{ "schemaVersion": 1, "reviewedAt": "2026-08-21", "inventoryState": "official_sources_discovered_not_claim_reviewed", "methodology": "This is a source-discovery inventory for the P1 and expanding P2 queue tranches. The URLs were located on government, regulator, or official legislative sites; their presence does not certify the current legal meaning of every provision, effective-date status, translation, exception, penalty, or broker-specific route.", "records": [ { "isoAlpha3": "BGD", "name": "Bangladesh", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "Bengali" ], "controllingTextBoundary": "The Bengali statutory or gazette text must control. No English translation has been treated as authoritative.", "fieldsReviewed": [ "official_ordinance_listing_location", "official_law_and_rules_listing_location", "official_gazette_archive_location" ], "sources": [ { "title": "Bangladesh Legislative and Parliamentary Affairs Division: 2025 ordinances", "url": "https://legislativediv.gov.bd/pages/static-pages/694032c335ce18e1c0561ff1", "sourceType": "government_ordinance_index", "purpose": "Locate the official listing for the Personal Data Protection Ordinance, 2025 and its ordinance number/date.", "checkedAt": "2026-08-21" }, { "title": "National Cyber Security Agency Bangladesh: Acts and Rules", "url": "https://ncsa.gov.bd/site/page/50cf7d8c-954c-413f-8f23-eee744a1cd8d/Acts-%26-Rules", "sourceType": "government_law_index", "purpose": "Locate the government-hosted PDF entry for the Personal Data Protection Ordinance, 2025.", "checkedAt": "2026-08-21" }, { "title": "Bangladesh Government Press: 2025 extraordinary gazette archive", "url": "https://www.dpp.gov.bd/bgpress/index.php/document/extraordinary_gazettes_month_wise/2025", "sourceType": "official_gazette_archive", "purpose": "Reconcile the exact gazette publication and retrieve the controlling gazette text during claim review.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "complete_controlling_ordinance_text_and_amendments", "commencement_and_transitional_status", "current_supervisory_or_enforcement_authority", "official_rights_and_request_guidance", "official_complaint_or_redress_route", "effective_penalties_and_exceptions", "jurisdiction_specific_data_broker_or_public_record_routes", "official_translation_control", "complete_claim_by_claim_currentness" ], "notes": "The inventory identifies official locations only. The ordinance text, commencement, institutional arrangements, rights procedure, exceptions, and any broker-specific route must be reviewed in Bengali against the gazette before any legal page is drafted or promoted." }, { "isoAlpha3": "CHL", "name": "Chile", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "Spanish" ], "controllingTextBoundary": "Spanish text on Ley Chile controls. The future commencement and transition provisions must be checked against the current version before describing the operative regime.", "fieldsReviewed": [ "official_new_privacy_law_location", "official_existing_privacy_law_location", "official_rights_guidance_location" ], "sources": [ { "title": "Ley Chile: Law 21.719 on personal-data protection and the Personal Data Protection Agency", "url": "https://nuevo.leychile.cl/navegar?idNorma=1209272", "sourceType": "official_legislation", "purpose": "Review the enacted statutory text, commencement rule, transition provisions, agency provisions, and rights framework.", "checkedAt": "2026-08-21" }, { "title": "Ley Chile: Law 19.628 on private life and personal data", "url": "https://nuevo.leychile.cl/navegar?idNorma=141599", "sourceType": "official_legislation", "purpose": "Compare the current and future-version statutory text and identify the pre-commencement baseline.", "checkedAt": "2026-08-21" }, { "title": "Council for Transparency of Chile: Personal-data protection and ARCO rights", "url": "https://www.consejotransparencia.cl/informes/datos-personales/", "sourceType": "official_guidance", "purpose": "Locate public rights guidance and identify which guidance remains relevant during the statutory transition.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "operative_pre_commencement_regime_on_review_date", "law_21719_commencement_and_transition_claims", "agency_establishment_and_current_operational_status", "complete_current_rights_and_exceptions", "current_complaint_and_enforcement_route", "amendments_and_sector_specific_rules", "jurisdiction_specific_data_broker_or_public_record_routes", "complete_claim_by_claim_currentness" ], "notes": "Law 21.719 and Law 19.628 must be reconciled by effective date and provision. The Council for Transparency page is a guidance lead, not proof of the future agency's operational status. No route or legal outcome is inferred from this inventory." }, { "isoAlpha3": "COL", "name": "Colombia", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "Spanish" ], "controllingTextBoundary": "Spanish statutory and regulatory text controls. Government summaries and translations are secondary to the official Colombian text.", "fieldsReviewed": [ "official_law_listing_location", "official_law_text_location", "official_supervisory_authority_location", "official_normative_compilation_location" ], "sources": [ { "title": "Superintendence of Industry and Commerce: Statutory Law 1581 of 2012", "url": "https://sedeelectronica.sic.gov.co/transparencia/normativa/ley-estatutaria-1581-de-2012", "sourceType": "regulator_legislation_index", "purpose": "Locate the SIC-hosted law entry and official PDF for the general personal-data protection regime.", "checkedAt": "2026-08-21" }, { "title": "Superintendence of Industry and Commerce: Law 1581 of 2012 PDF", "url": "https://sedeelectronica.sic.gov.co/sites/default/files/normatividad/Ley_1581_2012.pdf", "sourceType": "regulator_legislation", "purpose": "Review the controlling Spanish statutory text, rights, procedures, exceptions, and application provisions.", "checkedAt": "2026-08-21" }, { "title": "Superintendence of Industry and Commerce: Personal Data Protection Delegation", "url": "https://sedeelectronica.sic.gov.co/transparencia/informacion-de-la-entidad/organigrama/delegatura-de-proteccion-de-datos-personales", "sourceType": "regulator_authority", "purpose": "Confirm the current supervisory and enforcement authority lead and identify the complaint/procedure materials for review.", "checkedAt": "2026-08-21" }, { "title": "Public Function Administrative Department: Law 1581 of 2012 normative record", "url": "https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=49981", "sourceType": "government_normative_database", "purpose": "Cross-check promulgation, entry-into-force metadata, incorporated regulations, and the current normative record.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_consolidated_law_and_regulatory_text", "decree_and_sector_rule_interactions", "complete_rights_deadlines_exceptions_and_remedies", "current_sic_complaint_procedure_and_request_forms", "financial_habeas_data_boundary_and_sector_authority_split", "current_cross_border_transfer_rules", "jurisdiction_specific_data_broker_or_public_record_routes", "complete_claim_by_claim_currentness" ], "notes": "The SIC and government normative sources provide a strong starting set, but this record is still source discovery. The general regime must be separated from financial-habeas-data and sector-specific rules before drafting an indexable guide." }, { "isoAlpha3": "EGY", "name": "Egypt", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "Arabic", "English reference materials" ], "controllingTextBoundary": "Arabic law and regulations control. PDPC English materials are reference material and require comparison with the Arabic text before precise legal claims are published.", "fieldsReviewed": [ "official_data_protection_center_location", "official_law_identity_location", "official_current_guidance_location" ], "sources": [ { "title": "Egyptian Personal Data Protection Center", "url": "https://www.pdpc.gov.eg/", "sourceType": "regulator_authority_and_framework", "purpose": "Locate the current authority, legal-framework materials, rights information, guidance, and complaint/service routes.", "checkedAt": "2026-08-21" }, { "title": "State Information Service: Law No. 151 of 2020 on personal data protection", "url": "https://sis.gov.eg/en/media-center/news/sisi-endorses-law-on-personal-data-protection/", "sourceType": "government_law_announcement", "purpose": "Confirm the official presidential-law announcement and locate the official-gazette/statutory text trail.", "checkedAt": "2026-08-21" }, { "title": "PDPC: Data Protection Officer Guidelines", "url": "https://pdpc.gov.eg/assets/pdf-data/Guidelines/DPO.pdf", "sourceType": "regulator_guidance_pdf", "purpose": "Review current regulator guidance on data-subject requests, complaints, and organizational contact points.