{"id":15041,"date":"2024-12-17T00:00:00","date_gmt":"2024-12-17T00:00:00","guid":{"rendered":"https:\/\/www.mailgun.com\/blog\/conformite-des-donnees-reglementations\/"},"modified":"2026-09-22T17:10:51","modified_gmt":"2026-09-22T17:10:51","slug":"conformite-des-donnees-reglementations","status":"publish","type":"blog","link":"https:\/\/www.mailgun.com\/fr\/blog\/email\/conformite-des-donnees-reglementations\/","title":{"rendered":"Naviguer dans la conformit\u00e9 et les r\u00e9glementations mondiales des donn\u00e9es en 2025"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Protection from loss, theft, and corruption \u2013 these are the goals of data privacy regulations.<\/p>\n\n<p class=\"wp-block-paragraph\">Adhering to these regulations makes you a trusted sender but it takes resources to keep up with the evolving policies around data privacy. As a dedicated data processor ourselves, we respect every bit of data we touch, and this index will be your guide to existing global legislation and what to expect for the year ahead.<\/p>\n\r\n    <nav data-content-type=\"longform\" class=\"toc-block longform-spacings px-5 py-6 px-md-6 px-lg-7 py-md-7 bg-light fs-sm rounded-lg\" aria-labelledby=\"toc-title-1835\"><p class=\"h5 m-0\" id=\"toc-title-1835\">Table des mati\u00e8res<\/p><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">01<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#what-is-data-compliance\">What is data compliance?<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">02<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#why-data-compliance-matters\">Why data compliance matters<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">03<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#data-and-compliance-parties-involved\">Data and compliance: Parties involved<\/a><a class=\"scrollme link-body-color\" href=\"#who-are-the-data-subjects\">Who are the data subjects?<\/a><a class=\"scrollme link-body-color\" href=\"#who-are-the-data-controllers\">Who are the data controllers?<\/a><a class=\"scrollme link-body-color\" href=\"#who-are-the-data-processors\">Who are the data processors<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">04<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#consumer-privacy-laws\">Consumer privacy laws<\/a><a class=\"scrollme link-body-color\" href=\"#general-data-protection-regulation-gdpr\">General Data Protection Regulation (GDPR)<\/a><a class=\"scrollme link-body-color\" href=\"#california-consumer-privacy-act-ccpa\">California Consumer Privacy Act (CCPA)<\/a><a class=\"scrollme link-body-color\" href=\"#health-insurance-portability-and-accountability-act-hipaa\">Health Insurance Portability and Accountability Act (HIPAA)<\/a><a class=\"scrollme link-body-color\" href=\"#comparing-global-data-policies-reference-table\">Comparing global data policies: reference table<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">05<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#data-security-standards\">Data security standards<\/a><a class=\"scrollme link-body-color\" href=\"#pci-data-security-standard-pci-dss\">PCI Data Security Standard (PCI DSS)<\/a><a class=\"scrollme link-body-color\" href=\"#soc2-type-i-and-ii-compliance\">SOC2 Type I and II Compliance<\/a><a class=\"scrollme link-body-color\" href=\"#iso-standards\">ISO standards<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">06<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#what-are-the-limitations-of-compliance-laws\">What are the limitations of compliance laws?<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">07<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#data-regulations-heading-into-2025\">Data regulations heading into 2025<\/a><a class=\"scrollme link-body-color\" href=\"#domestic-policy-updates\">Domestic policy updates<\/a><a class=\"scrollme link-body-color\" href=\"#other-countries-currently-creating-policies\">Other countries currently creating policies<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">08<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#data-compliance-matters-at-mailgun\">Data compliance matters at Mailgun<\/a><\/div><\/div><\/nav>\n<h2 class=\"wp-block-heading\">What is data compliance?<\/h2>\n\n<p class=\"wp-block-paragraph\"><b>Data compliance is the process that determines legislation and governance to oversee data privacy<\/b>. That\u2019s a fancy way of saying data legislation tells you how to manage the data within your organization. Data regulations cover the access and management of data pertaining to:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Consumer privacy<\/li>\n\n\n\n<li>Data security<\/li>\n\n\n\n<li>Data storage requirements<\/li>\n\n\n\n<li>How to handle unauthorized access and cybersecurity attacks<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">Data compliance covers nothing short of fundamental security rights, and there are a lot of angles we can look at \u2013 from the rights of the individual to the operation of businesses.<\/p>\n\n<h2 class=\"wp-block-heading\">Why data compliance matters<\/h2>\n\n<p class=\"wp-block-paragraph\">We know firsthand that data is a complex business topic, but consumer data is much more than just information or numbers. There are human beings connected to every piece of data you obtain. That\u2019s why it\u2019s worth protecting and all more important that it does not get in the wrong hands.<\/p>\n\n<p class=\"wp-block-paragraph\">Of course, that data is also very valuable to the companies that collect it, helping them grow their business and build better user experiences. Data legislation not only protects the privacy of everyday people but the security of an organization\u2019s data assets.<\/p>\n\n<p class=\"wp-block-paragraph\">In a <a href=\"https:\/\/www.mailjet.com\/blog\/email-best-practices\/data-compliance-survey\/#chapter-2\" target=\"_tabs\" rel=\"noopener noreferrer\">survey conducted by Sinch Mailjet<\/a>, it\u2019s clear that GDPR has established itself as a necessity, but a substantial <b>25% of those surveyed were unsure of the specific data legislation that applied to them<\/b>. There\u2019s a lot to go through between countries and definitions but keep reading and we\u2019ll set the record straight on these policies.<\/p>\n<div class=\"chart longform-spacings d-flex flex-column gap-3\">\r\n    <div class=\"rounded-lg bg-light-subtle position-relative py-5 py-md-6 py-lg-7 px-3 px-md-4\">\r\n\r\n                    <p class=\"mb-4 fs-sm fw-bold text-accent text-center\">\r\n                Does your business handle data from?            <\/p>\r\n        \r\n                                <div class=\"d-flex gap-4 flex-column\">\r\n                <div class=\"auto-chart\"  data-chart-type=\"bar\" data-chart-percentage=\"true\" data-chart-track=\"true\" data-chart-max=\"70\" data-chart-color=\"#1e73be\" data-chart-values=\"[&quot;21.9&quot;,&quot;61.6&quot;,&quot;21.1&quot;,&quot;17.2&quot;,&quot;29&quot;]\" data-chart-colors=\"[&quot;#FFBE3C&quot;,&quot;#FFBE3C&quot;,&quot;#FFBE3C&quot;,&quot;#FFBE3C&quot;,&quot;#FFBE3C&quot;]\" data-chart-titles=\"[&quot;The UK&quot;,&quot;The EU&quot;,&quot;California, USA&quot;,&quot;Virginia, USA&quot;,&quot;Not applicable&quot;]\" data-chart-series=\"[]\"><\/div>\r\n\r\n                            <\/div>\r\n            \r\n        \r\n        \r\n    <\/div>\r\n    <\/div>\n<h2 class=\"wp-block-heading\">Data and compliance: Parties involved<\/h2>\n\n<p class=\"wp-block-paragraph\">There are three distinct parties affected by data legislations; data subjects, data controllers, and data processors, each with their own role to play. Though these three players are each represented in all current data legislation, they are not represented in the same way for each.<\/p>\n\n<p class=\"wp-block-paragraph\">Before we break down who has to follow which rules, let\u2019s get some basic definitions out of the way.<\/p>\n\n<h3 class=\"wp-block-heading\">Who are the data subjects?<\/h3>\n\n<p class=\"wp-block-paragraph\"><b>Data subjects are individuals whose personal data is collected, stored, sold, or processed by a business or organization<\/b>. As an email sender your data subjects are your subscribers, or anyone whose email address you store.<\/p>\n\n<p class=\"wp-block-paragraph\">Legislation that represents the data rights of consumers first emerged in 2016 with the European Union\u2019s (EU) General Data Protection Regulations (GDPR) (effective date in May 2018). In the U.S. there is currently no comprehensive federal data protection legislation. So far, only a handful of states have put forth their own legislation, including California, with the California Consumer Privacy Act (CCPA) which became effective in January of 2020.<\/p>\n\n<h3 class=\"wp-block-heading\">Who are the data controllers?<\/h3>\n\n<p class=\"wp-block-paragraph\"><b>Data controllers determine the purposes and means by which personal data is processed.<\/b> If you are a company that collects and stores personally identifiable information (PII) and you have your own users\/customers, then you are a data controller. You are also a data controller just by processing the data of your own employees. Data controllers are decision-makers that call the shots on how the data they collect is managed and used.<\/p>\n\n<h3 class=\"wp-block-heading\">Who are the data processors<\/h3>\n\n<p class=\"wp-block-paragraph\">A data processor is the one who carries out the actual processing of the data. A good example of the data roles would be to consider your favorite ecommerce store. The users\/customers are the data subjects, the store is the data controller managing the products, and a company like Mailgun is one of the data processors working with that company to enable their automated <a href=\"https:\/\/www.mailgun.com\/fr\/blog\/email\/what-is-transactional-email-basics\/\" target=\"_tabs\" rel=\"noopener noreferrer\">transaction emails<\/a>.<\/p>\n\n<p class=\"wp-block-paragraph\">You are not necessarily limited to one data role. Mailgun, for example, is a data processor when it comes to enabling automated email but we are also a data controller in terms of collecting and storing our customer\u2019s own data, and a data controller in our partnership with our payment provider. There can also be sub-processors who process data for the data processor on behalf of the data controller.<\/p>\n\n<h2 class=\"wp-block-heading\">Consumer privacy laws<\/h2>\n\n<p class=\"wp-block-paragraph\">Now that we\u2019ve got the definitions out of the way, let\u2019s talk about the data laws that may affect you.<\/p>\n\n<p class=\"wp-block-paragraph\">There are a growing number of legislations out there, and depending on the specific laws, data subjects, controllers, and processors have varying rights. If you\u2019re a U.S. based business, these are the three overall guiding rules that will likely affect you the most:<\/p>\n\n<h3 class=\"wp-block-heading\">General Data Protection Regulation (GDPR)<\/h3>\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.mailgun.com\/fr\/blog\/email\/le-rgpd-arrive\/\" target=\"_tabs\" rel=\"noopener noreferrer\"><b>The GDPR<\/b><\/a><b> was the first significant legislation that focused on the protection of data rights by mandating transparency and restoring data control to the individual<\/b>. The GDPR imposes hefty fines for violations and governs data use with the mentality that individuals loan their data to service providers as opposed to surrendering it upon signup. It seeks to ensure utmost protection to consumers.<\/p>\n\n<p class=\"wp-block-paragraph\"><b>Key facts to remember:<\/b><\/p>\n\n<ul class=\"wp-block-list\">\n<li>Effective since May 25, 2018.<\/li>\n\n\n\n<li>It harmonizes data protection laws throughout the EU.<\/li>\n\n\n\n<li>It affects any business that processes data of EU citizens regardless of where they reside.<\/li>\n<\/ul>\n    <div data-content-type=\"longform\"  class=\"callout text-body-color px-5 py-6 px-md-6 px-lg-7 py-md-7 longform-spacings rounded-lg bg-light\" data-theme=\"light\">\r\n\r\n        <div class=\"content-body\"> Want to learn more about GDPR? Check out our post <a href=\"https:\/\/www.mailgun.com\/fr\/blog\/email\/le-rgpd-arrive\/\">General Data Protection Regulation (GDPR): Why should you care?<\/a><\/div>\r\n    <\/div>\r\n\n<h3 class=\"wp-block-heading\">California Consumer Privacy Act (CCPA)<\/h3>\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.mailgun.com\/fr\/blog\/email\/california-privacy-laws\/\" target=\"_tabs\" rel=\"noopener noreferrer\"><b>The CCPA<\/b><\/a><b> only protects the rights of individuals who are California residents.<\/b> If you are already GDPR compliant, becoming CCPA compliant will not require significant additional effort.<\/p>\n\n<p class=\"wp-block-paragraph\"><b>Key facts to remember:<\/b><\/p>\n\n<ul class=\"wp-block-list\">\n<li>Effective since Jan. 1, 2020.<\/li>\n\n\n\n<li>This legislation provides data protection rights for California residents.<\/li>\n\n\n\n<li>The CCPA affects organizations that conduct business in California.