Coverage
Jurisdictions
The Data Protection Monitor's free tier covers seven jurisdictions at national or federal/supranational scope. A further, gated jurisdiction set is in scope for onboarding — see below for the live publication status of everything covered so far.
Free-tier jurisdictions
These seven are available without a subscription. Three (EU, US, CA) are scoped to the federal/supranational level only — member-state, state, or provincial jurisdictions within them are gated separately.
- European Union (supranational — EU-level instruments only; member-state JIDs gated)coming soon
- United States (federal only — state JIDs gated)published
- Canada (federal only — provincial JIDs gated)published
- China (national)published
- Nigeria (national)published
- United Kingdom (national)published
- Gibraltar (national)published
Rows above marked "coming soon" have no published jurisdiction page yet; rows marked "published" link straight through. See a worked template for the page shape a published jurisdiction will use.
Full jurisdiction scope
The Data Protection Monitor's jurisdiction scope grows over time as new jurisdictions are onboarded and researched — it is not a fixed count. Free-tier status (above) is independent of onboarding — a jurisdiction can be free-tier and still be awaiting its first published page. The live status of every jurisdiction that has entered the research pipeline is below, updated automatically on every publish.
- African bloc (African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention), together with the Network of African Data Protection Authorities (NADPA/RAPDP) as the practitioner convening body · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Alabama, USA (Alabama Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Alaska, USA (Alaska Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇨🇦 Alberta, Canada (Office of the Information and Privacy Commissioner of Alberta (OIPC Alberta) · updated 2026-10-02)10 of 10 categories assessed
- 🇩🇿 Algeria (Autorité Nationale de Protection des Données à Caractère Personnel (ANPDP), Algeria · updated 2026-10-02)10 of 10 categories assessed
- 🇦🇷 Argentina (Agencia de Acceso a la Información Pública (AAIP) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Arizona, USA (Arizona Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Arkansas, USA (Arkansas Attorney General · updated 2026-10-02)10 of 10 categories assessed
- Asia-Pacific bloc (Global Cross-Border Privacy Rules (CBPR) Forum (successor to the APEC CBPR System) and the ASEAN Framework on Personal Data Protection, operating as parallel, non-converging voluntary mechanisms · updated 2026-10-02)10 of 10 categories assessed
- 🇦🇺 Australia (Office of the Australian Information Commissioner (OAIC) · updated 2026-10-02)10 of 10 categories assessed
- 🇦🇹 Austria (Datenschutzbehörde (DSB) · updated 2026-10-02)10 of 10 categories assessed
- 🇧🇩 Bangladesh (No operative independent DPA; policy sits with the ICT Division and Bangladesh Telecommunication Regulatory Commission for adjacent matters · updated 2026-10-02)10 of 10 categories assessed
- 🇧🇪 Belgium (Autorité de protection des données / Gegevensbeschermingsautoriteit (APD/GBA) · updated 2026-10-02)10 of 10 categories assessed
- 🇧🇷 Brazil (Autoridade Nacional de Proteção de Dados (ANPD) · updated 2026-10-02)10 of 10 categories assessed
- 🇨🇦 British Columbia, Canada (Office of the Information and Privacy Commissioner for British Columbia (OIPC BC) · updated 2026-10-02)10 of 10 categories assessed
- 🇧🇬 Bulgaria (Commission for Personal Data Protection (CPDP) · updated 2026-10-02)10 of 10 categories assessed
- 🇰🇭 Cambodia (No independent dedicated DPA; the Ministry of Post and Telecommunications holds adjacent competence pending a comprehensive data-protection law · updated 2026-10-02)10 of 10 categories assessed
- 🇨🇲 Cameroon (National Agency for Information and Communication Technologies (ANTIC) · updated 2026-10-02)10 of 10 categories assessed
- 🇨🇦 Canada (Office of the Privacy Commissioner of Canada (OPC), with provincial commissioners for Quebec, British Columbia and Alberta · updated 2026-10-02)0 of 10 categories assessed