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "complete_arabic_law_and_executive_regulations_text", "commencement_and_transitional_status", "current_pdpc_licensing_and_complaint_procedure", "complete_data_subject_rights_and_exceptions", "direct_marketing_and_cross_border_transfer_rules_by_claim", "current_penalties_and_enforcement_application", "jurisdiction_specific_data_broker_or_public_record_routes", "official_translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "The PDPC home page identifies the current legal-framework materials and authority, but it does not replace claim-level review of the Arabic statute, regulations, commencement, exceptions, and procedures. No broker route or removal outcome is inferred." }, { "isoAlpha3": "IDN", "name": "Indonesia", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "Indonesian", "English reference materials" ], "controllingTextBoundary": "Indonesian statutory and regulatory text controls. Any English rendering is a reference aid only.", "fieldsReviewed": [ "official_statute_location", "official_statute_metadata_location", "official_implementation_status_lead", "official_judicial_update_lead" ], "sources": [ { "title": "JDIH Kemkomdigi: Law No. 27 of 2022 on Personal Data Protection", "url": "https://jdih.komdigi.go.id/produk_hukum/view/id/832/t/undangundang%2Bnomor%2B27%2Btahun%2B2022", "sourceType": "government_legislation", "purpose": "Review the official Indonesian text, scope, rights, processing rules, transfers, authority provisions, and commencement text.", "checkedAt": "2026-08-21" }, { "title": "BPK legal database: Law No. 27 of 2022", "url": "https://peraturan.bpk.go.id/Details/229798/uu-no-27-tahun-2022", "sourceType": "official_legal_database", "purpose": "Cross-check metadata, current normative status, related regulations, and judicial-update indicators.", "checkedAt": "2026-08-21" }, { "title": "JDIH Kemkomdigi: official reference translation of Law No. 27 of 2022", "url": "https://jdih.komdigi.go.id/index.php/produk_hukum/unduhTerjemahan/id/832/t/undangundang%2Bnomor%2B27%2Btahun%2B2022", "sourceType": "government_reference_translation", "purpose": "Use only as a translation aid while keeping the Indonesian text controlling.", "checkedAt": "2026-08-21" }, { "title": "JDIH Kemkomdigi: 2025 implementation-regulation harmonization update", "url": "https://jdih.komdigi.go.id/berita/view/105", "sourceType": "government_currentness_update", "purpose": "Identify the implementation-rule status that must be checked before describing operative procedures or enforcement.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_implementing_regulations_and_authority_status", "complete_current_text_after_judicial_updates", "rights_procedures_deadlines_and_exceptions", "current_cross_border_transfer_rules", "current_penalties_and_enforcement_application", "official_complaint_or_redress_route", "jurisdiction_specific_data_broker_or_public_record_routes", "translation_alignment_with_indonesian_text", "complete_claim_by_claim_currentness" ], "notes": "The law is locatable in official government sources, but the 2025 implementation-rule status lead and judicial-update indicators require reconciliation before drafting precise rights, authority, penalty, or procedure claims. No route or outcome is inferred from the inventory." }, { "isoAlpha3": "ISR", "name": "Israel", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "Hebrew", "English reference materials" ], "controllingTextBoundary": "Hebrew legislation and regulations control. Government English translations are reference material only.", "fieldsReviewed": [ "official_privacy_law_location", "official_amendment_metadata_location", "official_privacy_authority_location", "official_enforcement_guidance_location" ], "sources": [ { "title": "Knesset National Legislation Database: Protection of Privacy Law, 5741-1981", "url": "https://main.knesset.gov.il/Activity/Legislation/Laws/pages/lawprimary.aspx?lawitemid=2000234", "sourceType": "official_legislation", "purpose": "Review the current Hebrew law, amendments, validity metadata, and connected secondary legislation.", "checkedAt": "2026-08-21" }, { "title": "Israel Privacy Protection Authority: legal information collection", "url": "https://www.gov.il/en/collectors/legalinfo?officeId=4aadba43-3d71-4e7c-a4fe-5bf47b723d4e", "sourceType": "regulator_legislation_and_guidance_index", "purpose": "Locate current PPA regulations, guidance, transfer materials, and amendment-related publications.", "checkedAt": "2026-08-21" }, { "title": "Israel Privacy Protection Authority: enforcement and sanctions", "url": "https://www.gov.il/he/pages/sanctions_enforcement?chapterindex=1", "sourceType": "regulator_enforcement_guidance", "purpose": "Locate official enforcement and complaint-related material for a later claim-level review.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "complete_hebrew_statutory_text_and_amendments", "2024_amendment_commencement_and_transition", "current_regulator_structure_and_powers", "complete_rights_exceptions_and_procedures", "current_complaint_route", "current_transfer_and_security_rules", "jurisdiction_specific_data_broker_or_public_record_routes", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "The Knesset source identifies the law and amendment trail; the PPA sources identify current guidance leads. The record is not a claim review and does not assume that an English translation captures the current Hebrew text." }, { "isoAlpha3": "KAZ", "name": "Kazakhstan", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "Kazakh", "Russian", "English reference translation" ], "controllingTextBoundary": "Kazakh and Russian official texts control. The Adilet English page is explicitly an unofficial translation and cannot control precise claims.", "fieldsReviewed": [ "official_law_location", "official_change_log_location", "official_authorized_body_location", "official_current_guidance_location" ], "sources": [ { "title": "Adilet Legal Information System: Law on Personal Data and Their Protection", "url": "https://adilet.zan.kz/eng/docs/Z1300000094", "sourceType": "official_legal_database_reference_translation", "purpose": "Locate the law, change log, references, and an English research aid while routing final review to the controlling-language text.", "checkedAt": "2026-08-21" }, { "title": "Government of Kazakhstan legal portal: Law on Personal Data and Their Protection", "url": "https://www.gov.kz/memleket/entities/karaganda/documents/details/189610?lang=ru", "sourceType": "government_legislation", "purpose": "Locate an official Russian-language text and compare amendments, authority provisions, and rights language.", "checkedAt": "2026-08-21" }, { "title": "Government of Kazakhstan: personal-data protection authority guidance", "url": "https://www.gov.kz/memleket/entities/infsecurity/activities/9552?parentId=6", "sourceType": "government_authority_guidance", "purpose": "Locate current competent-authority, complaint, and enforcement guidance, including any institutional changes.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "complete_kazakh_and_russian_current_text", "2025_and_2026_amendment_effective_dates", "competent_authority_current_identity", "complete_rights_and_request_procedure", "current_complaint_and_enforcement_route", "cross_border_and_localization_rules", "jurisdiction_specific_data_broker_or_public_record_routes", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "The Adilet page exposes 2025 and 2026 amendments with delayed or conditional effectiveness in the English reference view. Those amendments, effective dates, and the current authority must be reconciled in the controlling languages before publication." }, { "isoAlpha3": "MEX", "name": "Mexico", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "Spanish" ], "controllingTextBoundary": "Spanish federal laws, Diario Oficial materials, and current government authority guidance control.", "fieldsReviewed": [ "official_private_sector_law_location", "official_federal_law_catalog_location", "current_data_protection_authority_location", "2025_reform_trail_location" ], "sources": [ { "title": "Orden Jurídico Nacional: Federal Law on Protection of Personal Data Held by Private Parties", "url": "https://www.ordenjuridico.gob.mx/Documentos/Federal/html/wo125102.html", "sourceType": "official_legal_portal", "purpose": "Review the current federal private-sector statute and its 2025 publication/reform text.", "checkedAt": "2026-08-21" }, { "title": "Chamber of Deputies: Federal Laws catalog and LFPDPPP PDF", "url": "https://www.diputados.gob.mx/LeyesBiblio/pdf/LFPDPPP.pdf", "sourceType": "official_legislation_reference", "purpose": "Cross-check the current federal text, publication metadata, and subsequent reform references.", "checkedAt": "2026-08-21" }, { "title": "Transparencia para el Pueblo: federal transparency and data-protection authority information", "url": "https://transparencia.gob.mx/", "sourceType": "government_authority", "purpose": "Locate the post-2025 federal institutional and data-protection guidance trail, separating private-party and public-sector competence.", "checkedAt": "2026-08-21" }, { "title": "Secretariat of Anti-Corruption and Good Government: 2025 data-protection reform announcement", "url": "https://www.gob.mx/buengobierno/prensa/buen-gobierno-presenta-reformas-legales-para-mayor-transparencia-y-proteccion-de-datos-personales", "sourceType": "government_currentness_update", "purpose": "Trace the institutional and legislative transition that must be reconciled before naming the current authority.