- Australia Privacy Act 1988Australia's Privacy Act 1988 governs covered entities' handling of personal information under the Privacy Principles. For payments, it covers transparent collection, secure processing, access and correction, disclosures and cross-border transfers, alongside breach notifications.
- Brazil General Data Protection LawBrazil's General Data Protection Law governs the handling of personal data, including payment information. Legal bases, transparency and rights sit alongside security, governance and cross-border processing controls, with qualifying incidents reported to ANPD and affected people.
- California Consumer Privacy Act as amended by the CPRACalifornia's CCPA, as amended by the CPRA, covers qualifying businesses collecting personal consumer data and covered contractors or service providers. Notice, access, deletion, correction and opt-out rights sit with sensitive-data limits, security and records of verified requests.
- Canada Personal Information Protection and Electronic Documents ActCanada's PIPEDA governs personal information in commercial activities within federal scope and interprovincial or international transactions. Consent, limited collection and retention, safeguards and access sit with accountability and reporting for breaches posing significant harm.
- China Personal Information Protection LawChina's Personal Information Protection Law covers data processing in China and specified overseas activity targeting people there. Legal bases, minimisation and notice join sensitive-data protection, separate consent where required, impact assessments and overseas-transfer controls.
- EU General Data Protection RegulationThe EU General Data Protection Regulation governs personal data use, including payments. Lawful processing, minimisation and transparency connect with rights, security and international-transfer safeguards, backed by processing records, risk assessments and breach reporting.
- Hong Kong Personal Data (Privacy) OrdinanceHong Kong's Personal Data Privacy Ordinance governs data users' collection, processing and use of personal information. Fair collection, purpose limits, accuracy, security and access rights join direct-marketing controls; regulatory guidance strongly encourages breach notification.
- India Digital Personal Data Protection Act 2023India's Digital Personal Data Protection Act 2023 addresses lawful processing of digital personal data. Notice, consent, data-principal rights and security link the use of customer information with accountability, including breach response and evidence for the Data Protection Board.
- Japan Act on the Protection of Personal InformationJapan's Personal Information Protection Act covers businesses handling personal data and specified overseas processing involving people in Japan. Use limits, security, processor oversight and access rights join data use to transfer controls, records and reports of qualifying leaks.
- Ley Federal de Protección de Datos Personales en Posesión de los ParticularesMexico's federal private-sector data-protection law governs personal information held and processed by private persons. For payments, its subject is the individual data used by providers, placing that processing within a framework distinct from the authorisation of payment services.