Analyses

Each analysis answers one question from data collected on a schedule from primary sources. Every page states its method and data version, and offers the rows behind every number as a download.

Privacy enforcement over time

Are privacy regulators issuing more fines, and larger ones, than they used to?

Data: CNIL, Irish DPC and UK ICO registers; EDPB final decisions

Breach-notification timelines

How long do organisations take to tell regulators about a data breach?

Data: Washington and California attorney general breach notices

How federal privacy rules change

How often are the federal privacy regulations amended, and when did each last change?

Data: eCFR version history for COPPA, HIPAA, GLBA, FERPA, PPRA and the Health Breach Notification Rule