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_private_sector_statute_consolidation", "2025_reform_and_2025_amendment_effects", "private_party_authority_and_complaint_competence", "public_sector_and_private_sector_boundary", "complete_arco_rights_procedure_and_exceptions", "current_regulations_and_sector_rules", "jurisdiction_specific_data_broker_or_public_record_routes", "complete_claim_by_claim_currentness" ], "notes": "Mexico's 2025 legislative and institutional changes make authority naming and current-text reconciliation essential. This inventory does not carry forward the former INAI as a current authority and does not infer a private-party route." }, { "isoAlpha3": "NGA", "name": "Nigeria", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "English" ], "controllingTextBoundary": "The enacted Nigerian statute and current NDPC materials control; draft guidance is not treated as law.", "fieldsReviewed": [ "official_act_location", "official_regulator_location", "official_rights_guidance_location", "official_request_form_location" ], "sources": [ { "title": "Nigeria Data Protection Commission: Nigeria Data Protection Act 2023", "url": "https://www.ndpc.gov.ng/ndp-act-2023/", "sourceType": "regulator_legislation", "purpose": "Locate the Act download and official NDPC implementation materials.", "checkedAt": "2026-08-21" }, { "title": "Nigeria Data Protection Commission: FAQs", "url": "https://www.ndpc.gov.ng/faqs/", "sourceType": "regulator_guidance", "purpose": "Locate official explanations of the Act, data-subject rights, and recourse that can be audited claim by claim.", "checkedAt": "2026-08-21" }, { "title": "Nigeria Data Protection Commission: data-subject access request form", "url": "https://forms.ndpc.gov.ng/dsar-request/", "sourceType": "regulator_request_guidance", "purpose": "Review the current official access-request channel, required information, and stated response handling.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "complete_act_text_and_current_amendments", "current_regulations_and_codes", "complete_rights_exceptions_and_deadlines", "current_ndpc_complaint_and_enforcement_procedure", "data_broker_and_public_record_scope", "sector_specific_rules", "cross_border_transfer_currentness", "complete_claim_by_claim_currentness" ], "notes": "The NDPC source set includes the Act, current FAQ material, and a request form. The form is evidence of a regulator request channel, not evidence that a broker or any individual controller must accept a particular route." }, { "isoAlpha3": "PAK", "name": "Pakistan", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "English" ], "controllingTextBoundary": "Parliamentary and ministry bill/draft materials are not treated as an enacted statute. Enactment, commencement, and authority status must be independently confirmed.", "legislativePosture": "bill_or_draft_sources_only", "fieldsReviewed": [ "official_senate_bill_record_location", "official_ministry_draft_location" ], "sources": [ { "title": "Senate of Pakistan: Personal Data Protection Bill, 2023 record", "url": "https://senate.gov.pk/en/billsummary.php?bid=1182", "sourceType": "parliamentary_bill_record", "purpose": "Check the legislative status of the 2023 bill and whether it was passed, withdrawn, or replaced.", "checkedAt": "2026-08-21" }, { "title": "Ministry of IT and Telecom: Personal Data Protection Bill 2020 draft", "url": "https://moitt.gov.pk/SiteImage/Legislations/Personal%20Data%20Protection%20Bill%202020.pdf", "sourceType": "government_draft_bill", "purpose": "Locate the earlier official draft only as legislative history; do not present it as operative law.", "checkedAt": "2026-08-21" }, { "title": "Ministry of IT and Telecom: Final Draft Personal Data Protection Bill May 2023", "url": "https://www.moitt.gov.pk/SiteImage/Misc/files/Final%20Draft%20Personal%20Data%20Protection%20Bill%20May%202023.pdf", "sourceType": "government_draft_bill", "purpose": "Compare the latest located draft against the parliamentary record and identify unresolved enactment/commencement questions.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "whether_an_enacted_personal_data_law_exists_on_review_date", "commencement_and_transitional_status", "current_supervisory_authority", "current_rights_and_request_procedure", "current_complaint_and_enforcement_route", "official_gazette_or_enacted_text", "jurisdiction_specific_data_broker_or_public_record_routes", "complete_claim_by_claim_currentness" ], "notes": "Pakistan is deliberately marked as bill/draft-only in this tranche. The located materials cannot support a statement that a Personal Data Protection Act is operative, nor can they support a consumer route, until the current legislative record and official gazette are reconciled." }, { "isoAlpha3": "PER", "name": "Peru", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "Spanish" ], "controllingTextBoundary": "Spanish law, regulations, and ANPD materials control.", "fieldsReviewed": [ "official_statute_location", "official_regulator_location", "official_current_regulation_location", "official_request_and_complaint_hub_location" ], "sources": [ { "title": "Peruvian Congress: Law No. 29733 on personal-data protection", "url": "https://www.gob.pe/institucion/congreso-de-la-republica/normas-legales/243470-29733", "sourceType": "official_legislation", "purpose": "Locate the statute and its official PDF for claim-level review.", "checkedAt": "2026-08-21" }, { "title": "National Authority for Personal Data Protection: institutional information", "url": "https://www.gob.pe/institucion/anpd/institucional", "sourceType": "regulator_authority", "purpose": "Locate the current ANPD mandate, functions, and public-facing compliance/complaint routes.", "checkedAt": "2026-08-21" }, { "title": "ANPD: Supreme Decree No. 016-2024-JUS regulation", "url": "https://www.gob.pe/institucion/anpd/normas-legales/6554453-n-016-2024-jus", "sourceType": "official_regulation", "purpose": "Review the current regulation and its relationship to Law No. 29733 before describing rights, deadlines, or obligations.", "checkedAt": "2026-08-21" }, { "title": "ANPD public hub: rights, complaints, and services", "url": "https://www.gob.pe/anpd", "sourceType": "regulator_rights_and_complaint_hub", "purpose": "Locate current rights exercise, complaint, registry, and public-record materials.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "complete_current_statute_and_regulation_reconciliation", "2024_regulation_transition_and_amendments", "complete_arco_rights_deadlines_and_exceptions", "current_complaint_and_sanction_procedure", "cross_border_and_broker_scope", "sector_specific_rules", "public_record_route_boundaries", "complete_claim_by_claim_currentness" ], "notes": "The ANPD source set is currentness-oriented, including the 2024 regulation and current public hub. No specific broker or public-record route is inferred from the existence of an ANPD rights or complaint service." }, { "isoAlpha3": "POL", "name": "Poland", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "Polish", "English reference materials" ], "controllingTextBoundary": "The GDPR, Polish implementing law, and Polish-language UODO materials control. UODO English pages are reference material.", "fieldsReviewed": [ "official_supervisory_authority_location", "official_rights_and_complaint_location", "official_eu_and_national_legislation_location" ], "sources": [ { "title": "UODO: rights and complaint information for citizens", "url": "https://www.uodo.gov.pl/en/p/for-citizens", "sourceType": "regulator_rights_and_complaint_guidance", "purpose": "Locate current rights, complaint, and request guidance from Poland's supervisory authority.", "checkedAt": "2026-08-21" }, { "title": "UODO: GDPR and accompanying acts", "url": "https://www.uodo.gov.pl/en/661", "sourceType": "regulator_legislation_index", "purpose": "Locate the controlling EU regulation and Polish accompanying legislation materials.", "checkedAt": "2026-08-21" }, { "title": "UODO: legislation in Polish", "url": "https://uodo.gov.pl/pl/404", "sourceType": "regulator_legislation", "purpose": "Use the Polish-language legal index for the claim-level and translation-controlled review.