Privacy Law Applicability Checker
Published July 23, 2026
Different privacy laws apply depending on where your users are located and what kind of data you collect, not where your business is based. Select your platform and answer five yes-or-no questions below to see exactly which regulations you need to comply with.
How to Use This Tool
Start by selecting your platform type from the dropdown: website, iOS app, Android app, or both. Then answer each of the five questions by toggling Yes or No. The checker uses a simple rule table: each region you select maps to the privacy law that governs personal data in that jurisdiction. Hit "Check Applicable Laws" to see your results. Each law in your checklist includes a brief description of what it requires. Use the results as a starting point, then generate your privacy policy to create a compliant document tailored to your specific setup.
Why Knowing Your Applicable Laws Matters
Privacy laws apply based on where your users are, not where your company is registered. An app developed in Texas that has a single user in Munich must comply with the GDPR. A website hosted in Canada that gets visitors from Sao Paulo falls under Brazil's LGPD. Getting this wrong is not a theoretical risk: the Irish Data Protection Commission fined WhatsApp 225 million euros in 2021 for inadequate transparency, and Google received a 50 million euro GDPR fine from France's CNIL for insufficient consent disclosures.
Beyond fines, app stores enforce compliance at the listing level. Google Play requires a privacy policy URL and a completed Data Safety section for every published app. Apple mandates a privacy policy link in App Store Connect and rejects submissions that don't include one. Knowing which laws apply is the first step to getting both your legal obligations and your store listing requirements right.
Once you know which laws cover your user base, the next step is building a privacy policy that addresses each one. You can learn how to write a privacy policy for your app with our step-by-step guide, or jump straight to the generator to create one in minutes.
Frequently Asked Questions
Do privacy laws apply even if my business is not in the same country as my users?
Yes. Most modern privacy laws, including the GDPR, CCPA, and LGPD, apply based on where the user is located, not where the business is incorporated. If your app or website is accessible to people in a regulated jurisdiction, that jurisdiction's law applies to you.
What happens if I don't comply with an applicable privacy law?
Consequences range from fines to app removal. GDPR penalties can reach 20 million euros or 4% of global annual revenue, whichever is higher. The CCPA allows statutory damages of $100 to $750 per consumer per incident. Google Play and the App Store can also suspend or remove apps that lack required privacy disclosures.
Is this checker a substitute for legal advice?
No. This tool provides a general overview based on the regions and data practices you select. It does not account for sector-specific regulations like HIPAA or state-level laws beyond California. For apps handling sensitive data (health, financial, children's information), consult a qualified privacy attorney.
Can multiple privacy laws apply to the same app at once?
Absolutely. An app with users in the EU, California, and Brazil must comply with the GDPR, CCPA/CPRA, and LGPD simultaneously. Each law has its own requirements for disclosure, consent, and user rights. A comprehensive privacy policy should address all applicable laws in a single document.
Does COPPA apply if my app is not directed at children?
COPPA applies if you have actual knowledge that you are collecting data from children under 13, even if your app is not specifically designed for them. If your app attracts a significant child audience or you knowingly collect data from minors, COPPA obligations apply regardless of your intended audience.