- 🇨🇱 Chile (Agencia de Protección de Datos Personales (to be established) / currently Consejo para la Transparencia interim role · updated 2026-10-02)10 of 10 categories assessed
- 🇨🇳 China (Cyberspace Administration of China (CAC), with sectoral involvement from MPS and SAMR · updated 2026-10-02)10 of 10 categories assessed
- 🇨🇴 Colombia (Superintendencia de Industria y Comercio (SIC) — Delegatura para la Protección de Datos Personales · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Colorado, USA (Colorado Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Connecticut, USA (Connecticut Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇨🇷 Costa Rica (Prodhab — Agencia de Protección de Datos de los Habitantes · updated 2026-10-02)10 of 10 categories assessed
- 🇭🇷 Croatia (Agencija za zaštitu osobnih podataka (AZOP) · updated 2026-10-02)10 of 10 categories assessed
- 🇨🇼 Curaçao (No independent dedicated DPA; general data-protection provisions administered through the Curaçao government's general administrative apparatus pending fuller institutionalisation · updated 2026-10-02)10 of 10 categories assessed
- 🇨🇾 Cyprus (Office of the Commissioner for Personal Data Protection · updated 2026-10-02)10 of 10 categories assessed
- 🇨🇿 Czech Republic (Úřad pro ochranu osobních údajů (ÚOOÚ) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Delaware, USA (Delaware Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇩🇰 Denmark (Datatilsynet (Danish Data Protection Agency) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 District of Columbia, USA (District of Columbia Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇩🇴 Dominican Republic (No dedicated authority — INDOTEL holds adjacent competence · updated 2026-10-02)10 of 10 categories assessed
- 🇪🇨 Ecuador (Superintendencia de Protección de Datos Personales (SPDP) · updated 2026-10-02)10 of 10 categories assessed
- 🇪🇬 Egypt (Personal Data Protection Center (PDPC) · updated 2026-10-02)10 of 10 categories assessed
- 🇪🇪 Estonia (Andmekaitse Inspektsioon (AKI, Estonian Data Protection Inspectorate) · updated 2026-10-02)10 of 10 categories assessed
- 🇪🇺 European Economic Area (Bloc) (European Data Protection Board (EDPB), coordinating national supervisory authorities across EU/EEA states · updated 2026-10-02)10 of 10 categories assessed
- 🇫🇮 Finland (Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Florida, USA (Florida Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇫🇷 France (Commission Nationale de l'Informatique et des Libertés (CNIL) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Georgia, USA (Georgia Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇩🇪 Germany (Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI), federal coordinator alongside 16 Länder data-protection authorities · updated 2026-10-02)10 of 10 categories assessed
- 🇬🇭 Ghana (Data Protection Commission (DPC) · updated 2026-10-02)10 of 10 categories assessed
- 🇬🇮 Gibraltar (Gibraltar Regulatory Authority (GRA) — Information Rights Division · updated 2026-10-02)10 of 10 categories assessed
- 🇬🇷 Greece (Hellenic Data Protection Authority (HDPA) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Hawaii, USA (Hawaii Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇭🇰 Hong Kong (Office of the Privacy Commissioner for Personal Data (PCPD) · updated 2026-10-02)10 of 10 categories assessed
- 🇭🇺 Hungary (Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH, National Authority for Data Protection and Freedom of Information) · updated 2026-10-02)10 of 10 categories assessed
- 🇮🇸 Iceland (Persónuvernd (Icelandic Data Protection Authority) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Idaho, USA (Idaho Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Illinois, USA (Illinois Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇮🇳 India (Data Protection Board of India (DPBI), established under the Digital Personal Data Protection Act 2023 · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Indiana, USA (Indiana Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇮🇩 Indonesia (Kementerian Komunikasi dan Digital (Komdigi, formerly Kominfo) — data-protection function, with a dedicated Data Protection Authority contemplated but not yet fully independent · updated 2026-10-02)0 of 10 categories assessed