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_polish_implementing_law_text", "sector_specific_and_procedural_rules", "complete_rights_exceptions_and_deadlines", "current_uodo_complaint_procedure", "public_record_and_broker_route_scope", "cross_border_rules_and_eu_interactions", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "Poland requires a GDPR-plus-national-law review. UODO guidance is useful for rights and complaints, but it does not establish a universal route against data brokers or public-record publishers." }, { "isoAlpha3": "PRT", "name": "Portugal", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "Portuguese", "English reference materials" ], "controllingTextBoundary": "Portuguese law and CNPD materials control. Translations are reference aids only.", "fieldsReviewed": [ "official_implementing_law_location", "official_supervisory_authority_location", "official_rights_guidance_location" ], "sources": [ { "title": "Diário da República: Law No. 58/2019 implementing the GDPR", "url": "https://diariodarepublica.pt/dr/detalhe/lei/58-2019-123815982", "sourceType": "official_legislation", "purpose": "Review the national GDPR implementation law, CNPD role, procedures, and sanctions provisions.", "checkedAt": "2026-08-21" }, { "title": "CNPD: data-subject rights", "url": "https://www.cnpd.pt/cidadaos/direitos/", "sourceType": "regulator_rights_guidance", "purpose": "Locate current Portuguese rights guidance and response/complaint information.", "checkedAt": "2026-08-21" }, { "title": "CNPD: official website", "url": "https://www.cnpd.pt/", "sourceType": "regulator_authority", "purpose": "Locate current authority notices, complaint routes, decisions, and sector guidance.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_law_58_2019_amendments_and_interactions", "complete_rights_exceptions_and_deadlines", "current_cnpd_complaint_and_enforcement_procedure", "special_rules_for_public_records_and_brokers", "cross_border_and_sector_specific_rules", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "Portugal needs a GDPR and Law 58/2019 reconciliation. CNPD rights guidance can inform a later claim audit but is not evidence that a particular commercial data broker will honor a request." }, { "isoAlpha3": "ROU", "name": "Romania", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "Romanian", "English reference materials" ], "controllingTextBoundary": "Romanian legislation and ANSPDCP materials control. English explanations are reference material.", "fieldsReviewed": [ "official_national_implementation_law_location", "official_supervisory_authority_location", "official_rights_and_complaint_guidance_location" ], "sources": [ { "title": "Romanian Legislative Portal: Law No. 190/2018", "url": "https://legislatie.just.ro/Public/DetaliiDocument/220052", "sourceType": "official_legislation", "purpose": "Review the national measures implementing the GDPR, derogations, and current statutory text.", "checkedAt": "2026-08-21" }, { "title": "ANSPDCP: Law No. 190/2018 reference", "url": "https://www.dataprotection.ro/index.jsp?lang=en&page=Legea_nr_190_2018", "sourceType": "regulator_legislation_guidance", "purpose": "Cross-check the authority's current law reference and implementation materials.", "checkedAt": "2026-08-21" }, { "title": "ANSPDCP: data-subject rights FAQ", "url": "https://www.dataprotection.ro/index.jsp?lang=en&page=IntrebariFrecvente1", "sourceType": "regulator_rights_guidance", "purpose": "Locate current rights, request timing, and complaint guidance for claim-level review.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_romanian_implementing_law_and_amendments", "complete_gdpr_derogations_and_sector_rules", "complete_rights_exceptions_and_deadlines", "current_anspdcp_complaint_and_enforcement_procedure", "public_record_and_broker_route_scope", "cross_border_rules", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "Romania requires a Romanian-text review of Law 190/2018 alongside the GDPR and current ANSPDCP guidance. The authority's FAQ is a source lead, not a substitute for a claim-level legal review." }, { "isoAlpha3": "SAU", "name": "Saudi Arabia", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "Arabic", "English reference materials" ], "controllingTextBoundary": "Arabic law, regulations, and SDAIA materials control. SDAIA English guides are reference material only.", "fieldsReviewed": [ "official_statute_location", "official_sdaia_regulations_location", "official_compliance_guidance_location", "official_complaint_route_location" ], "sources": [ { "title": "Saudi Bureau of Experts: Personal Data Protection Law", "url": "https://laws.boe.gov.sa/BoeLaws/Laws/LawDetails/b7cfae89-828e-4994-b167-adaa00e37188/1?exec=3ba4582", "sourceType": "official_legislation", "purpose": "Review the current Arabic law, status, amendments, rights, complaints, penalties, and effective-date provisions.", "checkedAt": "2026-08-21" }, { "title": "SDAIA: laws and regulations", "url": "https://sdaia.gov.sa/en/SDAIA/about/Pages/RegulationsAndPolicies.aspx", "sourceType": "regulator_law_and_regulation_index", "purpose": "Locate current implementing regulations, standards, and policy materials issued by SDAIA.", "checkedAt": "2026-08-21" }, { "title": "SDAIA: Personal Data Protection Law knowledge center", "url": "https://dgp.sdaia.gov.sa/wps/portal/pdp/knowledgecenter/", "sourceType": "regulator_guidance_and_complaint_hub", "purpose": "Locate current guidance, rights information, and official complaint materials.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "complete_arabic_law_and_regulations_reconciliation", "effective_date_and_transition_by_provision", "complete_rights_exceptions_and_deadlines", "current_sdaia_complaint_and_enforcement_procedure", "cross_border_transfer_rules", "public_record_and_broker_route_scope", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "The Bureau of Experts page and SDAIA sources provide the official legal and guidance starting points. Precise commencement, rights, complaint, transfer, and penalty claims must be reconciled in Arabic before publication." }, { "isoAlpha3": "THA", "name": "Thailand", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "Thai", "English reference translation" ], "controllingTextBoundary": "Thai legislation and official PDPC/MDES materials control. The MDES English translation is explicitly unofficial.", "fieldsReviewed": [ "official_act_location", "official_ministry_law_index_location", "official_pdpc_authority_location", "official_complaint_route_location" ], "sources": [ { "title": "Thailand Ministry of Digital Economy and Society: Personal Data Protection Act", "url": "https://www.mdes.go.th/mission/detail/2319", "sourceType": "government_law_index", "purpose": "Locate Thai and English law materials, implementing instruments, and rights summaries.", "checkedAt": "2026-08-21" }, { "title": "MDES: Personal Data Protection Act B.E. 2562 unofficial translation", "url": "https://www.mdes.go.th/law/detail/3577", "sourceType": "government_reference_translation", "purpose": "Use as an English research aid while routing exact claims to Thai law and current implementing rules.", "checkedAt": "2026-08-21" }, { "title": "Thailand PDPC complaint portal", "url": "https://complaint.pdpc.or.th/", "sourceType": "regulator_complaint_portal", "purpose": "Locate the current official complaint channel and confirm whether its scope and procedure apply to the intended request.", "checkedAt": "2026-08-21" }, { "title": "MDES: PDPC contact and complaint information", "url": "https://www.mdes.go.th/news/detail/8539", "sourceType": "government_regulator_guidance", "purpose": "Cross-check official PDPC contact and complaint-channel announcements.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "complete_thai_act_and_subordinate_rules", "current_sector_exemptions_and_transitions", "complete_rights_exceptions_and_deadlines", "current_pdpc_complaint_and_enforcement_procedure", "cross_border_transfer_rules", "public_record_and_broker_route_scope", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "Thailand's source set distinguishes Thai law, an unofficial English translation, and the current complaint portal. The presence of a complaint portal does not establish a broker-specific deletion route or a guaranteed result." }, { "isoAlpha3": "TUR", "name": "Türkiye", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "Turkish", "English reference materials" ], "controllingTextBoundary": "Turkish legislation and KVKK materials control. KVKK English pages are reference material.", "fieldsReviewed": [ "official_law_location", "official_authority_location", "official_rights_guidance_location", "official_english_reference_location" ], "sources": [ { "title": "Grand National Assembly of Türkiye: Law No. 6698 text", "url": "https://cdn.tbmm.gov.tr/KKBSPublicFile/D26/Y1/T1/KanunMetni/49b3460d-3d92-413d-9a12-555cfa749b1f.html", "sourceType": "official_legislation", "purpose": "Locate the primary Turkish statute for claim-level review and amendment reconciliation.", "checkedAt": "2026-08-21" }, { "title": "Personal Data Protection Authority of Türkiye: data-subject rights", "url": "https://www.kvkk.gov.tr/Icerik/2036/Ilgili-Kisinin-Haklari", "sourceType": "regulator_rights_guidance", "purpose": "Locate current rights guidance and request/complaint procedure leads.", "checkedAt": "2026-08-21" }, { "title": "KVKK: Data Protection in Türkiye", "url": "https://www.kvkk.gov.tr/Icerik/7329/Data-Protection-in-Turkiye", "sourceType": "regulator_framework_guidance", "purpose": "Locate the authority's English framework overview and distinguish reference explanations from the Turkish text.