Morrison Foerster is an international law firm with lawyers practicing throughout the United States, Asia, and Europe. Click to discover more.

mofo_share_image.jpg

Morrison Foerster

favicon.ico

favicon-16x16.png

favicon-32x32.png

apple-touch-icon.png

MoFo Favicons

Terms / Notices

Cookies

Privacy Policy

Attorney Advertising

Secure Login

Alumni

  Facebook

MoFo Facebook

  Linkedin

MoFo LinkedIN

Twitter

MoFo Twitter

YouTube

MoFo Youtube

Morrison Foerster - Footer

You have not solved the recaptcha challenge yet or session expired, try again.

Disclaimer

Unsolicited e-mails and information sent to Morrison & Foerster will not be considered confidential, may be disclosed to others pursuant to our <a href="https://www.mofo.com/about/privacy-policy.html">Privacy Policy</a>, may not receive a response, and do not create an attorney-client relationship with Morrison & Foerster. If you are not already a client of Morrison & Foerster, do not include any confidential information in this message. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.

Feedback

mofo-logo-2022.svg

People

Capabilities

Resources

About

Culture

Offices

Careers

Stay Connected

The number of data privacy laws around the world has skyrocketed in recent years. As of January 2021, 133 jurisdictions around the world have enacted omnibus data privacy laws; 102 of those laws are in jurisdictions outside the European Economic Area (EEA).

Catch Up on Privacy Around the World on Data Privacy Day 2021!

About Morrison Forester

people-default-header-desktop.jpg

people-default-header-mobile.jpg

Default Meta Data

The number of data privacy laws around the world has skyrocketed in recent years. As of January 2021, 133 jurisdictions around the world have enacted omnibus data privacy laws; 102 of those laws <a href="#_ftn1" name="_ftnref1" id="_ftnref1">[1]</a> are in jurisdictions outside the European Economic Area (EEA). <a href="#_ftn2" name="_ftnref2" id="_ftnref2">[2]</a> Sixty of these laws were enacted in the past 10 years and half of those within the past five years. In the next couple of years alone, we may see as many as 12 or more new or updated laws enacted or introduced into national legislatures.One-third of the laws outside the EEA are in the Africa and the Near East region (34) while the rest of the laws are distributed relatively equally among the Americas (25), Europe/Eurasia (24), and Asia‑Pacific (19). While most of these laws share the same core data protection principles, they each have their own specific rules that differ from each other and make it challenging for companies to develop global or regional privacy compliance approaches.These four insights provide an overview of global privacy for 2021:<ul><li><a href="/resources/insights/210112-one-size-fits-all.html">A One Size Fits All Approach Doesn't Work for Europe and Eurasia</a></li><li><a href="/resources/insights/210111-africa-near-east-privacy-rules.html">Out of Africa (and the Near East): Privacy Rules Come at Rapid Pace</a></li><li><a href="/resources/insights/210106-future-privacy-landscape.html">Assessing the Current and Future Privacy Landscape in the Americas</a></li><li><a href="/resources/insights/210104-transformation-privacy-landscape-asia.html">Transformation of the Privacy Landscape in Asia</a></li></ul><img class="img-responsive mt-5" src="https://media2.mofo.com/v3/assets/blt5775cc69c999c255/blt6e028273e0bc2914/6273ef7b23c6cf2a1c3b0e74/210715-world-privacy-map.png" alt="World Privacy Map" type="asset" sys-style-type="download"><a href="#_ftnref1" name="_ftn1" id="_ftn1">[1]</a> This includes three jurisdictions (China, India, and Indonesia) that have de facto national privacy laws and one jurisdiction (the United Arab Emirates) that has omnibus privacy laws applicable to their two free trade zones.<a href="#_ftnref2" name="_ftn2" id="_ftn2">[2]</a> With the departure of the United Kingdom from the European Union (EU) in January 2020, there are now 30 Member States of the EEA: the current 27 EU Member States (Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Italy, Ireland, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Poland, Portugal, Romania, Spain, Slovakia, Slovenia, and Sweden), Iceland, Liechtenstein, and Norway. The EU General Data Protection Regulation (GDPR) applies in all EEA countries. Effective January 1, 2021, the UK has agreed to maintain its current General Data Protection Regulation (GDPR) data protection rules for up to six months (until June 30, 2021) under the terms of the Trade and Cooperation Agreement reached between the EU and the UK. Therefore, we are still grouping the UK together with the EEA Member States in this article for the purpose of distinguishing between jurisdictions covered by the GDPR and those that are not.

Catch Up on Privacy Around the World on Data Privacy Day 2021!

Sign Up

Privacy + Data Security

This includes three jurisdictions (China, India, and Indonesia) that have de facto national privacy laws and one jurisdiction (the United Arab Emirates) that has omnibus privacy laws applicable to their two free trade zones.With the departure of the United Kingdom from the European Union (EU) in January 2020, there are now 30 Member States of the EEA: the current 27 EU Member States (Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Italy, Ireland, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Poland, Portugal, Romania, Spain, Slovakia, Slovenia, and Sweden), Iceland, Liechtenstein, and Norway. The EU General Data Protection Regulation (GDPR) applies in all EEA countries. Effective January 1, 2021, the UK has agreed to maintain its current General Data Protection Regulation (GDPR) data protection rules for up to six months (until June 30, 2021) under the terms of the Trade and Cooperation Agreement reached between the EU and the UK. Therefore, we are still grouping the UK together with the EEA Member States in this article for the purpose of distinguishing between jurisdictions covered by the GDPR and those that are not.