Privacy
71 items tagged with "privacy"
Best Practices1
Regulations63
General Data Protection Regulation
European Union regulation on data protection and privacy for individuals within the EU and EEA
California Consumer Privacy Act
California state statute enhancing privacy rights and consumer protection for residents of California
Lei Geral de Proteção de Dados
Brazil's General Data Protection Law regulating personal data processing
Personal Information Protection and Electronic Documents Act
Canadian federal privacy law for private-sector organizations
United Kingdom General Data Protection Regulation
The UK's retained and amended version of the EU GDPR governing the processing of personal data of individuals in the United Kingdom.
California Consumer Privacy Act
California's landmark consumer privacy law giving residents rights to know, delete, and opt out of the sale of their personal information.
California Privacy Rights Act
A 2020 ballot measure that expanded the CCPA, adding new consumer rights, sensitive data rules, and a dedicated California privacy regulator.
Virginia Consumer Data Protection Act
Virginia's comprehensive consumer privacy law granting residents data rights and imposing controller and processor obligations.
Colorado Privacy Act
Colorado's comprehensive consumer privacy law granting data rights and requiring recognition of universal opt-out mechanisms.
Connecticut Data Privacy Act
Connecticut's comprehensive consumer privacy law granting data rights and requiring opt-out preference signal recognition.
Utah Consumer Privacy Act
Utah's comprehensive consumer privacy law granting limited data rights with a business-friendly, opt-out-based design.
Texas Data Privacy and Security Act
Texas's comprehensive consumer privacy law applying to most businesses regardless of revenue, with broad data rights and opt-out signals.
Lei Geral de Proteção de Dados Pessoais
Brazil's general data protection law governing the processing of personal data, modeled closely on the EU GDPR.
Personal Information Protection and Electronic Documents Act
Canada's federal private-sector privacy law governing the collection, use, and disclosure of personal information in commercial activity.
Quebec Act to Modernize Legislative Provisions Respecting the Protection of Personal Information
Quebec's privacy reform law (formerly Bill 64) overhauling personal information protection in the public and private sectors.
Protection of Personal Information Act
South Africa's data protection law regulating the processing of personal information by public and private bodies.
Personal Data Protection Act 2012 (Singapore)
Singapore's data protection law governing the collection, use, and disclosure of personal data by private-sector organizations.
Personal Data Protection Act B.E. 2562 (Thailand)
Thailand's comprehensive data protection law governing the collection, use, and disclosure of personal data, modeled on the GDPR.
Act on the Protection of Personal Information (Japan)
Japan's national data protection law governing how businesses handle personal information, overseen by the PPC.
Personal Information Protection Law of the People's Republic of China
China's comprehensive personal information protection law governing processing of personal data with strict consent and cross-border rules.
Digital Personal Data Protection Act, 2023 (India)
India's first comprehensive data protection law governing the processing of digital personal data with consent at its core.
Privacy Act 1988 (Australia)
Australia's principal privacy law regulating handling of personal information through the Australian Privacy Principles.
Law on the Protection of Personal Data No. 6698 (Turkey)
Turkey's data protection law regulating the processing of personal data, modeled on the EU Data Protection Directive.
Federal Act on Data Protection (Switzerland)
Switzerland's revised federal data protection law modernizing privacy rules and aligning them more closely with the GDPR.
Personal Data Protection Law (Saudi Arabia)
Saudi Arabia's first comprehensive data protection law governing the processing of personal data, supervised by the SDAIA.
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE)
The United Arab Emirates' first federal data protection law governing the processing of personal data across the country.
Nigeria Data Protection Act 2023
Nigeria's comprehensive data protection law governing the processing of personal data and establishing a national data protection commission.
Data Protection Act 2019 (Kenya)
Kenya's comprehensive data protection law governing the processing of personal data and establishing the Office of the Data Protection Commissioner.
Privacy Act 2020 (New Zealand)
New Zealand's principal privacy law regulating the handling of personal information through 13 Information Privacy Principles.
Directive 2002/58/EC on Privacy and Electronic Communications
The EU directive governing privacy in electronic communications, including cookies, traffic data, and marketing, often called the cookie law.
Family Educational Rights and Privacy Act
US law protecting the privacy of student education records and giving students and parents rights over those records.
Children's Online Privacy Protection Act
US law governing the online collection of personal information from children under 13, requiring verifiable parental consent.
EU GDPR International Data Transfer Rules (Chapter V)
GDPR rules restricting transfers of personal data outside the EU/EEA unless an adequate safeguard such as SCCs or adequacy applies.
EU-US Data Privacy Framework
Transatlantic mechanism allowing lawful transfer of personal data from the EU to certified US organizations under an adequacy decision.
Schrems II (CJEU Judgment in Data Protection Commissioner v. Facebook Ireland and Maximillian Schrems)
Landmark CJEU ruling invalidating the EU-US Privacy Shield and tightening conditions for international transfers of personal data.
California Delete Act
California law creating a single mechanism for consumers to direct all registered data brokers to delete their personal information.
Oregon Consumer Privacy Act
Oregon's comprehensive consumer privacy law granting residents rights over their personal data and imposing duties on businesses that process it.
