See what each tool is based on.
Every released privacy tool identifies the official source, jurisdiction, version status and review date used for its supported checks.
Our publication standard
- Use the primary sourceStart with legislation, regulator guidance, official forms or official datasets rather than third-party summaries.
- Record the versionKeep the source title, publisher, jurisdiction, canonical link, publication or version date and review date.
- Define the supported checkState what the tool can test mechanically and which questions remain for the user.
- Reject unsupported casesDo not approximate a result when the selected jurisdiction, document or scenario is outside the supported scope.
- Review changesRecheck the mapping when an official source changes and identify which tool outputs may be affected.
What a source record means
A source record lets you inspect the basis of a supported check. It does not mean that the tool provides legal advice, certifies compliance or replaces review of the official material for your circumstances.
Unsupported guidance sets are left unavailable rather than filled with approximate answers.
Public source register
Current privacy rule pack reviewed 31 July 2026. Proposed changes are not treated as current law.
United Kingdom11 official records
Data Protection Act 2018, section 164AUK Parliament · Complaints by data subjects to controllersIn forceReviewed 2026-07-31Data (Use and Access) Act 2025, section 103UK Parliament · Complaints by data subjectsIn forceReviewed 2026-07-31How to deal with data protection complaintsInformation Commissioner’s OfficeCurrent guidanceReviewed 2026-07-31UK GDPR, Article 30UK Parliament · Records of processing activitiesIn forceReviewed 2026-07-31What do we need to document under Article 30?Information Commissioner’s OfficeGuidance marked under reviewReviewed 2026-07-31UK GDPR, Article 28UK Parliament · Processor contractsIn forceReviewed 2026-07-31What needs to be included in the contract?Information Commissioner’s OfficeGuidance marked under reviewReviewed 2026-07-31UK GDPR, Article 12UK Parliament · Exercise of data-subject rightsIn forceReviewed 2026-07-31Data (Use and Access) Act 2025, section 76UK Parliament · Time limits for respondingIn force for new requestsReviewed 2026-07-31A guide to subject accessInformation Commissioner’s OfficeCurrent guidanceReviewed 2026-07-31Bank holidays JSON datasetGOV.UKDynamic official datasetReviewed 2026-07-31
European Union8 official records
Regulation (EU) 2016/679, Article 12European Union · Transparent information and exercise of rightsIn forceReviewed 2026-07-31Regulation (EU) 2016/679, Article 28European Union · Processor contractsIn forceReviewed 2026-07-31Regulation (EU) 2016/679, Article 30European Union · Records of processing activitiesIn forceReviewed 2026-07-31Regulation (EEC, Euratom) No 1182/71European Union · Rules applicable to periods, dates and time limitsIn forceReviewed 2026-07-31Guidelines 01/2022 on data subject rights — Right of accessEuropean Data Protection BoardFinal guidanceReviewed 2026-07-31Guidelines 07/2020 on controller and processor conceptsEuropean Data Protection BoardFinal guidanceReviewed 2026-07-31Position paper on Article 30(5) derogationsEuropean Data Protection BoardWP29 position endorsed by EDPBReviewed 2026-07-31Commission Implementing Decision (EU) 2021/915European Commission · Article 28 standard contractual clausesIn forceReviewed 2026-07-31
United States28 official records
California Consumer Privacy Act FAQsCalifornia Privacy Protection AgencyCurrent regulator guidanceReviewed 2026-07-31CCPA updates, cybersecurity audits, risk assessments, ADMT and insurance regulationsCalifornia Privacy Protection AgencyFinal regulationsReviewed 2026-07-31Approved text of CCPA regulationsCalifornia Privacy Protection Agency · Risk assessmentsApproved and filed final textReviewed 2026-07-31New regulations approved by Office of Administrative LawCalifornia Privacy Protection AgencyOfficial compliance-date announcementReviewed 2026-07-31California Consumer Privacy Act FAQsCalifornia Privacy Protection AgencyEnacted broad state privacy lawReviewed 2026-07-31Colorado Revised Statutes, Title 6Colorado General AssemblyEnacted broad state privacy lawReviewed 2026-07-31Connecticut Data Privacy ActConnecticut Attorney GeneralEnacted broad state privacy lawReviewed 2026-07-31Virginia Code, Title 59.1 Chapter 53Virginia General AssemblyEnacted broad state privacy lawReviewed 2026-07-31Utah Code section 13-61-203Utah State LegislatureEnacted broad state privacy lawReviewed 2026-07-31Florida Statutes, Chapter 501Florida LegislatureEnacted broad state privacy lawReviewed 2026-07-31Oregon Revised Statutes, Chapter 646AOregon LegislatureEnacted broad state privacy lawReviewed 2026-07-31Texas HB 4 final textTexas LegislatureEnacted broad state privacy lawReviewed 2026-07-31Montana SB 384 final textMontana LegislatureEnacted broad state privacy lawReviewed 2026-07-31Delaware Code, Title 6 Chapter 12DDelaware General AssemblyEnacted broad state privacy lawReviewed 2026-07-31Iowa Code, Chapter 715DIowa LegislatureEnacted broad state privacy lawReviewed 2026-07-31Nebraska Revised Statutes section 87-1108Nebraska LegislatureEnacted broad state privacy lawReviewed 2026-07-31New Hampshire RSA 507-HNew Hampshire General CourtEnacted broad state privacy lawReviewed 2026-07-31New Jersey P.L. 2023, c.266New Jersey LegislatureEnacted broad state privacy lawReviewed 2026-07-31Tennessee Public Chapter 408Tennessee General AssemblyEnacted broad state privacy lawReviewed 2026-07-31Minnesota controller obligationsMinnesota Attorney GeneralEnacted broad state privacy lawReviewed 2026-07-31Maryland Code section 14-4705Maryland General AssemblyEnacted broad state privacy lawReviewed 2026-07-31Indiana Code, Title 24 Article 15Indiana General AssemblyEnacted broad state privacy lawReviewed 2026-07-31Kentucky HB 15 final textKentucky General AssemblyEnacted broad state privacy lawReviewed 2026-07-31Rhode Island section 6-48.1-6Rhode Island General AssemblyEnacted broad state privacy lawReviewed 2026-07-31Oklahoma SB 546 enrolledOklahoma LegislatureEnacted broad state privacy lawReviewed 2026-07-31Louisiana Act 502Louisiana State LegislatureEnacted broad state privacy lawReviewed 2026-07-31Alabama HB 351 enrolledAlabama LegislatureEnacted broad state privacy lawReviewed 2026-07-31Vermont Act 145Vermont General AssemblyEnacted broad state privacy lawReviewed 2026-07-31