<\/li>\n<\/ul>\n    <div data-content-type=\"longform\"  class=\"callout text-body-color px-5 py-6 px-md-6 px-lg-7 py-md-7 longform-spacings rounded-lg bg-light\" data-theme=\"light\">\r\n\r\n        <div class=\"content-body\"> Want to learn more about CCPA? Check out our post <a href=\"https:\/\/www.mailgun.com\/fr\/blog\/email\/california-privacy-laws\/\">California Consumer Privacy Act (CCPA): Why should you care?<\/a><\/div>\r\n    <\/div>\r\n\n<h3 class=\"wp-block-heading\">Health Insurance Portability and Accountability Act (HIPAA)<\/h3>\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.mailgun.com\/fr\/blog\/email\/email-conformite-hipaa\/\" target=\"_tabs\" rel=\"noopener noreferrer\"><b>HIPPA<\/b><\/a><b> includes rules for emerging technologies to manage health data like email, digital payment providers, and telehealth services<\/b>. 2022 brought proposed updates affecting protected health information (PHI), flow of information, and patient access rights. <a href=\"https:\/\/www.hipaajournal.com\/new-hipaa-regulations\/\" target=\"_tabs\" rel=\"noopener noreferrer\">The HIPAA Privacy Rule<\/a> aims to improve care coordination and data sharing (alongside the rise of telehealth) and will require extensive infrastructure updates and additional training for health care providers and business associates.<\/p>\n\n<p class=\"wp-block-paragraph\"><b>Key facts to remember:<\/b><\/p>\n\n<ul class=\"wp-block-list\">\n<li>Originally passed in 1996.<\/li>\n\n\n\n<li>It protects the disclosure of personal health information.<\/li>\n\n\n\n<li>HIPAA applies to covered entities and business associates within the United States, even with respect to non-United States citizens or residents.<\/li>\n<\/ul>\n    <div data-content-type=\"longform\"  class=\"callout text-body-color px-5 py-6 px-md-6 px-lg-7 py-md-7 longform-spacings rounded-lg bg-light\" data-theme=\"light\">\r\n\r\n        <div class=\"content-body\"> Want to learn more about HIPAA? Check out our post <a href=\"https:\/\/www.mailgun.com\/fr\/blog\/email\/email-conformite-hipaa\/\">HIPPA compliance and email: What you need to know<\/a><\/div>\r\n    <\/div>\r\n\n<h3 class=\"wp-block-heading\">Comparing global data policies: reference table<\/h3>\n\n<p class=\"wp-block-paragraph\">GDPR, CCPA, and HIPAA are the big three when it comes to regulating individual consumer data, but they aren\u2019t the only legislation, and operating without some of the other compliance standards can make it challenging to operate your business across borders.<\/p>\n\n<p class=\"wp-block-paragraph\">We know that all this policy talk might be starting to feel a bit like a textbook. We\u2019re not in the business of lecturing but we do have the facts. <b>If you are unsure which data legislation applies to you, we&rsquo;ve created a table that helps you get the knowledge fast<\/b>.<\/p>\n\n<figure tabindex=\"0\" class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>\nLegi\u00adsla\u00adtion\n<\/th><th>\nFine\u00ads\n<\/th><th>\nProt\u00adected data\u00ad subj\u00adects\n<\/th><th>\nAffe\u00adcted data\u00ad cont\u00adrollers and proc\u00adessors\n<\/th><\/tr><\/thead><tbody><tr><td>\n<strong><a href=\"https:\/\/gdpr-info.eu\/\">G\u00adDPR<\/a>:<\/strong> The EU\u2019s\u00ad Gene\u00adral Data\u00ad Prot\u00adection Regu\u00adlation\n<\/td><td>\n\u20ac20M\u00ad\u00ad or 4% of annu\u00ad\u00adal glob\u00ad\u00adal turn\u00ad\u00adover (whi\u00ad\u00adchever is grea\u00ad\u00adter).\n<\/td><td>\nAny EU citi\u00adzen whos\u00ade pers\u00adonal data\u00ad is coll\u00adected, held\u00ad, or proc\u00adessed by an orga\u00adnization.\n<\/td><td>\nGlob\u00ad\u00adal busi\u00ad\u00adnesses that\u00ad\u00ad proc\u00ad\u00adess pers\u00ad\u00adonal data\u00ad\u00ad of EU citi\u00ad\u00adzens incl\u00ad\u00aduding nonp\u00ad\u00adrofits that\u00ad\u00ad acce\u00ad\u00adpt dona\u00ad\u00adtions from\u00ad\u00ad EU citi\u00ad\u00adzens.\n<\/td><\/tr><tr><td>\n<strong><a href=\"https:\/\/oag.ca.gov\/privacy\/ccpa\">C\u00adCPA<\/a>:<\/strong> Cali\u00adfornia\u2019s Cons\u00adumer Priv\u00adacy Act\n<\/td><td>\n$100\u00ad\u00ad-$750 per cons\u00ad\u00adumer per inci\u00ad\u00addent. $240\u00ad\u00ad0-$7500 per civi\u00ad\u00adl viol\u00ad\u00adation.\n<\/td><td>\nOnly\u00ad resi\u00addents of Cali\u00adfornia.\n<\/td><td>\nBusi\u00ad\u00adnesses oper\u00ad\u00adating in CA that\u00ad\u00ad have\u00ad\u00ad reve\u00ad\u00adnue of $25M\u00ad\u00ad or more\u00ad\u00ad, or proc\u00ad\u00adess data\u00ad\u00ad on 50,0\u00ad\u00ad00 resi\u00ad\u00addents or more\u00ad\u00ad.\n<\/td><\/tr><tr><td>\n<strong><a href=\"https:\/\/le.utah.gov\/~2022\/bills\/static\/SB0227.html\">U\u00adCPA<\/a><\/strong> Utah\u00ad Cons\u00adumer Priv\u00adacy Act\n<\/td><td>\nUp to $750\u00ad0 per viol\u00adation.\n<\/td><td>\nAn indi\u00advidual who is a resi\u00addent of Utah\u00ad acti\u00adng in an indi\u00advidual or hous\u00adehold cont\u00adext.\n<\/td><td>\nPers\u00adons or enti\u00adties doin\u00adg busi\u00adness in the stat\u00ade of Utah\u00ad with\u00ad an annu\u00adal reve\u00adnue of $25,\u00ad000,000 or more\u00ad, who eith\u00ader proc\u00adess pers\u00adonal data\u00ad of 100,\u00ad000 or more\u00ad cons\u00adumers or deri\u00adve over\u00ad 50% of thei\u00adr gros\u00ads reve\u00adnue from\u00ad the sale\u00ad of pers\u00adonal data\u00ad whil\u00ade cont\u00adrolling or proc\u00adessing pers\u00adonal data\u00ad of 25,0\u00ad00 or more\u00ad cons\u00adumers.\n<\/td><\/tr><tr><td>\n<strong><a href=\"https:\/\/law.lis.virginia.gov\/vacodefull\/title59.1\/chapter53\/\">V\u00adCDPA<\/a><\/strong> Virg\u00adinia Cons\u00adumer Data\u00ad Prot\u00adection Act\n<\/td><td>\nUp to $750\u00ad0 per viol\u00adation enfo\u00adrced by the stat\u00ade atto\u00adrney gene\u00adral.\n<\/td><td>\nOnly\u00ad resi\u00addents of Virg\u00adinia.\n<\/td><td>\nNatu\u00adral and lega\u00adl pers\u00adons cond\u00aducting busi\u00adness in VA who meet\u00ad at leas\u00adt one of thes\u00ade requ\u00adirements: Cont\u00adrol or proc\u00adess pers\u00adonal data\u00ad of at leas\u00adt 100,\u00ad000 VA resi\u00addents, or cont\u00adrol and proc\u00adess pers\u00adonal data\u00ad of at leas\u00adt 25,0\u00ad00 VA cons\u00adumers and deri\u00adve 50% or more\u00ad gros\u00ads reve\u00adnue from\u00ad the sale\u00ad of pers\u00adonal data\u00ad in a cale\u00adndar year\u00ad.\n<\/td><\/tr><tr><td>\n<strong><a href=\"https:\/\/www.doj.state.or.us\/consumer-protection\/id-theft-data-breaches\/privacy\/\">O\u00adCPA<\/a><\/strong> Oreg\u00adon Cons\u00adumer Priv\u00adacy Act\n<\/td><td>\nUp to $7,5\u00ad00 per viol\u00adation\n<\/td><td>\nOnly\u00ad resi\u00addents of Oreg\u00adon.