- 🇺🇸 Iowa, USA (Iowa Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇮🇪 Ireland (Data Protection Commission (DPC) · updated 2026-10-02)10 of 10 categories assessed
- 🇮🇲 Isle of Man (Information Commissioner's Office (Isle of Man) — Cyber Isle of Man / IM ICO · updated 2026-10-02)10 of 10 categories assessed
- 🇮🇹 Italy (Garante per la protezione dei dati personali (Garante) · updated 2026-10-02)10 of 10 categories assessed
- 🇨🇮 Ivory Coast (UEMOA Bloc) (Autorité de Protection des Données Personnelles (ADPP) · updated 2026-10-02)10 of 10 categories assessed
- 🇯🇵 Japan (Personal Information Protection Commission (PPC) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Kansas, USA (Kansas Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇰🇿 Kazakhstan (AFSA Data Protection Commissioner (within the AIFC only), with the national Ministry of Digital Development for the rest of Kazakhstan · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Kentucky, USA (Kentucky Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇰🇪 Kenya (Office of the Data Protection Commissioner (ODPC) · updated 2026-10-02)10 of 10 categories assessed
- 🇱🇦 Laos (Ministry of Technology and Communications (MTC), the implementing authority for the Law on Electronic Data Protection — Laos has no independent data-protection authority · updated 2026-10-02)10 of 10 categories assessed
- Latin America bloc (Organization of American States (OAS) Updated Principles on Privacy and Personal Data Protection (2021), with the Red Iberoamericana de Protección de Datos (RIPD) as the separate Ibero-American practitioner network of data-protection authorities · updated 2026-10-02)10 of 10 categories assessed
- 🇱🇻 Latvia (Datu valsts inspekcija (DVI, State Data Protection Inspectorate) · updated 2026-10-02)10 of 10 categories assessed
- 🇱🇮 Liechtenstein (Datenschutzstelle (Data Protection Office) · updated 2026-10-02)10 of 10 categories assessed
- 🇱🇹 Lithuania (Valstybinė duomenų apsaugos inspekcija (VDAI, State Data Protection Inspectorate) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Louisiana, USA (Louisiana Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇱🇺 Luxembourg (Commission Nationale pour la Protection des Données (CNPD) · updated 2026-10-02)10 of 10 categories assessed
- 🇲🇴 Macau SAR, China (Office for Personal Data Protection (GPDP), Macau SAR · updated 2026-10-02)0 of 10 categories assessed
- 🇺🇸 Maine, USA (Maine Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇲🇾 Malaysia (Department of Personal Data Protection (JPDP), Ministry of Digital · updated 2026-10-02)10 of 10 categories assessed
- 🇲🇹 Malta (Information and Data Protection Commissioner (IDPC Malta) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Maryland, USA (Maryland Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Massachusetts, USA (Massachusetts Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇲🇽 Mexico (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) — DISSOLVED 2025, functions absorbed by the Secretaría Anticorrupción y Buen Gobierno · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Michigan, USA (Michigan Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Minnesota, USA (Minnesota Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Mississippi, USA (Mississippi Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Missouri, USA (Missouri Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Montana, USA (Montana Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇲🇦 Morocco (Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) · updated 2026-10-02)10 of 10 categories assessed
- 🇲🇿 Mozambique (No independent dedicated DPA; general data-protection provisions remain largely undeveloped pending comprehensive legislation · updated 2026-10-02)10 of 10 categories assessed
- 🇲🇲 Myanmar (No independent dedicated DPA; adjacent competence sits with the Ministry of Transport and Communications · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Nebraska, USA (Nebraska Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇳🇵 Nepal (No independent dedicated DPA; adjacent competence sits with the Ministry of Communication and Information Technology · updated 2026-10-02)10 of 10 categories assessed