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_turkish_law_and_amendments", "complete_rights_exceptions_and_deadlines", "current_kvkk_complaint_and_enforcement_procedure", "special_rules_for_public_records_and_brokers", "cross_border_transfer_rules", "sector_specific_rules", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "The TBMM and KVKK sources provide the primary review path. Precise claims must use Turkish statutory text and current Board decisions; the English overview is not treated as controlling." }, { "isoAlpha3": "VNM", "name": "Viet Nam", "priorityTier": "P1", "status": "official_source_inventory", "sourceLanguages": [ "Vietnamese" ], "controllingTextBoundary": "Vietnamese legal text and current national legal-database status control. No English translation has been treated as authoritative.", "fieldsReviewed": [ "official_decree_location", "official_currentness_metadata_location", "official_ministry_legal_database_location" ], "sources": [ { "title": "Vietnam national legal database: Decree 13/2023/ND-CP on personal-data protection", "url": "https://vbpl.vn/botuphap/Pages/vbpq-toanvan.aspx?ItemID=161106&Keyword=", "sourceType": "official_legal_database", "purpose": "Review the decree text, scope, rights, responsibilities, status, and effective-date metadata.", "checkedAt": "2026-08-21" }, { "title": "Ministry of Justice legal database: Decree 13/2023/ND-CP", "url": "https://vbpl.moj.gov.vn/boyte/Pages/vbpq-vanbanlienquan.aspx?ItemID=161106&Keyword=", "sourceType": "ministry_legal_database", "purpose": "Cross-check current status, related instruments, and the official legal-database record.", "checkedAt": "2026-08-21" }, { "title": "Ministry of Public Security legal database record", "url": "https://vbpl.moj.gov.vn/bocongan/Pages/vbpq-toanvan.aspx?ItemID=161106", "sourceType": "ministry_legal_database", "purpose": "Locate the ministry-hosted text and future implementing/currentness materials relevant to data protection administration.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_decree_and_related_instruments", "replacement_or_supplemental_personal_data_law_status", "current_authority_and_complaint_procedure", "complete_rights_exceptions_and_deadlines", "cross_border_transfer_and_localization_rules", "public_record_and_broker_route_scope", "sector_specific_rules", "translation_control", "complete_claim_by_claim_currentness" ], "notes": "The official Vietnamese legal database identifies Decree 13/2023 and its current-status lead. A claim-level review must check whether later laws or instruments change the operative framework before any indexable guide is drafted." }, { "isoAlpha3": "AUT", "name": "Austria", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "German", "English reference materials" ], "controllingTextBoundary": "German legislation and Austrian Data Protection Authority materials control. English summaries are reference material only.", "fieldsReviewed": [ "official_national_law_index_location", "official_consolidated_law_location", "official_rights_guidance_location" ], "sources": [ { "title": "Austrian Data Protection Authority: relevant data protection laws", "url": "https://data-protection-authority.gv.at/data-protection-laws/relevant-data-protection-laws", "sourceType": "regulator_law_index", "purpose": "Locate the current Austrian Data Protection Act, GDPR relationship, and official legal-information sources.", "checkedAt": "2026-08-21" }, { "title": "Austrian Legal Information System: consolidated Data Protection Act", "url": "https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=10001597", "sourceType": "official_legislation", "purpose": "Review the current German statutory text, amendments, scope, rights, exceptions, and remedies during claim review.", "checkedAt": "2026-08-21" }, { "title": "Austrian Data Protection Authority: rights of the data subject", "url": "https://data-protection-authority.gv.at/data-protection-in-austria/rights-of-the-data-subject", "sourceType": "regulator_rights_guidance", "purpose": "Locate current rights and complaint guidance without inferring a broker-specific route.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_german_dsg_text_and_amendments", "complete_gdpr_derogations_and_exceptions", "current_rights_deadlines_and_remedies", "current_dsb_complaint_procedure", "public_record_and_broker_route_scope", "sector_specific_rules", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "The Austrian DSB and RIS provide the official starting set. This record remains source discovery; no legal right, deadline, penalty, or broker outcome is promoted from the source locations alone." }, { "isoAlpha3": "BEL", "name": "Belgium", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "Dutch", "French", "German", "English reference materials" ], "controllingTextBoundary": "Belgian legislation and the Data Protection Authority's official materials control. The authority's English or unofficial translations are reference aids only.", "fieldsReviewed": [ "official_federal_law_location", "official_authority_framework_location", "official_rights_and_scope_guidance_location" ], "sources": [ { "title": "Belgian Official Journal: Act of 30 July 2018", "url": "https://etaamb.openjustice.be/nl/wet-van-30-juli-2018_n2018040581.html", "sourceType": "official_legislation", "purpose": "Locate the federal statutory text and official publication record for Belgium's GDPR implementation framework.", "checkedAt": "2026-08-21" }, { "title": "Belgian Data Protection Authority: Act of 30 July 2018", "url": "https://gegevensbeschermingsautoriteit.be/professioneel/themes/le-droit-a-l-image/la-nouvelle-loi-du-30-juillet-2018", "sourceType": "regulator_law_guidance", "purpose": "Locate the authority's explanation of the federal act and identify language-specific guidance for later review.", "checkedAt": "2026-08-21" }, { "title": "Belgian Data Protection Authority: authority and powers", "url": "https://www.gegevensbeschermingsautoriteit.be/jaarverslag/autoriteit", "sourceType": "regulator_authority_guidance", "purpose": "Locate the supervisory mandate, enforcement materials, and complaint-route leads.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_multilingual_text_and_amendments", "complete_gdpr_derogations_and_sector_rules", "rights_deadlines_exceptions_and_remedies", "current_authority_complaint_and_enforcement_procedure", "public_record_and_broker_route_scope", "translation_alignment_across_languages", "complete_claim_by_claim_currentness" ], "notes": "Belgium requires a multilingual text review and separation of federal privacy law from sector-specific rules. The source locations do not establish that any named broker accepts a request or that deletion will occur." }, { "isoAlpha3": "CZE", "name": "Czechia", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "Czech", "English reference translation" ], "controllingTextBoundary": "Czech statutory text controls. The Czech authority's English translation is a reference aid and not the controlling version.", "fieldsReviewed": [ "official_national_law_location", "official_parliamentary_publication_location", "official_supervisory_authority_location" ], "sources": [ { "title": "Czech Office for Personal Data Protection: Act No. 110/2019 Coll.", "url": "https://uoou.gov.cz/en/legislation/act-no-1102019-coll", "sourceType": "regulator_legislation_guidance", "purpose": "Locate the authority-hosted statutory text and translation for claim-level comparison.", "checkedAt": "2026-08-21" }, { "title": "Parliament of the Czech Republic: Act No. 110/2019 Sb.", "url": "https://www.psp.cz/sqw/sbirka.sqw?cz=110&r=2019", "sourceType": "official_legislative_publication", "purpose": "Cross-check the official Czech publication, effective-date metadata, and amendment trail.", "checkedAt": "2026-08-21" }, { "title": "Czech Office for Personal Data Protection", "url": "https://uoou.gov.cz/en", "sourceType": "regulator_authority", "purpose": "Locate current rights, complaint, enforcement, and contact guidance.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_czech_text_and_amendments", "complete_gdpr_derogations_and_sector_rules", "current_rights_deadlines_exceptions_and_remedies", "current_authority_complaint_procedure", "public_record_and_broker_route_scope", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "The authority and parliamentary record provide a reliable discovery path, but the Czech text and current guidance must be reconciled before any indexable legal explanation is published." }, { "isoAlpha3": "DNK", "name": "Denmark", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "Danish", "English reference materials" ], "controllingTextBoundary": "Danish legislation and Datatilsynet materials control. English pages and translations are reference material only.", "fieldsReviewed": [ "official_law_index_location", "official_rights_guidance_location", "official_complaint_guidance_location" ], "sources": [ { "title": "Danish Data Protection Agency: legislation", "url": "https://www.datatilsynet.dk/english/legislation", "sourceType": "regulator_law_index", "purpose": "Locate the GDPR, Danish Data Protection Act, Law Enforcement Act, and related official instruments.", "checkedAt": "2026-08-21" }, { "title": "Danish Data Protection Agency: Danish legislation and guidance index", "url": "https://www.datatilsynet.dk/regler-og-vejledning/lovgivning", "sourceType": "regulator_law_guidance", "purpose": "Locate the current Danish-language act reference and related guidance for claim-level review.", "checkedAt": "2026-08-21" }, { "title": "Danish Data Protection Agency: rights of data subjects", "url": "https://www.datatilsynet.dk/english/fundamental-concepts/what-are-your-obligations/rights-of-the-data-subjects", "sourceType": "regulator_rights_guidance", "purpose": "Locate current rights guidance and distinguish controller obligations from any broker-specific process.", "checkedAt": "2026-08-21" }, { "title": "Danish Data Protection Agency: complaint FAQ", "url": "https://www.datatilsynet.dk/english/frequently-asked-questions", "sourceType": "regulator_complaint_guidance", "purpose": "Locate the current complaint sequence and request-escalation guidance.