\n<\/td><td>\nBusi\u00adnesses that\u00ad cont\u00adrol pers\u00adonal data\u00ad of at leas\u00adt 100,\u00ad000 cons\u00adumers or cont\u00adrol or proc\u00adess pers\u00adonal data\u00ad of at leas\u00adt 25,0\u00ad00 or more\u00ad cons\u00adumers and deri\u00adve 25 perc\u00adent or more\u00ad of annu\u00adal gros\u00ads reve\u00adnue from\u00ad sell\u00ading pers\u00adonal data\u00ad.\n<\/td><\/tr><tr><td>\n<strong><a href=\"https:\/\/archive.legmt.gov\/bills\/2023\/billpdf\/SB0384.pdf\">M\u00adTCDPA<\/a><\/strong> Mont\u00adana Cons\u00adumer Data\u00ad Priv\u00adacy Act\n<\/td><td>\nFine\u00ads not spec\u00adified unde\u00adr the MTCD\u00adPA, but note\u00ads that\u00ad the Atto\u00adrney Gene\u00adral can \u201cbri\u00adng an acti\u00adon\u201d\n<\/td><td>\nOnly\u00ad resi\u00addents of Mont\u00adana\n<\/td><td>\nBusi\u00adnesses that\u00ad cont\u00adrol pers\u00adonal data\u00ad of at leas\u00adt 35,0\u00ad00 cons\u00adumers excl\u00aduding pers\u00adonal data\u00ad cont\u00adrolled or proc\u00adessed only\u00ad for comp\u00adleting paym\u00adent tran\u00adsactions, or cont\u00adrol or proc\u00adess pers\u00adonal data\u00ad of at leas\u00adt 10,0\u00ad00 or more\u00ad cons\u00adumers and deri\u00adve 20 perc\u00adent or more\u00ad of annu\u00adal gros\u00ads reve\u00adnue from\u00ad sell\u00ading pers\u00adonal data\u00ad\n<\/td><\/tr><tr><td>\n<strong><a href=\"https:\/\/www.sll.texas.gov\/spotlight\/2024\/07\/texas-data-privacy-and-security-act\/\">T\u00adDPSA<\/a><\/strong> Texa\u00ads Data\u00ad  Priv\u00adacy and Secu\u00adrity Act\n<\/td><td>\nUp to $7,5\u00ad00 per viol\u00adation\n<\/td><td>\nOnly\u00ad resi\u00addents of Texa\u00ads\n<\/td><td>\nBusi\u00adnesses cond\u00aducting busi\u00adness in Texa\u00ads or gene\u00adrating prod\u00aducts or serv\u00adices cons\u00adumed by Texa\u00ads resi\u00addents and who proc\u00adess or enga\u00adging in the sale\u00ad of pers\u00adonal data\u00ad that\u00ad do not iden\u00adtifying as a smal\u00adl busi\u00adness as defi\u00adned by the U.S.\u00ad Smal\u00adl Busi\u00adness Admi\u00adnistration (ind\u00adependent for-\u00adprofit enti\u00adty with\u00ad fewe\u00adr than\u00ad 500 empl\u00adoyees)\n<\/td><\/tr><tr><td>\n<strong><a href=\"https:\/\/www.cdc.gov\/phlp\/publications\/topic\/hipaa.html\">H\u00adIPAA<\/a>:<\/strong> Heal\u00adth Insu\u00adrance Port\u00adability and Acco\u00aduntability Act\n<\/td><td>\nCivi\u00adl mone\u00adtary pena\u00adlties (CMP\u00ad) are impo\u00adsed rang\u00ading from\u00ad $100\u00ad to $50,\u00ad000 per affe\u00adcted PHI reco\u00adrd, with\u00ad a maxi\u00admum fine\u00ad of $1.5\u00ad mill\u00adion per inci\u00addent.\n<\/td><td>\nAll medi\u00adcal reco\u00adrds and othe\u00adr indi\u00advidually iden\u00adtifiable heal\u00adth info\u00adrmation used\u00ad or disc\u00adlosed by a cove\u00adred enti\u00adty in any form\u00ad.\n<\/td><td>\nHIPA\u00adA affe\u00adcts heal\u00adth care\u00ad prov\u00adiders, heal\u00adth plan\u00ads, and heal\u00adth care\u00ad clea\u00adringhouses, and Busi\u00adness Asso\u00adciates  carr\u00adying out work\u00ad on beha\u00adlf of a cove\u00adred enti\u00adty.\n<\/td><\/tr><tr><td>\n<strong><a href=\"https:\/\/ico.org.uk\/for-organisations\/guide-to-data-protection\/guide-to-the-general-data-protection-regulation-gdpr\/\">U\u00adK GDPR\u00ad<\/a>:<\/strong> Grea\u00adt Brit\u00adain\u2019s enac\u00adtment of the GDPR\u00ad afte\u00adr Brex\u00adit. <a href=\"https:\/\/ico.org.uk\/for-organisations\/dp-at-the-end-of-the-transition-period\/data-protection-and-the-eu-in-detail\/the-uk-gdpr\/\">The\u00ad GDPR\u00ad is reta\u00adined in dome\u00adstic law as the UK GDPR\u00ad<\/a>, but the UK has the inde\u00adpendence to keep\u00ad the fram\u00adework unde\u00adr revi\u00adew.\n<\/td><td>\nThe UK GDPR\u00ad has two tier\u00ads of fine\u00ads; the stan\u00addard maxi\u00admum fine\u00ad is \u00a38.7\u00ad mill\u00adion or 2% of the tota\u00adl annu\u00adal worl\u00addwide turn\u00adover and the high\u00ader maxi\u00admum fine\u00ad, \u00a317.\u00ad5 mill\u00adion or 4% of the tota\u00adl annu\u00adal worl\u00addwide turn\u00adover.\n<\/td><td>\nGove\u00adrns the proc\u00adessing of pers\u00adonal data\u00ad from\u00ad indi\u00adviduals loca\u00adted with\u00adin the Unit\u00aded King\u00addom.\n<\/td><td>\nThe UK GDPR\u00ad appl\u00adies to cont\u00adrollers and proc\u00adessors with\u00adin the UK. It cove\u00adrs orga\u00adnizations base\u00add outs\u00adide the UK if thei\u00adr proc\u00adessing acti\u00advities rela\u00adte to moni\u00adtoring, or   offe\u00adring good\u00ads or serv\u00adices to indi\u00adviduals in the UK.\n<\/td><\/tr><tr><td>\n<strong><a href=\"https:\/\/iapp.org\/resources\/article\/brazilian-data-protection-law-lgpd-english-translation\/\">L\u00adGPD<\/a>:<\/strong> Braz\u00adil\u2019s Gene\u00adral Pers\u00adonal Data\u00ad Prot\u00adection Law\n<\/td><td>\nUp to 2% of the net turn\u00adover of the econ\u00adomic grou\u00adp in Braz\u00adil, in its last\u00ad fisc\u00adal year\u00ad, limi\u00adted to BRL 50 mill\u00adion (app\u00adrox. USD 10.5\u00ad mill\u00adion) per viol\u00adation.\n<\/td><td>\nAppl\u00adies to any natu\u00adral pers\u00adon loca\u00adted in Braz\u00adil whos\u00ade data\u00ad has been\u00ad coll\u00adected or proc\u00adessed, rega\u00adrdless of wher\u00ade the comp\u00adany that\u00ad coll\u00adects the data\u00ad is loca\u00adted.\n<\/td><td>\nThe LGPD\u00ad appl\u00adies to any data\u00ad proc\u00adessing that\u00ad take\u00ads plac\u00ade in Braz\u00adil, for the purp\u00adoses of offe\u00adring good\u00ads and serv\u00adices or to proc\u00adess data\u00ad of peop\u00adle who are loca\u00adted in Braz\u00adil.\n<\/td><\/tr><tr><td>\n<strong><a href=\"https:\/\/www.priv.gc.ca\/en\/privacy-topics\/privacy-laws-in-canada\/the-personal-information-protection-and-electronic-documents-act-pipeda\/pipeda_brief\/\">P\u00adIPEDA<\/a>:<\/strong> Cana\u00adda\u2019s Pers\u00adonal Info\u00adrmation Prot\u00adection and Elec\u00adtronic Docu\u00adments Act\n<\/td><td>\nOrga\u00adnizations that\u00ad comm\u00adit offe\u00adnses may be subj\u00adect to fine\u00ads of up to CAD 100,\u00ad000.\n<\/td><td>\nPIPE\u00adDA prot\u00adects the pers\u00adonal info\u00adrmation of indi\u00adviduals. An indi\u00advidual does\u00ad not have\u00ad to be a Cana\u00addian citi\u00adzen or a resi\u00addent of a spec\u00adific prov\u00adince.\n<\/td><td>\nPIPE\u00adDA appl\u00adies to priv\u00adate-sector orga\u00adnizations acro\u00adss Cana\u00adda that\u00ad coll\u00adect, use or disc\u00adlose pers\u00adonal info\u00adrmation in the cour\u00adse of a <a href=\"https:\/\/www.priv.gc.ca\/en\/privacy-topics\/privacy-laws-in-canada\/the-personal-information-protection-and-electronic-documents-act-pipeda\/pipeda-compliance-help\/pipeda-interpretation-bulletins\/interpretations_03_ca\/\">com\u00admercial acti\u00advity<\/a>.