Regulations
Every privacy framework we support, what it actually requires of your website, and how GrantCookie covers it.
-
DPDP — Digital Personal Data Protection Act, 2023
India’s first comprehensive data protection law. The DPDP Act governs the processing of digital personal data and is built on a consent-first model: a…
-
PDPL (KSA) — Personal Data Protection Law (Saudi Arabia)
Saudi Arabia’s first comprehensive data protection law. The PDPL introduces consent-based processing, data subject rights, cross-border transfer rules and significant penalties — including criminal…
-
PDPA (Thailand) — Personal Data Protection Act B.E. 2562 (2019)
Thailand’s first comprehensive data protection law, closely modelled on the GDPR. It requires a lawful basis for processing personal data, with explicit consent the…
-
PDPA (Singapore) — Personal Data Protection Act (Singapore)
Singapore’s general data protection law. The 2021 amendments added a mandatory data breach notification regime, deemed-consent provisions for some types of processing, and significantly…
-
CTDPA — Connecticut Data Privacy Act
Connecticut’s consumer privacy law (CTDPA). Sits between the Virginia and Colorado models — universal opt-out signals, opt-outs for the sale of data, targeted advertising…
-
UCPA — Utah Consumer Privacy Act
Utah’s consumer privacy law, narrower in scope than California or Virginia. The UCPA focuses on transparency, opt-outs for the sale of personal data and…
-
CPA — Colorado Privacy Act
Colorado’s consumer privacy law, similar in shape to Virginia’s VCDPA but with stricter rules around dark patterns and a clearer mandate to honour the…
-
VCDPA — Virginia Consumer Data Protection Act
Virginia’s comprehensive consumer privacy law, the second US state law of its kind after California. The VCDPA gives Virginia residents rights over their personal…
-
POPIA — Protection of Personal Information Act
South Africa’s data protection law, structured around eight conditions for lawful processing. POPIA requires consent for processing many categories of personal information, including the…
-
Privacy Act — Privacy Act 1988 (Australia)
Australia’s federal privacy law, structured around 13 Australian Privacy Principles (APPs). Cookies that identify or could reasonably identify an individual are treated as personal…