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_danish_act_text_and_amendments", "complete_rights_deadlines_exceptions_and_remedies", "current_datatilsynet_complaint_procedure", "public_record_and_broker_route_scope", "sector_specific_rules", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "The Danish authority separates English summaries, Danish legislation, rights guidance, and complaint guidance. This inventory does not treat a general rights page as proof of a particular broker route or result." }, { "isoAlpha3": "EST", "name": "Estonia", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "Estonian", "English reference translation" ], "controllingTextBoundary": "Estonian legislation and the Data Protection Inspectorate's official materials control. English translations are reference aids only.", "fieldsReviewed": [ "official_consolidated_law_location", "official_state_gazette_location", "official_supervisory_authority_location" ], "sources": [ { "title": "Riigi Teataja: Personal Data Protection Act", "url": "https://www.riigiteataja.ee/en/eli/507112023002/consolide", "sourceType": "official_legislation", "purpose": "Review the consolidated Estonian statute, wordings, entry-into-force metadata, rights, supervision, and sanctions.", "checkedAt": "2026-08-21" }, { "title": "Estonian Data Protection Inspectorate", "url": "https://www.aki.ee/en", "sourceType": "regulator_authority", "purpose": "Locate current rights, complaint, enforcement, and contact guidance.", "checkedAt": "2026-08-21" }, { "title": "State Gazette: Riigi Teataja", "url": "https://www.rik.ee/en/other-services/state-gazette", "sourceType": "official_gazette_information", "purpose": "Confirm the official legislative publication system and current-text provenance.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_estonian_text_and_future_wordings", "complete_gdpr_derogations_and_sector_rules", "rights_deadlines_exceptions_and_remedies", "current_inspectorate_complaint_procedure", "public_record_and_broker_route_scope", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "Riigi Teataja exposes current and future wordings, so effective-date selection is a required review step. No operative legal conclusion or broker-specific route is inferred from the source locations." }, { "isoAlpha3": "FIN", "name": "Finland", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "Finnish", "Swedish", "English reference translation" ], "controllingTextBoundary": "Finnish and Swedish statutory texts and official Data Protection Ombudsman materials control. English translations are reference aids only.", "fieldsReviewed": [ "official_national_act_location", "official_ombudsman_decision_location", "official_government_guidance_location" ], "sources": [ { "title": "Finlex: Data Protection Act 1050/2018", "url": "https://finlex.fi/fi/lainsaadanto/2018/1050", "sourceType": "official_legislation", "purpose": "Review the current Finnish statutory text, amendment references, scope, rights, exceptions, and supervisory provisions.", "checkedAt": "2026-08-21" }, { "title": "Finlex: Data Protection Ombudsman decisions", "url": "https://www.finlex.fi/en/authorities/data-protection-ombudsman", "sourceType": "official_decision_database", "purpose": "Locate current official interpretations and decisions relevant to identity verification, rights, and data-broker-style processing.", "checkedAt": "2026-08-21" }, { "title": "Finnish Government: data protection", "url": "https://valtioneuvosto.fi/en/data-protection", "sourceType": "government_guidance", "purpose": "Locate official authority and rights guidance and cross-check the national framework.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_finnish_text_and_amendments", "swedish_text_alignment", "complete_rights_deadlines_exceptions_and_remedies", "current_ombudsman_complaint_procedure", "public_record_and_broker_route_scope", "sector_specific_rules", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "Finlex identifies both the current act and current Ombudsman decisions. A later claim review must reconcile Finnish and Swedish texts and avoid presenting a general Ombudsman decision as proof of a broker outcome." }, { "isoAlpha3": "GRC", "name": "Greece", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "Greek", "English reference translation" ], "controllingTextBoundary": "Greek legislation and Hellenic Data Protection Authority materials control. The authority's English translation is reference material only.", "fieldsReviewed": [ "official_authority_framework_location", "official_national_law_reference_location", "official_translation_location" ], "sources": [ { "title": "Hellenic Data Protection Authority: personal-data legal framework", "url": "https://www.dpa.gr/en/enimerwtiko/legal_framework/personal_data", "sourceType": "regulator_law_index", "purpose": "Locate the GDPR, Law 4624/2019, electronic-communications law, amendments, and official framework notes.", "checkedAt": "2026-08-21" }, { "title": "Hellenic Data Protection Authority", "url": "https://www.dpa.gr/en", "sourceType": "regulator_authority", "purpose": "Locate current rights, complaint, enforcement, and authority publications.", "checkedAt": "2026-08-21" }, { "title": "Hellenic Data Protection Authority: Law 4624/2019 reference translation", "url": "https://www.dpa.gr/sites/default/files/2020-08/LAW%204624_2019_EN_TRANSLATED%20BY%20THE%20HDPA.PDF", "sourceType": "regulator_reference_translation", "purpose": "Use only as an English research aid while routing exact claims to the Greek statutory text.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_greek_law_and_amendments", "complete_gdpr_derogations_and_sector_rules", "rights_deadlines_exceptions_and_remedies", "current_hdpa_complaint_and_enforcement_procedure", "public_record_and_broker_route_scope", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "The HDPA source set distinguishes the Greek framework page, authority materials, and an English reference translation. No precise legal claim or broker-specific request outcome is promoted from this discovery record." }, { "isoAlpha3": "NOR", "name": "Norway", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "Norwegian", "English reference translation" ], "controllingTextBoundary": "Norwegian statutory text and the Norwegian Data Protection Authority's materials control. The English Personal Data Act translation is explicitly a reference aid.", "fieldsReviewed": [ "official_personal_data_act_location", "official_supervisory_authority_location", "official_regulatory_index_location" ], "sources": [ { "title": "Lovdata: Act relating to the processing of personal data", "url": "https://lovdata.no/dokument/NL/lov/2018-06-15-38", "sourceType": "official_legal_database", "purpose": "Locate the Personal Data Act, GDPR incorporation, scope, exceptions, supervision, appeals, and sanctions text.", "checkedAt": "2026-08-21" }, { "title": "Norwegian Data Protection Authority: regulations and tools", "url": "https://www.datatilsynet.no/en/", "sourceType": "regulator_authority", "purpose": "Locate current rights, complaint, enforcement, and regulator guidance.", "checkedAt": "2026-08-21" }, { "title": "Norwegian Data Protection Authority: laws and rules index", "url": "https://www.datatilsynet.no/regelverk-og-verktoy/lover-og-regler/", "sourceType": "regulator_law_index", "purpose": "Locate current Norwegian-language statutory and regulatory references for claim-level review.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_norwegian_text_and_amendments", "complete_eea_and_national_scope_rules", "rights_deadlines_exceptions_and_remedies", "current_datatilsynet_complaint_and_appeal_procedure", "public_record_and_broker_route_scope", "sector_specific_rules", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "Lovdata and Datatilsynet provide the legal and regulatory starting points, but the Norwegian text and current guidance must be reconciled before any legal page is promoted. The source set does not establish a broker route or deletion result." }, { "isoAlpha3": "ALB", "name": "Albania", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "Albanian", "English reference translation" ], "controllingTextBoundary": "Albanian legislation and the Commissioner's official materials control. English translations are reference aids only.", "fieldsReviewed": [ "official_current_law_location", "official_authority_location", "official_reference_translation_location" ], "sources": [ { "title": "Commissioner for the Right to Information and Personal Data Protection: Law No. 124/2024", "url": "https://idp.al/wp-content/uploads/2025/08/Eng-_Law-124_2024-_On-Personal-Data-Protection.pdf", "sourceType": "regulator_reference_translation", "purpose": "Locate the authority-hosted English reference translation and identify the current-law review path.", "checkedAt": "2026-08-21" }, { "title": "Commissioner for the Right to Information and Personal Data Protection", "url": "https://idp.al/", "sourceType": "regulator_authority", "purpose": "Locate Albanian statutory, guidance, complaint, and currentness materials for claim-level review.