Countries with their own privacy law

Besides the GDPR and US state laws, several countries have their own privacy law, with their own rights, deadlines and authority. Privacyboard follows the countries you serve.

#Choose where you serve customers

In Company profile → Activity, fill in Countries where you serve customers:

• choose Worldwide if you do not restrict where your customers are: every country below is covered;
• otherwise, add the countries one by one. Countries with their own law are marked with it.

A company established in one of these countries always follows that country's law, whatever the list says.

For each country covered, your privacy policy gets a notice, and the request form of your privacy center lists the country under "Where do you live?" with its own rights and deadline. Republish your privacy policy and your center after a change.

#What each country adds

Outside the GDPR, the deadline keeps running while you verify the person's identity. Each request shows its rules and you can change them if a request arrived by email.

#Good to know

• Canada: Québec's Law 25 asks you to publish the title and contact of the person in charge of personal information (by default, the highest-ranking person in the company). Add it as your data protection officer in the company profile.
• Brazil: the LGPD asks for an encarregado (data protection officer). Small processing agents can be exempt (ANPD Resolution 2/2022) but must still offer a way to reach them.
• Chile: Law 21.719 applies from 1 December 2026. A bill to postpone it is being discussed; until it is passed, that date stands.
• Australia: the Privacy Act mostly applies to businesses with more than AUD 3 million in yearly turnover, and to some smaller ones (health services, data traders). From 10 December 2026, privacy policies must describe decisions made by computer programs that significantly affect people: answer the automated decisions question in your profile.

#Replies

Replies use the period and authority of each law. See Replies and templates.

#FAQ

#I chose Worldwide. Does my policy now apply every law in the world?

No. It adds the notices of the countries listed above. Elsewhere, people can use the general rights of your policy, answered within one month. Other regimes, such as India's DPDP Act, are not covered yet.

#Does the cookie banner change for these countries?

Switzerland is in the European zone: visitors there are asked for consent. Visitors in Québec are always asked for consent too, since Law 25 wants tracking off by default. The other countries follow your rules for the rest of the world. See Regional rules.