Notes on the updated Global Privacy Law and DPA Directory and major privacy developments

The IAPP Research and Insights team updated its Global Privacy Law and DPA Directory. This latest version includes both new, amended, and draft comprehensive data privacy laws and reflects recent developments, including the establishment of new data protection authorities. First launched in 2017, the directory is intended to be a one-stop-shop for current information on data protection to keep privacy professionals up-to-date with global laws, authorities and trends.

Data protection regimes continue to blossom and mature around the world. The European Commission has proposed significant reforms to its General Data Protection Regulation nearly 10 years after passage. In the last 12 months, India introduced new implementing rules to bring the Digital Personal Data Protection Act into force, Bangladesh and the Gambia adopted or are considering new comprehensive laws, and other countries, including Ecuador and Indonesia, introduced new agencies to interpret and enforce existing privacy statutes. 

Global data protection statistics

According to the updated directory, 179 of the 240 analyzed jurisdictions have data protection frameworks in place while another eight are considering draft laws. This means approximately 3 out of every 4 countries are covered by data protection laws. Based on this count, over 6.6 billion people around the world are covered by some level of data protection law, accounting for approximately 80% of the world's total population. 

Of course, this does not include those covered by state and local privacy laws, such as individuals in California and those covered by sectoral laws in the United States. It also does not account for nations considering draft data protection laws, like Bangladesh and Pakistan. As a result, the true reach of global privacy laws is likely even greater.