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "controlling_albanian_text_and_amendments", "commencement_and_transition_of_law_124_2024", "complete_rights_exceptions_deadlines_and_remedies", "current_commissioner_complaint_procedure", "public_record_and_broker_route_scope", "sector_specific_rules", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "The authority-hosted translation identifies a recent law, but the Albanian controlling text, transition rules, and current official procedures must be reviewed before publication. No broker route or legal outcome is inferred." }, { "isoAlpha3": "ARM", "name": "Armenia", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "Armenian", "English reference translation" ], "controllingTextBoundary": "Armenian legislation and official Armenian authority materials control. English translations are reference aids only.", "fieldsReviewed": [ "official_law_location", "official_authority_legislation_index_location", "official_ministry_translation_location" ], "sources": [ { "title": "Armenian Legal Information System: Law on Protection of Personal Data", "url": "https://www.arlis.am/en/acts/117034", "sourceType": "official_legislation", "purpose": "Review the controlling Armenian law, amendments, rights, procedures, and authority provisions.", "checkedAt": "2026-08-21" }, { "title": "Personal Data Protection Agency of Armenia: legislation", "url": "https://www.pdpa.am/en/legislation", "sourceType": "regulator_law_index", "purpose": "Locate current agency materials, legislation, complaint guidance, and implementation updates.", "checkedAt": "2026-08-21" }, { "title": "Armenian Ministry of Justice: official English law reference", "url": "https://www.moj.am/storage/uploads/Personal_data_protection_law_ENG_OFFICIAL.pdf", "sourceType": "government_reference_translation", "purpose": "Use only as an English aid while routing exact claims to the Armenian text.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_armenian_text_and_amendments", "complete_rights_deadlines_exceptions_and_remedies", "current_agency_complaint_and_enforcement_procedure", "cross_border_transfer_rules", "public_record_and_broker_route_scope", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "The ARLIS, agency, and Ministry sources provide a strong discovery set. Exact currentness, amendments, and request procedures remain open and no broker-specific route is inferred." }, { "isoAlpha3": "BGR", "name": "Bulgaria", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "Bulgarian", "English reference translation" ], "controllingTextBoundary": "Bulgarian legislation and CPDP materials control. English pages and translations are reference material only.", "fieldsReviewed": [ "official_personal_data_act_location", "official_legislation_index_location", "official_authority_registry_location" ], "sources": [ { "title": "Commission for Personal Data Protection: Personal Data Protection Act", "url": "https://cpdp.bg/en/legislation/personal-data-protection-act/", "sourceType": "regulator_legislation", "purpose": "Locate the authority-hosted act and review the official English reference while routing exact claims to Bulgarian text.", "checkedAt": "2026-08-21" }, { "title": "Commission for Personal Data Protection: legislation index", "url": "https://cpdp.bg/en/legislation/", "sourceType": "regulator_law_index", "purpose": "Locate current amendments, ordinances, GDPR materials, and authority guidance.", "checkedAt": "2026-08-21" }, { "title": "Bulgarian e-government register: Commission for Personal Data Protection", "url": "https://www.identity.egov.bg/wps/portal/egov/dostavchitsi%2Buslugi/komisii%2C%2Bsazdadeni%2Bsas%2Bzakon/938", "sourceType": "government_authority_registry", "purpose": "Cross-check the current authority identity, statutory basis, and institutional metadata.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_bulgarian_act_and_amendments", "complete_gdpr_derogations_and_sector_rules", "rights_deadlines_exceptions_and_remedies", "current_cpdp_complaint_and_enforcement_procedure", "public_record_and_broker_route_scope", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "The CPDP and e-government records identify the legislative and authority starting points. No current legal conclusion, deadline, penalty, or broker outcome is promoted from this inventory." }, { "isoAlpha3": "HRV", "name": "Croatia", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "Croatian", "English reference materials" ], "controllingTextBoundary": "Croatian legislation and official government/agency materials control. English summaries are reference material only.", "fieldsReviewed": [ "official_gdpr_implementation_law_location", "official_government_rights_guidance_location", "official_supervisory_authority_guidance_location" ], "sources": [ { "title": "Narodne novine: Act on the Implementation of the General Data Protection Regulation", "url": "https://narodne-novine.nn.hr/clanci/sluzbeni/full/2018_05_42_805.html", "sourceType": "official_legislation", "purpose": "Review the controlling Croatian implementation act, scope, authority, procedures, and sanctions.", "checkedAt": "2026-08-21" }, { "title": "Croatian Government: protection of personal data", "url": "https://gov.hr/en/protection-of-personal-data/1864", "sourceType": "government_rights_guidance", "purpose": "Locate current Croatian rights and supervisory-authority guidance.", "checkedAt": "2026-08-21" }, { "title": "Croatian Government: personal data protection and complaints", "url": "https://gov.hr/en/personal-data-personal-data-protection/1888", "sourceType": "government_complaint_guidance", "purpose": "Locate complaint and rights information for later claim-level review.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_croatian_text_and_amendments", "complete_gdpr_derogations_and_sector_rules", "rights_deadlines_exceptions_and_remedies", "current_azop_complaint_and_enforcement_procedure", "public_record_and_broker_route_scope", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "Croatia's official law and government guidance provide the discovery path. A claim review must use the Croatian text and current AZOP materials; no broker-specific route or deletion result is inferred." }, { "isoAlpha3": "CYP", "name": "Cyprus", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "Greek", "English reference translation" ], "controllingTextBoundary": "Greek statutory text and the Cyprus Data Protection Commissioner materials control. English translations are reference aids only.", "fieldsReviewed": [ "official_national_law_location", "official_commissioner_law_guidance_location", "official_government_law_index_location" ], "sources": [ { "title": "Cyprus Commissioner for Personal Data Protection: Law 125(I)/2018", "url": "https://www.dataprotection.gov.cy/DATAPROTECTION/DATAPROTECTION.NSF/page3b_en/page3b_en?Click=&OpenDocument=", "sourceType": "regulator_law_guidance", "purpose": "Locate the national GDPR implementation law, repeal/transition notes, and official translation lead.", "checkedAt": "2026-08-21" }, { "title": "Cyprus government: privacy legislation index", "url": "https://www.gov.cy/moh/politki-aporritoy/nomothesia/", "sourceType": "government_law_index", "purpose": "Cross-check the government-hosted law and GDPR materials and locate current publication metadata.", "checkedAt": "2026-08-21" }, { "title": "Cyprus government: Law 125(I) of 2018 reference translation", "url": "https://www.gov.cy/media/sites/175/2026/01/Law-125I-of-2018-ENG-final.pdf", "sourceType": "government_reference_translation", "purpose": "Use as an English reference only while routing exact claims to the Greek text.