Data & Security
Rules on payment and personal data collection, storage, localisation, transfer, retention, and information security.
- Australia Privacy Act 1988Australia Privacy Act 1988 defines payment-sector compliance duties for australian privacy principle entities and covered handling of personal information.
- Brazil General Data Protection LawBrazilian data-protection framework governing legal bases, rights, security, governance and cross-border processing.
- California Consumer Privacy Act as amended by the CPRACalifornia Consumer Privacy Act as amended by the CPRA defines payment-sector compliance duties for for-profit businesses meeting statutory thresholds that collect california consumers' personal information, plus covered service providers and contractors.
- Canada Personal Information Protection and Electronic Documents ActCanada Personal Information Protection and Electronic Documents Act defines payment-sector compliance duties for personal information handled in commercial activities within federal scope and interprovincial or international transactions.
- China Personal Information Protection LawChina Personal Information Protection Law defines payment-sector compliance duties for processing of personal information in china and specified extraterritorial processing targeting or analysing individuals in china.
- EU General Data Protection RegulationEU data-protection framework governing lawful processing, transparency, security, data-subject rights and international transfers.
- Hong Kong Personal Data (Privacy) OrdinanceHong Kong Personal Data (Privacy) Ordinance defines payment-sector compliance duties for data users controlling collection, holding, processing or use of personal data in hong kong.
- India Digital Personal Data Protection Act 2023Indian statutory framework for lawful digital-personal-data processing, notices, consent, security and breach response.
- Japan Act on the Protection of Personal InformationJapan Act on the Protection of Personal Information defines payment-sector compliance duties for business operators handling personal information and specified extraterritorial processing involving individuals in japan.
- Ley Federal de Protección de Datos Personales en Posesión de los ParticularesMexico's binding federal framework for personal data held and processed by private-sector persons.