Canada and Latin America data protection laws

Canada, Quebec, Brazil, Chile, Mexico and more.

FewerMore laws

4 jurisdictions with tracked laws. Tap one to open it.

9 regulations

Add to calendar

Sort

		Status
Chile Personal Data Protection Law (Ley 21.719) Ley Nº 21.719 que regula la protección y el tratamiento de los datos personales y crea la Agencia de Protección de Datos Personales	Chile	Enacted	Dec 1, 2026	Dec 1, 2026 (in 2 months) Law in force
Brazil AI Bill (PL 2338/2023) Projeto de Lei nº 2338/2023 (Brazilian AI Legal Framework)	Brazil	Proposed	Not set	None upcoming
Brazil ECA Digital Estatuto Digital da Criança e do Adolescente (Law No. 15.211/2025)	Brazil	In force	Mar 17, 2026	None upcoming
Brazil LGPD Lei Geral de Proteção de Dados Pessoais (Law No. 13.709/2018)	Brazil	In force	Sep 18, 2020	None upcoming
Canada Bill C-36 (PPCDA) Bill C-36, An Act to enact the Protecting Privacy and Consumer Data Act	Canada	Proposed	Not set	None upcoming
Canada Bill C-8 / CCSPA Critical Cyber Systems Protection Act (enacted by Bill C-8, An Act respecting cyber security)	Canada	Enacted	Not set	None upcoming
Mexico LFPDPPP 2025 Ley Federal de Protección de Datos Personales en Posesión de los Particulares (2025)	Mexico	In force	Mar 21, 2025	None upcoming
PIPEDA Personal Information Protection and Electronic Documents Act	Canada	In force	Jan 1, 2001	None upcoming
Quebec Law 25 Act to modernize legislative provisions as regards the protection of personal information (Law 25, formerly Bill 64)	Quebec, Canada	In force	Sep 22, 2022	None upcoming

Chile Personal Data Protection Law (Ley 21.719)
Chile
EnactedPrivacyBreach notification
Next: Dec 1, 2026 Law in force
Brazil AI Bill (PL 2338/2023)
Brazil
ProposedAI
Brazil ECA Digital
Brazil
In forceChildrenOnline safety
Effective Mar 17, 2026
Brazil LGPD
Brazil
In forcePrivacyBreach notification
Effective Sep 18, 2020
Canada Bill C-36 (PPCDA)
Canada
ProposedPrivacyBreach notification
Canada Bill C-8 / CCSPA
Canada
EnactedCybersecurityBreach notification
Mexico LFPDPPP 2025
Mexico
In forcePrivacy
Effective Mar 21, 2025
PIPEDA
Canada
In forcePrivacyBreach notification
Effective Jan 1, 2001
Quebec Law 25
Quebec, Canada
In forcePrivacyBreach notification
Effective Sep 22, 2022

Dec12026
Chile Personal Data Protection Law (Ley 21.719)Chile
Law in force
Main obligations apply and the Personal Data Protection Agency begins supervision.
Takes effectin 2 monthsSource

Dec12027
Chile Personal Data Protection Law (Ley 21.719)Chile
Proposed postponement of entry into force
Government bill Boletin 18623-07 (filed 1 Sep 2026, 'suma' urgency) would replace the 24-month vacatio legis in transitional Art 1 with a fixed date of 1 Dec 2027; in first committee stage in the Senate, not law.
Takes effectTentativein 14 monthsSource

Jun152026
Canada Bill C-8 / CCSPACanada
Royal Assent
Bill C-8 receives Royal Assent (S.C. 2026, c. 9); Telecommunications Act amendments take effect.
Takes effect3 months agoSource
Jun152026
Canada Bill C-36 (PPCDA)Canada
Bill C-36 tabled (first reading)
Government introduces the PPCDA in the House of Commons.
Takes effect3 months agoSource

Mar172026
Brazil ECA DigitalBrazil
ECA Digital in force
Art. 41-A (as set by Law 15.352/2026, following MP 1.319/2025) fixes entry into force on 17 March 2026.
Takes effect6 months agoSource

Aug232025
Brazil LGPDBrazil
Deadline to adopt ANPD standard contractual clauses
Agents relying on contractual clauses for international transfers must incorporate the ANPD-approved SCCs into their contracts within 12 months of publication.
Compliance deadline13 months agoSource

Jun182025
Canada Bill C-8 / CCSPACanada
Bill C-8 introduced
First reading in the House of Commons.
Transition15 months agoSource

Mar212025
Mexico LFPDPPP 2025Mexico
New LFPDPPP in force
Law published 20 March 2025 enters into force the following day, repealing the 2010 law.
Takes effect18 months agoSource

Dec132024
Chile Personal Data Protection Law (Ley 21.719)Chile
Published in Diario Oficial
Law 21.719 published; 24-month vacatio legis begins.
Takes effect21 months agoSource
Dec102024
Brazil AI Bill (PL 2338/2023)Brazil
Approved by the Federal Senate
Senate approves the consolidated text and sends it to the Chamber of Deputies.
Takes effect21 months agoSource

Sep222024
Quebec Law 25Quebec, Canada
Phase 3: data portability
Right to data portability in a structured, commonly used technological format applies.
Compliance deadline2 years agoSource

Aug232024
Brazil LGPDBrazil
International transfer regulation published
Resolution CD/ANPD 19/2024 on international transfers and standard contractual clauses published and in force.
Takes effect2.1 years agoSource

Sep222023
Quebec Law 25Quebec, Canada
Phase 2: main obligations and penalties
Governance policies, PIAs, consent, transparency, privacy by default, ADM notices, cross-border PIAs and AMP/penal regime apply.
Compliance deadline3 years agoSource

Sep222022
Quebec Law 25Quebec, Canada
Phase 1: privacy officer and incident reporting
Person in charge of personal information protection, confidentiality incident notification and register apply.
Compliance deadline4 years agoSource

Sep222021
Quebec Law 25Quebec, Canada
Assent
Bill 64 assented to as S.Q. 2021, c. 25.
Takes effect5 years agoSource

Aug12021
Brazil LGPDBrazil
ANPD sanctions enforceable
Administrative sanctions (Arts. 52-54) become applicable per Law 14.010/2020.
Enforcement5.1 years agoSource

Sep182020
Brazil LGPDBrazil
LGPD in force
Main LGPD provisions take effect.
Takes effect6 years agoSource

Nov12018
PIPEDACanada
Mandatory breach reporting
Breach of security safeguards reporting, notification and record-keeping obligations take effect.
Compliance deadline7.9 years agoSource

Jan12004
PIPEDACanada
PIPEDA applies to all commercial activity
Extended to commercial activity in provinces without substantially similar legislation.
Takes effect22.7 years agoSource

Jan12001
PIPEDACanada
PIPEDA Part 1 in force (phase 1)
Applies to federally regulated organisations.
Takes effect25.7 years agoSource