AesirX Privacy Laws Hub

AESIRX Privacy Laws Hub

Find the latest information on consent rules and global data privacy laws.

Browse Topics

CCPA

European Laws

Quick Search

Find legal details by country/state in one click.

GDPR

ePD

UK

Denmark

Germany

Norway

Spain

France

Vietnam

India

Brazil

California

Privacy Laws Directory

Global Laws and Regulations

Explore the directory to find privacy laws and consent rules

Directive 2002/58/EC (ePrivacy Directive) (EUR-Lex).
https://eur-lex.europa.eu/eli/dir/2002/58/oj/eng

Regulation (EU) 2016/679 (GDPR) (EUR-Lex).
https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng

EDPB Guidelines 2/2023 on the technical scope of Article 5(3) ePrivacy Directive (final).
https://www.edpb.europa.eu/system/files/2024-10/edpb_guidelines_202302_technical_scope_art_53_eprivacydirective_v2_en_0.pdf

EU DPAs (GDPR) - European Commission directory:
https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

ePrivacy Directive competent authorities (cookies/terminal access enforcement varies by country):
https://digital-strategy.ec.europa.eu/en/library/list-personal-data-protection-competent-authorities

EDPB “Our Members” (EU DPAs + EDPS + EEA EFTA DPAs):
https://www.edpb.europa.eu/about-edpb/about-edpb/members_en

In several Member States, the ePrivacy ‘terminal equipment’ rule (cookies and similar technologies) is supervised by a telecom/electronic communications authority, while GDPR aspects are supervised by the DPA. For completeness, we list both.

Österreichische Datenschutzbehörde (DSB)
https://dsb.gv.at/

DSB - FAQ “Datenschutz & Cookies”
https://dsb.gv.at/faqs/datenschutz-cookies

National ePrivacy implementation (official legal portal - RIS)
https://www.ris.bka.gv.at/

Rundfunk und Telekom Regulierungs-GmbH (RTR)
https://www.rtr.at/en/

Gegevensbeschermingsautoriteit / Autorité de protection des données (APD/GBA)
https://www.dataprotectionauthority.be/

APD/GBA - Cookies hub
https://www.dataprotectionauthority.be/cookies

APD/GBA - Cookie checklist (page)
https://www.dataprotectionauthority.be/cookie-checklist

APD/GBA - Cookie checklist (PDF)
https://www.dataprotectionauthority.be/index.php/publications/checklist-cookies.pdf

National ePrivacy implementation (official legal portal - eJustice / Moniteur belge)
http://www.ejustice.just.fgov.be/loi/loi.htm

Belgian Institute for Postal Services and Telecommunications (BIPT/IBPT)
https://www.bipt.be/en

Commission for Personal Data Protection (CPDP)
https://www.cpdp.bg/en/

National ePrivacy implementation (official legal portal - State Gazette)
https://dv.parliament.bg/

Communications Regulation Commission (CRC)
https://www.crc.bg/en

Croatian Personal Data Protection Agency (AZOP)
https://azop.hr/en/

National ePrivacy implementation (official legal portal - Narodne novine)
https://narodne-novine.nn.hr/

Croatian Regulatory Authority for Network Industries (HAKOM)
https://www.hakom.hr/en

Office of the Commissioner for Personal Data Protection
https://www.dataprotection.gov.cy/

National ePrivacy implementation (official legal portal - Cyprus Law Commissioner)
http://www.cylaw.org/

Office of the Commissioner of Electronic Communications and Postal Regulation (OCECPR)
https://ocecpr.ee.cy/

Office for Personal Data Protection (ÚOOÚ)
https://www.uoou.cz/en/

National ePrivacy implementation (official legal portal - Zákony.gov.cz)
https://zakony.gov.cz/

Czech Telecommunication Office (ČTÚ)
https://www.ctu.cz/en/

Danish Data Protection Agency (Datatilsynet)
https://www.datatilsynet.dk/

Danish Data Protection Agency (Datatilsynet) - Cookies & similar technologies
https://www.datatilsynet.dk/regler-og-vejledning/cookies-og-lignende-teknologier

Agency for Digital Government (Digitaliseringsstyrelsen / DIGST)
https://digst.dk/