\n<\/td><\/tr><tr><td>\n<strong><a href=\"https:\/\/www.ppc.go.jp\/en\/\">A\u00adPPI<\/a>:<\/strong> Japa\u00adn\u2019s Pers\u00adonal Info\u00adrmation Priv\u00adacy Act\n<\/td><td>\nUp to 100,\u00ad000,000 Japa\u00adnese yen ($90\u00ad7,715) or a crim\u00adinal puni\u00adshment of up to 1 year\u00ad in pris\u00adon.\n<\/td><td>\nThe APPI\u00ad aims\u00ad to prot\u00adect the pers\u00adonal data\u00ad of Japa\u00adnese citi\u00adzens.\n<\/td><td>\nAPPI\u00ad appl\u00adies to all busi\u00adness oper\u00adators that\u00ad hand\u00adle the pers\u00adonal data\u00ad of indi\u00adviduals in Japa\u00adn. Rega\u00adrdless if the comp\u00adany is loca\u00adted with\u00adin the coun\u00adtry.\n<\/td><\/tr><tr><td>\n<strong><a href=\"https:\/\/www.dataguidance.com\/notes\/china-data-protection-overview\">P\u00adIPL<\/a>:<\/strong> Chin\u00ada\u2019s Pers\u00adonal Info\u00adrmation Prot\u00adection Law\n<\/td><td>\nThe PIPL\u00ad impo\u00adses a maxi\u00admum fine\u00ad of up to 50 mill\u00adion Yuan\u00ad (7.8\u00ad mill\u00adion USD)\u00ad, or 5% of the annu\u00adal reve\u00adnue of the prec\u00adeding fina\u00adncial year\u00ad.\n<\/td><td>\nThe PIPL\u00ad aims\u00ad to prot\u00adect the righ\u00adts and inte\u00adrests of indi\u00adviduals, regu\u00adlate pers\u00adonal info\u00adrmation proc\u00adessing acti\u00advities, and faci\u00adlitate reas\u00adonable use of pers\u00adonal info\u00adrmation.\n<\/td><td>\nPIPL\u00ad requ\u00adirements cove\u00adr all comp\u00adanies hand\u00adling the data\u00ad of Chin\u00adese citi\u00adzens, whet\u00adher they\u00ad are a dome\u00adstic or inte\u00adrnational busi\u00adness, and whet\u00adher larg\u00ade or smal\u00adl.\n<\/td><\/tr><\/tbody><\/table><\/figure>\n\n<h2 class=\"wp-block-heading\">Data security standards<\/h2>\n\n<p class=\"wp-block-paragraph\">We can\u2019t give you a data policy article without talking about these: <a href=\"https:\/\/www.mailgun.com\/fr\/blog\/product\/protection-des-emails-mailgun\/#subchapter-1\" target=\"_tabs\" rel=\"noopener noreferrer\"><b>PCI DSS, SOC2, and ISO<\/b><\/a><b> are data compliance standards<\/b>. While these often overlap with the global legislation we\u2019ve covered, there are separate compliance entities that govern them.<\/p>\n\n<p class=\"wp-block-paragraph\">These data security standards are essentially audits that result in compliance certifications. Once obtained, these standards let data controllers know that an organization is a responsible partner.<\/p>\n    <div data-content-type=\"longform\"  class=\"callout text-body-color px-5 py-6 px-md-6 px-lg-7 py-md-7 longform-spacings rounded-lg bg-light\" data-theme=\"light\">\r\n\r\n        <div class=\"content-body\"> As a responsible data processor, we pursue ISO and SOC2 to prove our security. Learn more about Sinch Mailgun security and compliance in our <a href=\"https:\/\/security.mailgun.com\/\">Trust Center<\/a>.<\/div>\r\n    <\/div>\r\n\n<p class=\"wp-block-paragraph\">Working with organizations that have achieved these standards can save you the trouble of needing to obtain them yourself. For example, Mailgun doesn\u2019t need to be PCI compliant because we sub processor the payment services, and partner with payment processors that are respecting their own obligations. <\/p>\n\n<p class=\"wp-block-paragraph\">Let\u2019s learn a bit more about these standards.<\/p>\n\n<h3 class=\"wp-block-heading\">PCI Data Security Standard (PCI DSS)<\/h3>\n\n<p class=\"wp-block-paragraph\"><b>The <\/b><a href=\"https:\/\/www.pcisecuritystandards.org\/about_us\/\" target=\"_tabs\" rel=\"noopener noreferrer\"><b>PCI DSS<\/b><\/a><b> is about creating confidence and security when processing payments<\/b>. This standard is governed by the PCI Security Standards Council and is a set of security standards formed in 2004 by Visa, Mastercard, Discover Financial Services, JCB International, and American Express. It protects cardholder data and authentication data for individuals and reduces the risk of data breaches.<\/p>\n\n<p class=\"wp-block-paragraph\">The PCI DSS has four main objectives:<\/p>\n\n<ol class=\"wp-block-list\">\n<li>Protect stored cardholder data.<\/li>\n\n\n\n<li>Use and regularly update antivirus software or programs.<\/li>\n\n\n\n<li>Restrict access to cardholder data by business need-to-know.<\/li>\n\n\n\n<li>Track and monitor all access to network resources and cardholder data.<\/li>\n<\/ol>\n\n<h3 class=\"wp-block-heading\">SOC2 Type I and II Compliance<\/h3>\n\n<p class=\"wp-block-paragraph\"><b>System and Organization Controls (SOC) are internal reports that provide proof of security<\/b>. Technology service providers like Mailgun voluntarily get this certification to prove their security processes can be trusted. Another audit-based compliance standard, <b>SOC2, holds providers accountable for their data processing methods and cyber security controls<\/b>.<\/p>\n\n<p class=\"wp-block-paragraph\">Mailgun has SOC2 Type I &amp; II, which are stringent and comprehensive reports that test the effectiveness of security controls and ensure they\u2019re working.<\/p>\n\n<ul class=\"wp-block-list\">\n<li><b>SOC 2 Type I:<\/b> Tests to ensure email security controls are in place (you need this for Type II).<\/li>\n\n\n\n<li><b>SOC 2 Type II:<\/b> Tests to ensure controls are in place and they are working effectively.<\/li>\n<\/ul>\n\n<h3 class=\"wp-block-heading\">ISO standards<\/h3>\n\n<p class=\"wp-block-paragraph\"><b>ISO standards establish baseline securities<\/b>. If every country had different approaches to security best practices, it would be nearly impossible for companies to create security infrastructure. The solution is a shared international standards body which manages compliance by consensus. The International Organization for Standardization (ISO) has developed and published 25K standards since 1947 (<a href=\"https:\/\/www.mailgun.com\/fr\/blog\/product\/protection-des-emails-mailgun\/#subchapter-1\" target=\"_tabs\" rel=\"noopener noreferrer\">Mailgun has achieved two<\/a>).<\/p>\n\n<p class=\"wp-block-paragraph\">ISO compliance proves you can handle different scenarios and control variables that help protect data and prevent malicious cyberattacks, data breaches, and other security disasters. These standards can also be specific. For example, ISO27701 is a rare certification within the email space containing 40 privacy controls that are closely mapped to GDPR standards.