One model, widely exported
Most recent data protection statutes share a blueprint: a lawful basis for every use, transparency obligations, data minimisation and purpose limitation, rights of access, correction, erasure, objection and portability, breach notification, and an independent regulator. That design spread outwards from Europe and has been adopted, sometimes almost word for word, across very different legal traditions.
The real difference is enforcement
On paper the rights are close to identical. In practice what counts is whether a regulator exists, whether it has staff and the power to fine, and whether it uses them. Some countries have a statute with no functioning authority behind it; others have an authority issuing substantial penalties. A third difference is routinely overlooked: whether government bodies are covered at all — several statutes exclude them expressly.
Compensation is the exception
Many statutes provide penalties payable to the state but no personal right to damages. Where such a right exists, courts generally require demonstrable harm; the breach alone is not enough. If you want compensation, start documenting the consequences for you from the first day — not the breach, the consequences.
The access request is the most effective tool
It is usually free, requires no reason, and forces the other side to disclose what it holds, where it came from and who it was shared with. Response deadlines are typically a month. The answer is also the foundation for anything that follows, which is why an access request belongs at the beginning of a dispute rather than at the end.
In writing, and dated
Send requests in writing with proof of delivery and keep that proof. Without a date you cannot later show that the deadline passed — and it is precisely that missed deadline that gives a regulator something to act on.
The law country by country
The legal framework, the procedure, the time limits and the costs differ from one country to another. Each country below has a detailed page: governing texts, key facts, the actual procedure, costs, where to go and the traps to avoid.
Select a country to open its detailed page.