Montana Consumer Data Privacy Act
Montana's comprehensive privacy law giving residents data rights and requiring controllers to honor opt-outs and protect sensitive data.
Iowa Consumer Data Protection Act
Iowa's consumer privacy law giving residents access, deletion, and opt-out rights with comparatively limited controller obligations.
Delaware Personal Data Privacy Act
Delaware's comprehensive privacy law granting residents broad data rights with low applicability thresholds and coverage of many nonprofits.
New Jersey Data Privacy Act
New Jersey's comprehensive privacy law giving residents data rights and requiring consent for sensitive data and certain processing of minors.
Tennessee Information Protection Act
Tennessee's comprehensive privacy law granting consumer data rights and offering an affirmative defense for documented privacy programs.
Indiana Consumer Data Protection Act
Indiana's comprehensive privacy law granting residents data rights, with one of the latest effective dates among state privacy statutes.
Florida Digital Bill of Rights
Florida's privacy law targeting large technology companies, with rights for consumers and rules on data sales, profiling, and children's data.
Nebraska Data Privacy Act
Nebraska's comprehensive privacy law modeled on Texas, applying to most businesses except small businesses regardless of data volume.
New Hampshire Privacy Act
New Hampshire's comprehensive privacy law granting residents data rights with low applicability thresholds and rulemaking by the Department of Justice.
Kentucky Consumer Data Protection Act
Kentucky's comprehensive privacy law modeled on Virginia, granting residents data rights and requiring consent for sensitive data.
Maryland Online Data Privacy Act
Maryland's strict privacy law imposing strong data minimization limits and broad protections, especially for sensitive data and minors.
Minnesota Consumer Data Privacy Act
Minnesota's comprehensive privacy law with novel rights including the right to question profiling decisions and to review a data inventory.
Rhode Island Data Transparency and Privacy Protection Act
Rhode Island's comprehensive privacy law granting consumer data rights with distinctive third-party disclosure transparency requirements.
Illinois Biometric Information Privacy Act
Illinois law regulating the collection and handling of biometric identifiers such as fingerprints and facial geometry, with a private right of action.
Personal Information Protection Act (South Korea)
South Korea's comprehensive data protection law, one of the strictest globally, governing the processing of personal information by public and private entities.
Argentina Personal Data Protection Act (Law 25.326)
Argentina's foundational data protection law, recognized as EU-adequate, governing processing of personal data and habeas data rights.
Federal Law on Protection of Personal Data Held by Private Parties (Mexico)
Mexico's federal privacy law governing how private-sector entities collect and process personal data, centered on the privacy notice and ARCO rights.
Colombia General Data Protection Law (Law 1581 of 2012)
Colombia's general data protection law governing the processing of personal data, requiring database registration and authorization from data subjects.
Chile Law 19.628 on the Protection of Private Life
Chile's data protection law on the processing of personal data, recently overhauled by Law 21.719 to align with modern GDPR-style standards.
Philippines Data Privacy Act of 2012 (Republic Act 10173)
The Philippines' comprehensive data privacy law protecting personal information in government and private systems, enforced by the National Privacy Commission.
Indonesia Personal Data Protection Law (Law No. 27 of 2022)
Indonesia's first comprehensive personal data protection law, modeled on the GDPR, governing data controllers and processors across all sectors.
Vietnam Personal Data Protection Decree (Decree 13/2023/ND-CP)
Vietnam's foundational personal data protection regulation establishing consent, data subject rights, and cross-border transfer impact assessments.
Malaysia Personal Data Protection Act 2010
Malaysia's data protection law regulating the processing of personal data in commercial transactions, recently amended to add breach notification and a DPO duty.
Israel Protection of Privacy Law, 5741-1981
Israel's foundational privacy law governing databases of personal information, recognized as EU-adequate and modernized by Amendment 13.
Egypt Personal Data Protection Law (Law No. 151 of 2020)
Egypt's first comprehensive data protection law governing electronic personal data, requiring licensing, consent, and a data protection officer.
Ghana Data Protection Act, 2012 (Act 843)
Ghana's data protection law regulating the processing of personal data and requiring registration of data controllers with the Data Protection Commission.
FAQs6
What data does Vibgrate collect?
Vibgrate is privacy-first. It NEVER reads source code (only manifest/config files), never scans for secrets, never reads environment values, never acc...
What does --max-privacy mode do?
--max-privacy enables hardened privacy mode: runs only minimal scanners, writes no local artifacts (.vibgrate/*.json), and reduces data collection to ...
What is GDPR in a nutshell?
The General Data Protection Regulation (GDPR) is an EU law that governs how organizations collect, process, and store the personal data of people in t...
What is PII (personally identifiable information)?
PII is any data that can identify a specific individual, either on its own or when combined with other information. Direct identifiers include name, e...
What is HIPAA compliance?
HIPAA (the Health Insurance Portability and Accountability Act) is a US law that sets standards for protecting sensitive patient health information, k...
Can I scan for vulnerabilities offline or air-gapped?
Yes. `vg scan --vulns` queries the OSV database over the network by default, but you can supply advisories in a package-version manifest and run fully...