<\/p>\n\n<p class=\"wp-block-paragraph\">From the information we&rsquo;ve shared, you may think that existing legislation covers just about everything but that\u2019s not the way the cookie crumbles. In truth, there are many more policies coming down the pipeline.<\/p>\n\n<h2 class=\"wp-block-heading\">What are the limitations of compliance laws?<\/h2>\n\n<p class=\"wp-block-paragraph\">As you can tell from our very large table early in this post, not all data legislation is created equal. Currently, data compliance is regulated by individual countries \u00ad\u2013 and in the U.S. by individual states \u2013 and that can make things muddy for establishing effective business practices. Here are the main things to keep in mind:<\/p>\n\n<ul class=\"wp-block-list\">\n<li><b>Data jurisdiction:<\/b> <i>Where<\/i> your company exists doesn\u2019t necessarily matter. Data jurisdiction is determined more by where your data subjects are located.<\/li>\n\n\n\n<li><b>Data impact:<\/b> Not all organizations are large enough to be represented in legislation. For example, in California the CCPA only affects you if you process data on 50,000 residents or more.<\/li>\n\n\n\n<li><b>Penalties:<\/b> There is no consistency regarding how violations are fined. Some will charge a total percentage of net turnover, while others charge per affected subject for each violation.<\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\">Data regulations heading into 2025<\/h2>\n\n<p class=\"wp-block-paragraph\">Data policy isn&rsquo;t just changing, it\u2019s changing fast.<\/p>\n\n<p class=\"wp-block-paragraph\">In the U.S., <a href=\"https:\/\/www.whitehouse.gov\/briefing-room\/statements-releases\/2022\/10\/07\/fact-sheet-president-biden-signs-executive-order-to-implement-the-european-union-u-s-data-privacy-framework\/\" target=\"_tabs\" rel=\"noopener noreferrer\">an Executive Order<\/a> was signed by President Biden in early October 2022, implementing the European Union-U.S. Data Privacy Framework, which takes us closer to fixing cross border data transfer protections.<\/p>\n\n<p class=\"wp-block-paragraph\">As of July 10, 2023 <a href=\"https:\/\/ec.europa.eu\/commission\/presscorner\/detail\/en\/ip_23_3721\" target=\"_tabs\" rel=\"noopener noreferrer\">the European Commision adopted its adequacy decision for the EU-U.S. Data Privacy Framework.<\/a> <b>What does this mean? <\/b>This adoption signifies that the United States provides an adequate level of protection for the personal data of EU citizens transferred through US organizations.<\/p>\n    <div data-content-type=\"longform\"  class=\"callout text-body-color px-5 py-6 px-md-6 px-lg-7 py-md-7 longform-spacings rounded-lg bg-light\" data-theme=\"light\">\r\n\r\n        <div class=\"content-body\"> Learn more: Learn more about the requirements and adoption process for businesses for the Data Privacy Framework (DPF) Program <a href=\"https:\/\/www.dataprivacyframework.gov\/s\/\">here.<\/a><\/div>\r\n    <\/div>\r\n\n<p class=\"wp-block-paragraph\">This recent adoption follows the Safe Harbor Framework (invalidated in 2015) and the EU-US Privacy Shield Framework (invalidated in 2020) that were both overturned by European courts.<\/p>\n\n<h3 class=\"wp-block-heading\">Domestic policy updates<\/h3>\n\n<p class=\"wp-block-paragraph\">It\u2019s likely that federal data laws are imminent for the U.S., especially if the DPF Program holds, that will be comparable to Europe\u2019s GDPR and make data policies between the U.S. and the EU more seamless. As of late 2024, the U.S. continues to see a patchwork of state laws emerge, pushing closer to federal data legislation. <a href=\"https:\/\/iapp.org\/resources\/article\/us-state-privacy-legislation-tracker\/#state-privacy-law-chart\" target=\"_tabs\" rel=\"noopener noreferrer\">The following states<\/a> have confirmed new consumer data privacy acts coming into effect in 2025 and beyond:<\/p>\n\n<h4 class=\"wp-block-heading\">Signed laws<\/h4>\n\n<ul class=\"wp-block-list\">\n<li>The Delaware Personal Data Privacy Act goes into effect January 1, 2025<\/li>\n\n\n\n<li>The Iowa Consumer Data Protection act goes into effect Jan 1, 2025<\/li>\n\n\n\n<li>New Jersey legislation goes into effect January 15, 2025<\/li>\n\n\n\n<li>Tennessee information protection act goes into effect July 1, 2025<\/li>\n\n\n\n<li>The Indiana consumer data protection act goes into effect January 1, 2026<\/li>\n\n\n\n<li>The Colorado Privacy Act went into effect July 1, 2023 in a staged approach, full effect October 1, 2025<\/li>\n\n\n\n<li>The Nebraska Data Privacy Act goes into efect January 1, 2025<\/li>\n\n\n\n<li>The Kentucky Consumer Data Protection Act goes into effect January 1, 2026<\/li>\n\n\n\n<li>The Maryland Online Data Privacy Act goes into effect October 1, 2025<\/li>\n\n\n\n<li>The New Jersey Senate Bill 332 goes into effect January 15, 2025<\/li>\n\n\n\n<li>The Connecticut Data Privacy Act went into effect July 1, 2023 in a staged approach, full effect January 1, 2025<\/li>\n\n\n\n<li>The Rhode Island Data Transparency and Privacy Protection Act goes into effect January 1, 2026<\/li>\n\n\n\n<li>The New Hampshire Senate Bill 255 goes into effect January 1, 2025<\/li>\n<\/ul>\n\n<h4 class=\"wp-block-heading\">States with legislation in committee<\/h4>\n\n<ul class=\"wp-block-list\">\n<li>Ohio<\/li>\n\n\n\n<li>Pennsylvania<\/li>\n\n\n\n<li>Michigan<\/li>\n<\/ul>\n\n<h4 class=\"wp-block-heading\">States with legislation introduced<\/h4>\n\n<ul class=\"wp-block-list\">\n<li>Oklahoma<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">Once all the above states have active legislation, roughly 50% of the country will be operating with data policies of varying degrees while the other half of states currently have no bills introduced. The increasing adoption of state-specific laws is accelerating pressure for federal-level legislation, potentially mirroring GDPR standards .<\/p>\n\n<h3 class=\"wp-block-heading\">Other countries currently creating policies<\/h3>\n\n<p class=\"wp-block-paragraph\">These countries are developing legislation that we may see finalized in 2025 or within the next couple of years.