APAC Jurisdictional Comparison Of Data Protection Rules.pdf

- EU / UK:
- General Data Protection Regulation (GDPR) is the key data protection law.
- APEC Privacy Framework and ASEAN Framework are available for reference.

- China:
- Key laws include Cyber Security Law (CSL), General Principles of Civil Law, PRC Criminal Law, Decision on Strengthening the Protection of Online Information, Measures on the Protection of Personal Data, and Administrative Measures for Multiple Level Protection System.
- National standards like Information Security Technology - Personal Information Security Specification also apply.

- India:
- Personal data protection regulations are contained in the Information Technology Act 2000 and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011.
- The Personal Data Protection Bill is under consideration to establish a Data Protection Authority.

- Hong Kong:
- Personal Data (Privacy) Ordinance (Cap. 486) is the primary law, administered by the Office of the Privacy Commissioner for Personal Data.

- Singapore:
- Personal Data Protection Act 2012 is the key law, administered by the Personal Data Protection Commission.

- Malaysia:
- Personal Data Protection Act 2010 is the primary law, administered by the Personal Data Protection Commissioner.

- Thailand:
- There is no general law on personal data protection. Key regulations include Law No. 11 of 2008 on Electronic Information and Transactions, Government Regulation No. 71 of 2019, and Minister of Communication and Informatics Regulation No. 20 of 2016.

- Indonesia:
- There is no general law on personal data protection. Sectoral legislation may apply.

- Philippines:
- Data Privacy Act of 2012 is the comprehensive law, administered by the National Privacy Commission.

- Vietnam:
- Law on Network Information Security (86/2015/QH13) is the most comprehensive law on personal information protection.

- Japan:
- Act on the Protection of Personal Information (APPI) is the primary law, fully effective since 30 May 2017.

- Australia:
- Privacy Act 1988 is the key law, administered by the Office of the Australian Information Commissioner.

- New Zealand:
- Privacy Act 2020 is the primary law, administered by the Privacy Commissioner.