon by David Pope titled "Tall Poppy Syndrome". ABC reporter John Lyons stands holding a microphone amongst reporters bowing flat sycophantically before Donald Trump. Trump points at him and says "Tell the Australian Prime Minister to weed thus one out."
David Pope captures it beautifully.
Data flows and digital repression: Civil society urges EU to reassess Israel’s adequacy status
edri.org/our-work/dat...
Sending troops into US cities against their will.
Strong-arming corporations and extracting gifts in exchange for tariff exemptions.
Calling on state governments to gerrymander in his favor.
Trump is the "big government" nightmare conservatives have always warned us about.
Cambodia's Post & Telecoms Ministry has released a draft law on personal data protection in July 2025. Still no DPA, and relies on dozens of prakas (regs) being made. See my article on the 2023 Bill: papers.ssrn.com/sol3/papers.... May be better than nothing, but maybe not if there is no enforcement
Dave's map is accurate for the 166 'comprehensive' laws. Add laws restricted to either the private sector (Singapore, Malaysia, Brunei, Bahrain, China, UAE, Vietnam, Qatar), or only the public sector (Yemen), & you get 172 countries with data privacy laws. See my papers.ssrn.com/abstract_id=...
Same goes for GCC jurisidtions, such as the UAE (including that of DIFC, ADGM), KSA, Qatar, Oman etc
This map is just ignorant concerning the many African and Latin American countries with data privacy laws, and under-estimates the influence of the GDPR elsewhere. 172 countries have such laws. Dave Banisar's map - see Post following - is much more accurate on the extent of countries with laws.
Apology: correct URL is papers.ssrn.com/sol3/papers....
My article 'Global data privacy 2025: International agreements stall' at download.ssrn.com/2025/8/10/53... surveys 2023-24's hi-spots: EU adequacy slo-mo; 108+ non-ratification; Malabo Convention stuck at 16/55 AU; ECOWAS withdrawals; CBPRs as dead parrot; CPTPP with added Brexit; RCEP uber FTAs.
AustLII (www.austlii.edu.au) will host the 22nd Law Via Internet Conference (Nov 13-14, Sydney) lvi2025.org. 24 presenters are listed on a new Conference Program page lvi2025.org/program/. Further submissions of abstracts are open until 31 August lvi2025.org/callforpapers/. Registration is open.
BSA now supports comprehensive privacy laws, and is horrified by states adopting new (outrageous) laws that actually gives consumers some rights. So not really a good or even comprehensive law, or probably a law at all really. I’m feeling a certain sense of deja vu all over again.
Important hearing discussing need for comprehensive privacy protections in US just starting.
The LvI 2025 Conference to be hosted by AustLII has extended the date for abstract submissions to 31/08/25 lvi2025.org/callforpapers/ and halved the registration fee secure.austlii.edu.au/cgi-egate/re... . Both will make the conference bigger and better. Please join us in Sydney in November, 12-14.
172 countries have now enacted data privacy laws by, 12 new in 2023/24 (+ Brunei in 2025). At the current growth rate of 5.2 p/a, they could be universal in 8 years, but some (N.Korea?) will resist. GDPR influence still dominates. My paper analysing the changes is at papers.ssrn.com/abstract_id=...
AustLII is hosting the 2025 Law via Internet Conference (LVI 2025 lvi2025.org), 'Empowering a just society through legal information, policy, technology, & practice', in Sydney in November. The Call for Papers closes on 21 July & registration is now open. It will be beach weather - bring your togs!
'Free Access to Law and Digital Court Decisions in Australia: Reflections and Future Directions', mainly about AustLII's contributions, is by Andrew Mowbray, Philip Chung and me, at papers.ssrn.com/abstract_id=...