<\/p>\n\n<h4 class=\"wp-block-heading\">Australia<\/h4>\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.oaic.gov.au\/privacy\/privacy-legislation\/the-privacy-act\" target=\"_tabs\" rel=\"noopener noreferrer\"><b>Australia\u2019s updated Privacy Act<\/b><\/a> addressing digital concerns and enhances online privacy and other measures. The bill (proposed in 2021) will give effect to the Australian Government&rsquo;s commitment to strengthen the Privacy Act 1988. It enables the introduction of a binding online privacy code for social media and certain other online platforms, increases penalties and enforcement measures, and aims to bring data policies for Australia closer in-line with standards established by the GDPR. In February 2023, Australia\u2019s Attorney-General&rsquo;s Department released a final report on its review of the Privacy Act, presenting over 100 proposed reformations to the act to update it for the digital age. The Australian Government&rsquo;s amendments to the Privacy Act 1988 are expected to be finalized in 2025. Proposed updates focus on digital privacy, consumer data transparency, and GDPR-aligned penalties.<\/p>\n\n<h4 class=\"wp-block-heading\">India<\/h4>\n\n<p class=\"wp-block-paragraph\">India\u2019s Personal Data Protection Bill (PDPB) was proposed in 2019 and was recently withdrawn (As of August. 2022) with stark criticism from stakeholders that believed the bill would give the government too much power over the data of its citizens. New legislation was approved by the president of India in August 2023. I<a href=\"https:\/\/www.mayerbrown.com\/en\/perspectives-events\/publications\/2023\/08\/india-passes-privacy-law\" target=\"_tabs\" rel=\"noopener noreferrer\">ndia\u2019s <b>Digital Personal Data Protection Act<\/b> (DPDP)<\/a> is anticipated to enter full enforcement by mid-2025, setting strict data processing limits for businesses handling Indian citizen data.<\/p>\n\n<h4 class=\"wp-block-heading\">Canada<\/h4>\n\n<p class=\"wp-block-paragraph\">Canada&rsquo;s anticipated update to the <a href=\"https:\/\/www.priv.gc.ca\/en\/privacy-topics\/privacy-laws-in-canada\/the-personal-information-protection-and-electronic-documents-act-pipeda\/\" target=\"_tabs\" rel=\"noopener noreferrer\"><b>Personal Information Protection and Electronic Documents Act (PIPEDA)<\/b><\/a> will integrate stronger individual rights protections and cross-border data transfer guidelines, scheduled for Q1 2025.<\/p>\n    <div data-content-type=\"longform\"  class=\"callout text-body-color px-5 py-6 px-md-6 px-lg-7 py-md-7 longform-spacings rounded-lg bg-light\" data-theme=\"light\">\r\n\r\n        <div class=\"content-body\"> As part of its evolving GDPR enforcement measures, the European Commission plans to roll out additional AI-related data processing rules under the <b>AI Act<\/b>, expected to intersect with GDPR policies by late 2025.<\/div>\r\n    <\/div>\r\n\n<h2 class=\"wp-block-heading\">Data compliance matters at Mailgun<\/h2>\n\n<p class=\"wp-block-paragraph\">Data represents people, and at Mailgun we respect people.<\/p>\n\n<p class=\"wp-block-paragraph\">It\u2019s no surprise that data \u2013 an endless resource \u00ad\u2013 takes a <i>lot<\/i> of explanation and research to understand. As a data controller in technology, no one knows this better than us. If the links in this post don\u2019t direct you to the information you need, or if you want to know more about <a href=\"https:\/\/security.mailgun.com\/\" target=\"_tabs\" rel=\"noopener noreferrer\">how Mailgun manages your data<\/a>, check out our data and compliance guide.<\/p>\n\r\n    <aside data-content-type=\"longform\"  class=\"banner-block longform-spacings rounded-lg shadow-lg px-5 py-6 px-md-6 py-md-7 p-lg-7 bg-light\" data-theme=\"dark\"  aria-labelledby=\"banner-block-block-ca0106d9b3b1b342b4cdcc9f9ae2940e\">\r\n                    <p class=\"text-uppercase section-caption text-body-color\">\r\n                Learn about email security and compliance            <\/p>\r\n                            <p class=\"h4 text-accent fw-bold\" id=\"banner-block-block-ca0106d9b3b1b342b4cdcc9f9ae2940e\">\r\n                Email security and compliance            <\/p>\r\n                            <div class=\"mb-0 text-body-color\">\r\n                                    <div class=\"content-body mb-0 text-body-color\">Email security isn&#x27;t easy. But you need to protect your business, brand, employees, and subscribers. Find out about the benefits of continually improving email security and compliance from our industry experts. It&#x27;s yours to explore. No form filling required.<\/div>\r\n                            <\/div>\r\n        \r\n        <div class=\"text-start mt-5\"><a href=\"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/10\/GU-MG-Security-and-Compliance.pdf\" target=\"_blank\" class=\"btn btn-secondary\" >Get the guide<\/a><\/div>\r\n    <\/aside>\r\n\r\n","protected":false},"excerpt":{"rendered":"<p>Naviguer dans la l\u00e9gislation sur la confidentialit\u00e9 des donn\u00e9es peut s&rsquo;apparenter \u00e0 un labyrinthe truff\u00e9 de pi\u00e8ges. Nous avons la carte pour vous guider et les donn\u00e9es que vous devez conna\u00eetre d\u00e8s maintenant.<\/p>\n","protected":false},"author":22,"featured_media":4074,"menu_order":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"blog_category":[20],"class_list":["post-15041","blog","type-blog","status-publish","has-post-thumbnail","hentry","blog_category-email"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Le guide 2025 de Mailgun sur les r\u00e9glementations des donn\u00e9es dans le monde - Transactional Email API Service For Developers | Mailgun<\/title>\n<meta name=\"description\" content=\"Les r\u00e9glementations sur la confidentialit\u00e9 des donn\u00e9es deviennent de plus en plus exhaustives. Naviguer \u00e0 travers les exigences l\u00e9gales peut \u00eatre un d\u00e9fi. Obtenez les informations dont vous avez besoin gr\u00e2ce \u00e0 ce guide.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.mailgun.com\/fr\/blog\/email\/conformite-des-donnees-reglementations\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Le guide 2025 de Mailgun sur les r\u00e9glementations des donn\u00e9es dans le monde - Transactional Email API Service For Developers | Mailgun\" \/>\n<meta property=\"og:description\" content=\"Les r\u00e9glementations sur la confidentialit\u00e9 des donn\u00e9es deviennent de plus en plus exhaustives. Naviguer \u00e0 travers les exigences l\u00e9gales peut \u00eatre un d\u00e9fi. Obtenez les informations dont vous avez besoin gr\u00e2ce \u00e0 ce guide.