Data privacy
CCPA thresholds and state privacy laws.
Sweden
topic:se:dataskydd
Hur snabbt ska en personuppgiftsincident anmälas?
En personuppgiftsincident ska anmälas till Integritetsskyddsmyndigheten utan onödigt dröjsmål och om möjligt inom 72 timmar, om den inte sannolikt saknar risk för de registrerade.
Answer from NovaCopilot, legal.exploreworldai.com/en/amnen/dataskydd, checked 2026-10-01.
- Source
- Artikel 33 förordning (EU) 2016/679, EUR-Lex. Law read
- Precedent
- No precedent linked in the register yet
- Provision
- Artikel 33 förordning (EU) 2016/679
- Object
- topic:se:dataskydd
- Source
- NovaCopilot
Questions on this topic
Compliance chain (element, obligation, decision, sanction)
The chain for this topic is not yet in the register.
United States
topic:us:dataskydd
Does the CCPA apply to a small business?
The CCPA applies to a for-profit business that does business in California and meets one threshold: inflation-adjusted annual revenue over the statutory amount, buying, selling or sharing data of 100,000 or more consumers or households, or earning half its revenue from selling or sharing personal information.
Answer from NovaCopilot, legal.exploreworldai.com/en/amnen/dataskydd, checked 2026-10-01.
- Source
- Cal. Civ. Code § 1798.140(d), California Legislative Information. Law read
- Precedent
- compliance:us:ccpa
- Provision
- Cal. Civ. Code § 1798.140(d)
- Object
- topic:us:dataskydd
- Source
- NovaCopilot
Questions on this topic
- /fragor/us/do-privacy-laws-apply-to-a-small-business
- /fragor/us/which-us-state-privacy-laws-apply
- /fragor/us/ccpa-compared-with-gdpr
Compliance chain (element, obligation, decision, sanction)
New York
topic:us-ny:dataskydd
Who must maintain reasonable safeguards under the SHIELD Act?
A person or business owning or licensing computerized data containing a New York resident's private information must develop, implement and maintain reasonable safeguards appropriate to the business.
Answer from NovaCopilot, legal.exploreworldai.com/en/amnen/dataskydd, checked 2026-09-22.
- Source
- N.Y. Gen. Bus. Law § 899-bb, New York State Senate Open Legislation. Law read
- Precedent
- No precedent linked in the register yet
- Provision
- N.Y. Gen. Bus. Law § 899-bb
- Object
- topic:us-ny:dataskydd
- Source
- NovaCopilot
Questions on this topic
Compliance chain (element, obligation, decision, sanction)
The chain for this topic is not yet in the register.
California
topic:us-ca:dataskydd
Which businesses are covered by the CCPA?
The CCPA covers a for-profit entity doing business in California that determines processing purposes and meets at least one statutory revenue, data-volume or revenue-share threshold, plus specified controlled entities and joint ventures.
Answer from NovaCopilot, legal.exploreworldai.com/en/amnen/dataskydd, checked 2026-09-22.
- Source
- Cal. Civ. Code § 1798.140(d), California Legislative Information. Law read
- Precedent
- No precedent linked in the register yet
- Provision
- Cal. Civ. Code § 1798.140(d)
- Object
- topic:us-ca:dataskydd
- Source
- NovaCopilot
Questions on this topic
Compliance chain (element, obligation, decision, sanction)
The chain for this topic is not yet in the register.
Delaware
topic:us-de:dataskydd
A source-bound local answer will be published after a legal source has been verified.
Compliance chain (element, obligation, decision, sanction)
The chain for this topic is not yet in the register.
Norway
topic:no:dataskydd
Kan arbeidsgiver se i den ansattes e-post?
Bare i to tilfeller: når det er nødvendig for å ivareta den daglige driften eller andre berettigede interesser i virksomheten, eller ved begrunnet mistanke om grovt pliktbrudd eller straffbart forhold. Den ansatte skal så langt som mulig varsles og gis anledning til å uttale seg og til å være til stede, og innsynet skal dokumenteres. Regelen står i forskrift 2. juli 2018 nr. 1108, gitt med hjemmel i arbeidsmiljøloven § 9-5, og behandlingen må i tillegg oppfylle personopplysningsloven og GDPR.
Answer from NovaCopilot, legal.exploreworldai.com/en/amnen/dataskydd, checked 2026-09-22.
- Source
- Forskrift om arbeidsgivers innsyn i e-postkasse §§ 2 og 3, jf. arbeidsmiljøloven § 9-5, Lovdata. Law read
- Precedent
- No precedent linked in the register yet
- Provision
- Forskrift om arbeidsgivers innsyn i e-postkasse §§ 2 og 3, jf. arbeidsmiljøloven § 9-5
- Object
- topic:no:dataskydd
- Source
- NovaCopilot
Questions on this topic
Statute text
Compliance chain (element, obligation, decision, sanction)
The chain for this topic is not yet in the register.