- 🇳🇱 Netherlands (Autoriteit Persoonsgegevens (AP, Dutch Data Protection Authority) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Nevada, USA (Nevada Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇨🇦 New Brunswick, Canada (Office of the Ombud, New Brunswick (public-sector only; private sector governed by federal PIPEDA) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 New Hampshire, USA (New Hampshire Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 New Jersey, USA (New Jersey Division of Consumer Affairs · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 New Mexico, USA (New Mexico Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇳🇿 New Zealand (Office of the Privacy Commissioner (OPC New Zealand) · updated 2026-10-02)10 of 10 categories assessed
- 🇳🇬 Nigeria (Nigeria Data Protection Commission (NDPC) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 North Carolina, USA (North Carolina Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 North Dakota, USA (North Dakota Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇳🇴 Norway (Datatilsynet (Norwegian Data Protection Authority) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Ohio, USA (Ohio Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Oklahoma, USA (Oklahoma Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇨🇦 Ontario, Canada (Information and Privacy Commissioner of Ontario (IPC Ontario) — public-sector and health-sector only; general private sector governed by federal PIPEDA · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Oregon, USA (Oregon Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇵🇰 Pakistan (No independent dedicated DPA; the Ministry of Information Technology and Telecommunication holds adjacent competence pending a comprehensive law · updated 2026-10-02)10 of 10 categories assessed
- 🇵🇦 Panama (Autoridad Nacional de Transparencia y Acceso a la Información (ANTAI) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Pennsylvania, USA (Pennsylvania Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇵🇪 Peru (Autoridad Nacional de Protección de Datos Personales (ANPD Perú), within the Ministry of Justice · updated 2026-10-02)10 of 10 categories assessed
- 🇵🇭 Philippines (National Privacy Commission (NPC) · updated 2026-10-02)10 of 10 categories assessed
- 🇵🇱 Poland (Urząd Ochrony Danych Osobowych (UODO, Polish Personal Data Protection Office) · updated 2026-10-02)10 of 10 categories assessed
- 🇵🇹 Portugal (Comissão Nacional de Proteção de Dados (CNPD Portugal) · updated 2026-10-02)10 of 10 categories assessed
- 🇶🇦 Qatar (National Cyber Security Agency (Qatar) / Ministry of Transport and Communications — mainland; separately, the QFC Data Protection Regulations for the QFC free zone · updated 2026-10-02)10 of 10 categories assessed
- 🇨🇦 Quebec, Canada (Commission d'accès à l'information du Québec (CAI) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Rhode Island, USA (Rhode Island Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇷🇴 Romania (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) · updated 2026-10-02)10 of 10 categories assessed
- 🇷🇺 Russia (Federal Service for Supervision of Communications, Information Technology and Mass Media (Roskomnadzor) · updated 2026-10-02)10 of 10 categories assessed
- 🇷🇼 Rwanda (National Cyber Security Authority (NCSA Rwanda) / Data Protection and Privacy Office · updated 2026-10-02)10 of 10 categories assessed
- 🇸🇦 Saudi Arabia (Saudi Data and Artificial Intelligence Authority (SDAIA) · updated 2026-10-02)10 of 10 categories assessed
- 🇸🇳 Senegal (Commission de Protection des Données Personnelles (CDP Sénégal) · updated 2026-10-02)10 of 10 categories assessed
- 🇷🇸 Serbia (Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti (Commissioner for Information of Public Importance and Personal Data Protection) · updated 2026-10-02)10 of 10 categories assessed
- 🇸🇬 Singapore (Personal Data Protection Commission (PDPC) · updated 2026-10-02)10 of 10 categories assessed
- 🇸🇰 Slovakia (Úrad na ochranu osobných údajov (UOOU, Office for Personal Data Protection) · updated 2026-10-02)10 of 10 categories assessed
- 🇸🇮 Slovenia (Informacijski pooblaščenec (IP, Information Commissioner of Slovenia) · updated 2026-10-02)10 of 10 categories assessed