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_greek_text_and_amendments", "complete_gdpr_derogations_and_sector_rules", "rights_deadlines_exceptions_and_remedies", "current_commissioner_complaint_procedure", "public_record_and_broker_route_scope", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "The Commissioner and government sources identify the national law and translation trail. A later review must reconcile the Greek text, transition provisions, and current complaint procedure; no broker-specific route is inferred." }, { "isoAlpha3": "GEO", "name": "Georgia", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "Georgian", "English reference translation" ], "controllingTextBoundary": "Georgian legislation and the Personal Data Protection Service's official materials control. English consolidated pages are reference material and require version selection.", "fieldsReviewed": [ "official_current_law_location", "official_authority_law_index_location", "official_currentness_version_lead" ], "sources": [ { "title": "Legislative Herald of Georgia: Law on Personal Data Protection", "url": "https://new.matsne.gov.ge/en/document/view/5827307", "sourceType": "official_legislation", "purpose": "Locate the current law page, consolidated versions, amendments, and effective-date history.", "checkedAt": "2026-08-21" }, { "title": "Personal Data Protection Service of Georgia: laws", "url": "https://pdps.ge/en/content/1063/LAWS", "sourceType": "regulator_law_index", "purpose": "Locate the current Georgian law, authority materials, and implementation documents.", "checkedAt": "2026-08-21" }, { "title": "Personal Data Protection Service of Georgia", "url": "https://pdps.ge/en", "sourceType": "regulator_authority", "purpose": "Locate current rights, complaint, enforcement, and authority-contact guidance.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_georgian_text_and_amendments", "post_2025_effective_date_changes", "authority_and_supervisory_transition_status", "rights_deadlines_exceptions_and_remedies", "current_complaint_procedure", "cross_border_rules", "public_record_and_broker_route_scope", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "The Matsne page exposes version-selection warnings and future-effective amendments, so the exact consolidated wording and date are mandatory review fields. No current legal conclusion or broker route is promoted." }, { "isoAlpha3": "HUN", "name": "Hungary", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "Hungarian", "English reference translation" ], "controllingTextBoundary": "Hungarian legislation and NAIH materials control. English translations are reference aids only and may have amendment lag.", "fieldsReviewed": [ "official_privacy_act_location", "official_national_law_database_location", "official_supervisory_authority_location" ], "sources": [ { "title": "Hungarian National Authority for Data Protection and Freedom of Information: Act CXII of 2011", "url": "https://www.naih.hu/about-the-authority/act-cxii-of-2011-privacy-act", "sourceType": "regulator_law_guidance", "purpose": "Locate the authority's current English reference and amendment/currentness notes.", "checkedAt": "2026-08-21" }, { "title": "Hungarian National Legislation Database: Act CXII of 2011", "url": "https://njt.jog.gov.hu/jogszabaly/2011-112-00-00", "sourceType": "official_legislation", "purpose": "Review the current Hungarian text, amendments, scope, rights, exceptions, and authority provisions.", "checkedAt": "2026-08-21" }, { "title": "Hungarian NAIH authority", "url": "https://www.naih.hu/", "sourceType": "regulator_authority", "purpose": "Locate current rights, complaint, enforcement, and contact information.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_hungarian_text_and_amendments", "complete_gdpr_derogations_and_sector_rules", "rights_deadlines_exceptions_and_remedies", "current_naih_complaint_and_enforcement_procedure", "public_record_and_broker_route_scope", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "The Hungarian legislative database is the controlling-text starting point; NAIH's English page may have a different update date. No legal deadline, penalty, or broker result is inferred from the source locations." }, { "isoAlpha3": "ISL", "name": "Iceland", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "Icelandic", "English reference translation" ], "controllingTextBoundary": "Icelandic law-gazette text controls. The Data Protection Authority's English translation is explicitly informational only.", "fieldsReviewed": [ "official_act_translation_location", "official_data_protection_authority_location", "official_currentness_lead" ], "sources": [ { "title": "Icelandic Data Protection Authority: Act No. 90/2018 reference translation", "url": "https://www.personuvernd.is/media/uncategorized/Act_No_90_2018_on_Data_Protection_and_the_Processing_of_Personal_Data.pdf", "sourceType": "regulator_reference_translation", "purpose": "Locate the authority-hosted translation and use it to map the Icelandic statutory review fields.", "checkedAt": "2026-08-21" }, { "title": "Icelandic Data Protection Authority", "url": "https://www.personuvernd.is/", "sourceType": "regulator_authority", "purpose": "Locate current Icelandic rights, complaint, enforcement, and contact guidance.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_icelandic_act_text_and_amendments", "complete_eea_and_national_scope_rules", "rights_deadlines_exceptions_and_remedies", "current_authority_complaint_procedure", "public_record_and_broker_route_scope", "translation_alignment", "complete_claim_by_claim_currentness" ], "notes": "The published English translation states that the original Icelandic text controls. Current law-gazette wording and authority guidance must be reviewed before any legal page is promoted." }, { "isoAlpha3": "JAM", "name": "Jamaica", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "English" ], "controllingTextBoundary": "Jamaican legislation and Office of the Information Commissioner materials control. Operational notices and registration status must be checked separately from the Act text.", "fieldsReviewed": [ "official_data_protection_act_location", "official_information_commissioner_location", "official_current_operational_notice_location" ], "sources": [ { "title": "Jamaica Office of the Information Commissioner: Data Protection Act 2020", "url": "https://www.oic.gov.jm/sites/default/files/page-files/The-Data-Protection-Act-2020-No.-7%20%28WebCompressed%29_0.pdf", "sourceType": "regulator_legislation", "purpose": "Review the Act's scope, rights, authority, request procedures, and commencement provisions.", "checkedAt": "2026-08-21" }, { "title": "Office of the Information Commissioner Jamaica", "url": "https://www.oic.gov.jm/", "sourceType": "regulator_authority", "purpose": "Locate current rights, registration, complaint, enforcement, and operational notices.", "checkedAt": "2026-08-21" }, { "title": "Office of the Information Commissioner Jamaica: mandate", "url": "https://oic.gov.jm/page/our-mandate", "sourceType": "regulator_framework_guidance", "purpose": "Cross-check the authority's statutory mandate and current institutional status.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_act_amendments_and_regulations", "commencement_and_transition_status", "complete_rights_deadlines_exceptions_and_remedies", "current_oic_complaint_and_registration_procedure", "public_record_and_broker_route_scope", "sector_specific_rules", "complete_claim_by_claim_currentness" ], "notes": "The OIC site currently contains operational notices as well as the Act, so current registration and complaint claims must be date-scoped. No broker-specific route or outcome is inferred." }, { "isoAlpha3": "KEN", "name": "Kenya", "priorityTier": "P2", "status": "official_source_inventory", "sourceLanguages": [ "English", "Swahili reference materials" ], "controllingTextBoundary": "Kenyan legislation and Office of the Data Protection Commissioner materials control. Consolidated database versions and regulator PDFs must be reconciled by date.", "fieldsReviewed": [ "official_act_and_regulations_index_location", "official_act_pdf_location", "official_supervisory_authority_location" ], "sources": [ { "title": "Kenya Office of the Data Protection Commissioner: data protection laws", "url": "https://www.odpc.go.ke/data-protection-laws-kenya/", "sourceType": "regulator_law_index", "purpose": "Locate the Act, 2021 regulations, complaints/enforcement regulations, and current regulator materials.", "checkedAt": "2026-08-21" }, { "title": "Kenya Office of the Data Protection Commissioner: Data Protection Act PDF", "url": "https://www.odpc.go.ke/wp-content/uploads/2024/02/TheDataProtectionAct__No24of2019.pdf", "sourceType": "regulator_legislation", "purpose": "Review the Act's scope, rights, authority, request process, and commencement text.", "checkedAt": "2026-08-21" }, { "title": "Kenya Law: Data Protection Act current-version record", "url": "https://new.kenyalaw.org/akn/ke/act/2019/24/eng%402022-12-31", "sourceType": "official_legal_database", "purpose": "Cross-check consolidated statutory wording and version history before currentness claims.", "checkedAt": "2026-08-21" } ], "currentnessStatus": "source_locations_captured_only", "legalClaimStatus": "not_claim_reviewed", "routeEvidenceStatus": "not_collected", "fieldsStillUnknown": [ "current_act_amendments_and_regulations", "complete_rights_deadlines_exceptions_and_remedies", "current_odpc_complaint_and_enforcement_procedure", "registration_and_sector_rules", "public_record_and_broker_route_scope", "cross_border_transfer_rules", "version_alignment", "complete_claim_by_claim_currentness" ], "notes": "The ODPC index, regulator PDF, and Kenya Law record create a source trail, but version reconciliation and current regulations remain required. No broker-specific route or deletion result is inferred." } ] }