In response to the global pandemic, data protection authorities around the world are issuing their own COVID-19-specific privacy guidance. In addition, many governments have set up specific webpages with local COVID-19 information. To help you stay current, we are monitoring these developments and will update these links as more guidance becomes available.
If you are having trouble using the map, you may access the links in text format below.
- Albania: Information and Data Protection Commissioner
- Andorra: Data Protection Agency
- Argentina: National Directorate for the Protection of Personal Data
- Australia: Office of the Australian Information Commissioner (OAIC), Department of Health
- Austria: Austrian Data Protection Authority – General Guidance; Remote Work Guidance
- Belgium: Belgian Data Protection Authority – Guidance: Work; Health Apps; Temperature Taking Guidance
- Bermuda: Office of the Privacy Commissioner – Guidance, Ministry of National Security – Remote Work Guidance
- Bulgaria: Personal Data Protection Commission – Statement
- Canada: Office of the Privacy Commissioner, Alberta’s Office of the Information and Privacy Commissioner – Remote Work Guidance, British Columbia’s Office of the Information and Privacy Commissioner, Quebec’s Commission d'accès à l'information – General Guidance; Access Requests
- China: Cybersecurity Administration (CAC) – CAC Circular, State Council – Work Resumption Guidance
- Colombia: Superintendence of Industry and Commerce (DPA) – External Circular No. 2
- Croatia: Personal Data Protection Agency
- Czech Republic: Office for Personal Data Protection – General Guidance; FAQs
- Denmark: Datatilsynet (DPA) (General Guidance; Press Release; Remote Work Guidance); National Cyber Security Center
- Estonia: Data Protection Inspectorate
- EU: European Data Protection Board (EDPB)
- Finland: Office of the Data Protection Ombudsman – General Guidance; FAQs
- France: Commission Nationale de l’Informatique et des Libertés (CNIL) – COVID-19 Resource Center
- Georgia: The State Inspector’s Service (DPA)
- Germany: Federal and State Data Protection Authorities – COVID-19 Resource Center
- Gibraltar: Gibraltar Regulatory Authority
- Greece: Hellenic Data Protection Authority
- Guernsey: Office of the Data Protection Authority – Statement
- Hong Kong: Privacy Commissioner for Personal Data – Employer Guidance; Use of Information on Social Media, Centre for Health Protection
- Hungary: Hungarian National Authority for Data Protection and Freedom of Information – Guidance (March 2), Decree
- Iceland: Persónuvernd (DPA) – Guidance - March 6; Guidance - March 13
- Ireland: Data Protection Commission – General Guidance; Remote Work Guidance
- Israel: Privacy Protection Authority
- Italy: Garante – DIY Data Collection; COVID-19 FAQs; Blood Testing Guidance
- Japan: Personal Information Protection Commission – Guidance, Contact Tracing App Opinion, Ministry of Health, Labor and Welfare (MHLW) – COVID-19 Page, FAQs, Japanese Society of Travel and Health (“JSTH”) and the Japan Society for Occupational Health (“JSOH”) – Guidance (March 2), Guidance (March 24)
- Jersey: Office of the Information Commissioner – General Guidance; Remote Work Guidance
- Latvia: State Data Inspectorate
- Liechtenstein: Data Protection Authority – General Guidance; Remote Work Guidance
- Lithuania: State Data Protection Inspectorate – Updated COVID-19 Guidance (April 22, 2020), General Guidance (March 23); Remote Work; Occupational Health Data
- Luxembourg: National Commission for Data Protection
- Malta: Office of the Information and Data Protection Commissioner
- Mauritius: Data Protection Authority – Guidance
- Mexico: National Institute for Transparency, Access to Information and Personal Data Protection (INAI) – COVID-19 micro website; Guidance (March 13); Guidance (April 2), Remote Work Guidance
- Moldova: Data Protection Authority – Guidance
- Monaco: Personal Data Protection Supervisory Commission – Guidance
- Netherlands: Personal Data Authority – Workplace Guidance; Remote Work Guidance; Use of Location Data
- New Zealand: Office of the Privacy Commissioner
- Nigeria: National Information Technology Development Agency (DPA)
- North Macedonia: Personal Data Protection Agency
- Norway: Datatilsynet (DPA)
- Panama: National Authority for Transparency and Access to Information (DPA)
- Peru: National Authority for the Protection of Personal Data – Advisory Opinion; Patient Data
- Philippines: National Privacy Commission
- Poland: Personal Data Protection Office – Statement; Remote Work Guidance
- Portugal: National Data Protection Commission – Collection of employee health data, Guidance on monitoring of employees working remotely
- Romania: National Supervisory Authority for Personal Data Processing
- Russia: Roskomnadzor
- San Marino: Data Protection Authority – Legislative Decree, Health Authority
- Serbia: Commissioner for Information of Public Importance and Personal Data Protection (DPA) – Statement
- Singapore: Personal Data Protection Commission (PDPC), Government of Singapore Ministry of Health, Ministry of Manpower
- Slovakia: Office for Personal Data Protection – Guidance (March 13, 2020), Guidance on temperature checks
- Slovenia: Data Protection Authority – Remote Work Guidance
- South Africa: Information Regulator – Guidance
- Spain: Spanish Data Protection Authority – Guidance; FAQs; Remote Work Guidance; Guidance on temperature checks
- Sweden: Data Protection Authority
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
- Turkey: Personal Data Protection Authority – Statement; Guidance & FAQs; Location Data
- Uganda: National Information Technology Authority – Remote Work Guidance
- United Kingdom: Information Commissioner’s Office (ICO), UK Government, National Cyber Security Centre – Remote Work Guidance
- United States: Center for Disease Control (CDC), FDA Emergency Preparedness: Novel Coronavirus (COVID-19)
- Uruguay: Regulatory and Personal Data Control Unit – Opinion No. 2/020, Recommendations - Coronavirus COVID-19