Denmark
topic:dk:dataskydd
Hvornår skal et brud på persondatasikkerheden anmeldes til Datatilsynet?
Den dataansvarlige skal anmelde bruddet uden unødig forsinkelse og om muligt senest 72 timer efter, at bruddet er konstateret, medmindre det er usandsynligt, at bruddet medfører en risiko for de registrerede. Ved høj risiko skal de registrerede også underrettes. Alle brud skal dokumenteres internt, også de der ikke anmeldes.
Answer from NovaCopilot, legal.exploreworldai.com/en/amnen/dataskydd, checked 2026-10-01.
- Source
- Databeskyttelsesforordningen artikel 33 og 34, sammen med databeskyttelsesloven, Retsinformation. Law read
- Precedent
- No precedent linked in the register yet
- Provision
- Databeskyttelsesforordningen artikel 33 og 34, sammen med databeskyttelsesloven
- Object
- topic:dk:dataskydd
- Source
- NovaCopilot
Questions on this topic
Statute text
Compliance chain (element, obligation, decision, sanction)
The chain for this topic is not yet in the register.
Finland
topic:fi:dataskydd
Milloin tietoturvaloukkauksesta on ilmoitettava tietosuojavaltuutetulle?
Rekisterinpitäjän on ilmoitettava henkilötietojen tietoturvaloukkauksesta ilman aiheetonta viivytystä ja mahdollisuuksien mukaan 72 tunnin kuluessa siitä, kun loukkaus on tullut tietoon, jollei loukkauksesta todennäköisesti aiheudu riskiä rekisteröidyille. Korkean riskin tilanteessa myös rekisteröidyille on ilmoitettava. Kaikki loukkaukset on dokumentoitava sisäisesti.
Answer from NovaCopilot, legal.exploreworldai.com/en/amnen/dataskydd, checked 2026-10-01.
- Source
- Tietosuoja-asetuksen 33 ja 34 artikla yhdessä tietosuojalain kanssa, Finlex. Law read
- Precedent
- No precedent linked in the register yet
- Provision
- Tietosuoja-asetuksen 33 ja 34 artikla yhdessä tietosuojalain kanssa
- Object
- topic:fi:dataskydd
- Source
- NovaCopilot
Questions on this topic
Statute text
Compliance chain (element, obligation, decision, sanction)
The chain for this topic is not yet in the register.
Germany
topic:de:dataskydd
Wann muss ein Unternehmen einen Datenschutzbeauftragten benennen?
Nicht-öffentliche Stellen benennen einen Datenschutzbeauftragten, soweit sie in der Regel mindestens zwanzig Personen ständig mit der automatisierten Verarbeitung personenbezogener Daten beschäftigen. Unabhängig davon besteht die Pflicht, wenn nach der Verordnung eine Datenschutz-Folgenabschätzung durchzuführen ist oder Daten geschäftsmäßig zur Übermittlung verarbeitet werden.
Answer from NovaCopilot, legal.exploreworldai.com/en/amnen/dataskydd, checked 2026-10-01.
- Source
- Bundesdatenschutzgesetz, § 38, Bundesministerium der Justiz, Gesetze im Internet. Law read
- Precedent
- No precedent linked in the register yet
- Provision
- Bundesdatenschutzgesetz, § 38
- Object
- topic:de:dataskydd
- Source
- NovaCopilot
Questions on this topic
Statute text
Compliance chain (element, obligation, decision, sanction)
The chain for this topic is not yet in the register.
France
topic:fr:dataskydd
Quel est le rôle de la CNIL dans le contrôle des traitements de données ?
La Commission nationale de l'informatique et des libertés est l'autorité de contrôle française au sens du règlement général sur la protection des données. Elle informe, conseille, contrôle sur place et sur pièces, instruit les plaintes et peut prononcer des mesures correctrices et des sanctions.
Answer from NovaCopilot, legal.exploreworldai.com/en/amnen/dataskydd, checked 2026-10-01.
- Source
- Loi n° 78-17, article 8, Légifrance. Law read
- Precedent
- No precedent linked in the register yet
- Provision
- Loi n° 78-17, article 8
- Object
- topic:fr:dataskydd
- Source
- NovaCopilot
Questions on this topic
Statute text
Compliance chain (element, obligation, decision, sanction)
The chain for this topic is not yet in the register.
Machine-readable: /api/public/v1/topic-node?topic=dataskydd
Source: NovaCopilot