Agency for Digital Government (Digitaliseringsstyrelsen / DIGST) - Cookievejledningen
https://digst.dk/sikkerhed/digitale-tilsyn/sporingsteknologiomraadet/cookievejledningen/

Joint guidance (DIGST + Datatilsynet) (PDF)
https://digst.dk/media/oy1btb02/faellesvejledning-med-datatilsynet.pdf

National ePrivacy implementation (official legal portal - Retsinformation)
https://www.retsinformation.dk/

Estonian Data Protection Inspectorate (AKI)
https://www.aki.ee/en/

AKI - Cookies (page)
https://www.aki.ee/en/cookies

National ePrivacy implementation (official legal portal - Riigi Teataja)
https://www.riigiteataja.ee/en/

Consumer Protection and Technical Regulatory Authority (TTJA)
https://www.ttja.ee/en

Office of the Data Protection Ombudsman
https://tietosuoja.fi/en/

Traficom (ePrivacy enforcement) - Cookies & similar technologies (PDF)
https://www.traficom.fi/sites/default/files/media/file/Cookies_guidance.pdf

National ePrivacy implementation (official legal portal - Finlex)
https://www.finlex.fi/en/

CNIL - Cookies & trackers (hub)
https://www.cnil.fr/fr/cookies-et-autres-traceurs

CNIL - “Guidelines” (PDF)
https://www.cnil.fr/sites/cnil/files/atoms/files/lignes_directrices_de_la_cnil_sur_les_cookies_et_autres_traceurs.pdf

CNIL - “Recommendation” (PDF)
https://www.cnil.fr/sites/cnil/files/atoms/files/recommandation_cookies_et_autres_traceurs.pdf

National ePrivacy implementation (official legal portal - Légifrance)
https://www.legifrance.gouv.fr/

ARCEP (telecom regulator)
https://www.arcep.fr/

Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
https://www.bfdi.bund.de/EN/Home/home_node.html

TTDSG (official federal law portal)
https://www.gesetze-im-internet.de/ttdsg/

German telecom law (TKG) (official portal)
https://www.gesetze-im-internet.de/tkg_2021/

Datenschutzkonferenz (DSK) - Orientierungshilfe “Einwilligungsbanner” (PDF)
https://www.datenschutzkonferenz-online.de/media/oh/20211220_orientierungshilfe_einwilligungsbanner.pdf

National ePrivacy implementation (official legal portal - Gesetze im Internet)
https://www.gesetze-im-internet.de/

Hellenic Data Protection Authority (HDPA)
https://www.dpa.gr/en/

HDPA - Guidelines on cookies & similar technologies
https://www.dpa.gr/en/press/guidelines-use-cookies-and-similar-technologies

National ePrivacy implementation (official legal portal - National Printing Office)
https://www.et.gr/

Hellenic Authority for Communication Security and Privacy (ADAE)
https://adae.gov.gr/en/

National Authority for Data Protection and Freedom of Information (NAIH)
https://www.naih.hu/

National ePrivacy implementation (official legal portal - National Legislation Database)
https://njt.hu/

National Media and Infocommunications Authority (NMHH)
https://www.nmhh.hu/en

Data Protection Commission (DPC)
https://www.dataprotection.ie/

DPC - Guidance on cookies and other tracking technologies
https://www.dataprotection.ie/en/dpc-guidance/guidance-on-cookies-and-other-tracking-technologies

National ePrivacy implementation (official legal portal - Irish Statute Book)
https://www.irishstatutebook.ie/

Commission for Communications Regulation (ComReg)

Garante per la protezione dei dati personali
https://www.garanteprivacy.it/

Garante - Cookie guidelines (Docweb)
https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/9677876

National ePrivacy implementation (official legal portal - Normattiva)
https://www.normattiva.it/

Data State Inspectorate (DVI)
https://www.dvi.gov.lv/en/

National ePrivacy implementation (official legal portal - Likumi.lv)
https://likumi.lv/

Public Utilities Commission (SPRK)
https://www.sprk.gov.lv/en

State Data Protection Inspectorate (VDAI)
https://vdai.lrv.lt/en/

National ePrivacy implementation (official legal portal - e-TAR)
https://www.e-tar.lt/