- 🇿🇦 South Africa (Information Regulator (South Africa) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 South Carolina, USA (South Carolina Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 South Dakota, USA (South Dakota Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇰🇷 South Korea (Personal Information Protection Commission (PIPC) · updated 2026-10-02)10 of 10 categories assessed
- 🇪🇸 Spain (Agencia Española de Protección de Datos (AEPD) · updated 2026-10-02)10 of 10 categories assessed
- 🇱🇰 Sri Lanka (Data Protection Authority of Sri Lanka (DPA Sri Lanka) · updated 2026-10-02)10 of 10 categories assessed
- 🇸🇪 Sweden (Integritetsskyddsmyndigheten (IMY, Swedish Authority for Privacy Protection) · updated 2026-10-02)10 of 10 categories assessed
- 🇨🇭 Switzerland (Federal Data Protection and Information Commissioner (FDPIC) · updated 2026-10-02)10 of 10 categories assessed
- 🇹🇼 Taiwan (Personal Data Protection Office, within the Ministry of Digital Affairs (formerly under the National Development Council) · updated 2026-10-02)10 of 10 categories assessed
- 🇹🇿 Tanzania (Personal Data Protection Commission (PDPC Tanzania) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Tennessee, USA (Tennessee Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Texas, USA (Texas Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇹🇭 Thailand (Personal Data Protection Committee (PDPC Thailand) · updated 2026-10-02)10 of 10 categories assessed
- 🇹🇳 Tunisia (Instance Nationale de Protection des Données Personnelles (INPDP), Tunisia · updated 2026-10-02)10 of 10 categories assessed
- 🇹🇷 Turkey (Kişisel Verileri Koruma Kurumu (KVKK, Personal Data Protection Authority) · updated 2026-10-02)9 of 10 categories assessed
- 🇺🇬 Uganda (Personal Data Protection Office (PDPO Uganda), within the National Information Technology Authority (NITA-U) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇦 Ukraine (Ukrainian Parliament Commissioner for Human Rights (Ombudsman) — data-protection function · updated 2026-10-02)10 of 10 categories assessed
- 🇦🇪 United Arab Emirates (UAE Data Office (federal), with the DIFC Commissioner of Data Protection and the ADGM Office of Data Protection in the financial free zones · updated 2026-10-02)10 of 10 categories assessed
- 🇬🇧 United Kingdom (Information Commissioner's Office (ICO) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 United States (No single federal DPA; sectoral federal regulators (FTC primarily) plus state-level authorities (see California as the leading example) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 United States — California (California Privacy Protection Agency (CPPA) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 United States — New York (New York Department of State (Division of Consumer Protection) and Office of the Attorney General, under the SHIELD Act (no dedicated standalone DPA) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇾 Uruguay (Unidad Reguladora y de Control de Datos Personales (URCDP) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Utah, USA (Utah Division of Consumer Protection · updated 2026-10-02)10 of 10 categories assessed
- 🇻🇪 Venezuela (No dedicated authority — SUSCERTE and sectoral bodies hold adjacent competence · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Vermont, USA (Vermont Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇻🇳 Vietnam (Ministry of Public Security (MPS) — Cybersecurity Department (A05) · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Virginia, USA (Virginia Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Washington State, USA (Washington State Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 West Virginia, USA (West Virginia Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Wisconsin, USA (Wisconsin Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇺🇸 Wyoming, USA (Wyoming Attorney General · updated 2026-10-02)10 of 10 categories assessed
- 🇿🇲 Zambia (No independent dedicated DPA; the Zambia Information and Communications Technology Authority (ZICTA) holds adjacent competence pending full DPA operationalisation · updated 2026-10-02)10 of 10 categories assessed