Communications Regulatory Authority (RRT)
https://www.rrt.lt/en/

National Data Protection Commission (CNPD)
https://cnpd.public.lu/en/

CNPD - Cookies (thematic page)
https://cnpd.public.lu/fr/dossiers-thematiques/cookies.html

National ePrivacy implementation (official legal portal - Legilux)
https://legilux.public.lu/

Information and Data Protection Commissioner (IDPC)
https://idpc.org.mt/

National ePrivacy implementation (official legal portal - Legislation Malta)
https://legislation.mt/

Malta Communications Authority (MCA)
https://www.mca.org.mt/

Autoriteit Persoonsgegevens (AP)
https://autoriteitpersoonsgegevens.nl/

AP - Tracking cookies
https://autoriteitpersoonsgegevens.nl/themas/internet-slimme-apparaten-cookies/cookies/tracking-cookies

AP - Clear cookie banners
https://autoriteitpersoonsgegevens.nl/themas/internet-slimme-apparaten-cookies/cookies/heldere-cookie-banners

National ePrivacy implementation (official legal portal - Wetten.overheid.nl)
https://wetten.overheid.nl/

Authority for Consumers and Markets (ACM)
https://www.acm.nl/en

Dutch Authority for Digital Infrastructure (RDI)
https://www.rdi.nl/

Personal Data Protection Office (UODO)
https://uodo.gov.pl/en

National ePrivacy implementation (official legal portal - ISAP Sejm)
https://isap.sejm.gov.pl/

Office of Electronic Communications (UKE)
https://uke.gov.pl/en/

Comissão Nacional de Proteção de Dados (CNPD)
https://www.cnpd.pt/

National ePrivacy implementation (official legal portal - Diário da República)
https://dre.pt/

Autoridade Nacional de Comunicações (ANACOM)
https://www.anacom.pt/

National Supervisory Authority for Personal Data Processing (ANSPDCP)
https://www.dataprotection.ro/

National ePrivacy implementation (official legal portal - Legislatie Just)
https://legislatie.just.ro/

National Authority for Management and Regulation in Communications (ANCOM)
https://www.ancom.ro/en/

Office for Personal Data Protection of the Slovak Republic
https://dataprotection.gov.sk/

National ePrivacy implementation (official legal portal - Slov-Lex)
https://www.slov-lex.sk/

Regulatory Authority for Electronic Communications and Postal Services (Teleoff)
https://www.teleoff.gov.sk/en/

Information Commissioner (IP-RS)
https://www.ip-rs.si/en/

National ePrivacy implementation (official legal portal - PISRS)
http://pisrs.si/Pis.web/

Agency for Communication Networks and Services (AKOS)
https://www.akos-rs.si/en/

Agencia Española de Protección de Datos (AEPD)
https://www.aepd.es/

AEPD - Cookie guide (PDF)
https://www.aepd.es/guias/guia-cookies.pdf

National ePrivacy implementation (official legal portal - BOE)
https://www.boe.es/

National Commission on Markets and Competition (CNMC)
https://www.cnmc.es/en

Swedish Authority for Privacy Protection (IMY)
https://www.imy.se/other-lang/in-english/

IMY - cookie-banner enforcement example (news)
https://www.imy.se/nyheter/imy-riktar-kritik-mot-foretags-kakbanners/

Swedish Post and Telecom Authority (PTS) - Cookies guidance
https://pts.se/internet-och-telefoni/kakor-cookies/

PTS - Guiding decisions (cookies)
https://pts.se/internet-och-telefoni/kakor-cookies/vagledande-beslut/

National ePrivacy implementation (official legal portal - Riksdagen laws)
https://www.riksdagen.se/sv/dokument-och-lagar/

Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), Regulation 6.
https://www.legislation.gov.uk/uksi/2003/2426/regulation/6

Information Commissioner’s Office (ICO)
https://ico.org.uk/

ICO: Cookies and similar technologies (overview).
https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guide-to-pecr/cookies-and-similar-technologies/

Data Protection Act 2018 (UK legislation).
https://www.legislation.gov.uk/ukpga/2018/12/contents

UK Government: overview of the UK’s data protection legislation (UK GDPR + DPA 2018).
https://www.gov.uk/data-protection