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mailgun.com\/fr\/blog\/email\/conformite-des-donnees-reglementations\/\" \/>\n<meta property=\"og:site_name\" content=\"Transactional Email API Service For Developers | Mailgun\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-22T17:10:51+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-Email.png\" \/>\n\t<meta property=\"og:image:width\" content=\"720\" \/>\n\t<meta property=\"og:image:height\" content=\"448\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"16 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/email\\\/conformite-des-donnees-reglementations\\\/\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/email\\\/conformite-des-donnees-reglementations\\\/\",\"name\":\"Le guide 2025 de Mailgun sur les r\u00e9glementations des donn\u00e9es dans le monde - Transactional Email API Service For Developers | Mailgun\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/email\\\/conformite-des-donnees-reglementations\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/email\\\/conformite-des-donnees-reglementations\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-Email.png\",\"datePublished\":\"2024-12-17T00:00:00+00:00\",\"dateModified\":\"2026-09-22T17:10:51+00:00\",\"description\":\"Les r\u00e9glementations sur la confidentialit\u00e9 des donn\u00e9es deviennent de plus en plus exhaustives. Naviguer \u00e0 travers les exigences l\u00e9gales peut \u00eatre un d\u00e9fi. Obtenez les informations dont vous avez besoin gr\u00e2ce \u00e0 ce guide.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/email\\\/conformite-des-donnees-reglementations\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/email\\\/conformite-des-donnees-reglementations\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/email\\\/conformite-des-donnees-reglementations\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-Email.png\",\"contentUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-Email.png\",\"width\":720,\"height\":448},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/email\\\/conformite-des-donnees-reglementations\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog\",\"item\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Naviguer dans la conformit\u00e9 et les r\u00e9glementations mondiales des donn\u00e9es en 2025\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/#website\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/\",\"name\":\"Transactional Email API Service For Developers | Mailgun\",\"description\":\"Des API d\u2019emails transactionnels puissantes qui vous permettent d'envoyer, de recevoir et de suivre des emails, con\u00e7ues pour les d\u00e9veloppeurs. En savoir plus d\u00e8s aujourd'hui !\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/#organization\",\"name\":\"Transactional Email API Service For Developers | Mailgun\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/cropped-android-chrome-512x512-1.png\",\"contentUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/cropped-android-chrome-512x512-1.png\",\"width\":512,\"height\":512,\"caption\":\"Transactional Email API Service For Developers | Mailgun\"},\"image\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Le guide 2025 de Mailgun sur les r\u00e9glementations des donn\u00e9es dans le monde - Transactional Email API Service For Developers | Mailgun","description":"Les r\u00e9glementations sur la confidentialit\u00e9 des donn\u00e9es deviennent de plus en plus exhaustives. Naviguer \u00e0 travers les exigences l\u00e9gales peut \u00eatre un d\u00e9fi. Obtenez les informations dont vous avez besoin gr\u00e2ce \u00e0 ce guide.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.mailgun.com\/fr\/blog\/email\/conformite-des-donnees-reglementations\/","og_locale":"fr_FR","og_type":"article","og_title":"Le guide 2025 de Mailgun sur les r\u00e9glementations des donn\u00e9es dans le monde - Transactional Email API Service For Developers | Mailgun","og_description":"Les r\u00e9glementations sur la confidentialit\u00e9 des donn\u00e9es deviennent de plus en plus exhaustives. Naviguer \u00e0 travers les exigences l\u00e9gales peut \u00eatre un d\u00e9fi. Obtenez les informations dont vous avez besoin gr\u00e2ce \u00e0 ce guide.","og_url":"https:\/\/www.mailgun.com\/fr\/blog\/email\/conformite-des-donnees-reglementations\/","og_site_name":"Transactional Email API Service For Developers | Mailgun","article_modified_time":"2026-09-22T17:10:51+00:00","og_image":[{"width":720,"height":448,"url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-Email.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"16 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.mailgun.com\/fr\/blog\/email\/conformite-des-donnees-reglementations\/","url":"https:\/\/www.mailgun.com\/fr\/blog\/email\/conformite-des-donnees-reglementations\/","name":"Le guide 2025 de Mailgun sur les r\u00e9glementations des donn\u00e9es dans le monde - Transactional Email API Service For Developers | Mailgun","isPartOf":{"@id":"https:\/\/www.mailgun.com\/fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mailgun.com\/fr\/blog\/email\/conformite-des-donnees-reglementations\/#primaryimage"},"image":{"@id":"https:\/\/www.mailgun.com\/fr\/blog\/email\/conformite-des-donnees-reglementations\/#primaryimage"},"thumbnailUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-Email.png","datePublished":"2024-12-17T00:00:00+00:00","dateModified":"2026-09-22T17:10:51+00:00","description":"Les r\u00e9glementations sur la confidentialit\u00e9 des donn\u00e9es deviennent de plus en plus exhaustives. Naviguer \u00e0 travers les exigences l\u00e9gales peut \u00eatre un d\u00e9fi. Obtenez les informations dont vous avez besoin gr\u00e2ce \u00e0 ce guide.","breadcrumb":{"@id":"https:\/\/www.mailgun.com\/fr\/blog\/email\/conformite-des-donnees-reglementations\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mailgun.com\/fr\/blog\/email\/conformite-des-donnees-reglementations\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.mailgun.com\/fr\/blog\/email\/conformite-des-donnees-reglementations\/#primaryimage","url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-Email.png","contentUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-Email.png","width":720,"height":448},{"@type":"BreadcrumbList","@id":"https:\/\/www.mailgun.com\/fr\/blog\/email\/conformite-des-donnees-reglementations\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.mailgun.com\/fr\/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https:\/\/www.mailgun.com\/fr\/blog\/"},{"@type":"ListItem","position":3,"name":"Naviguer dans la conformit\u00e9 et les r\u00e9glementations mondiales des donn\u00e9es en 2025"}]},{"@type":"WebSite","@id":"https:\/\/www.mailgun.com\/fr\/#website","url":"https:\/\/www.mailgun.com\/fr\/","name":"Transactional Email API Service For Developers | Mailgun","description":"Des API d\u2019emails transactionnels puissantes qui vous permettent d'envoyer, de recevoir et de suivre des emails, con\u00e7ues pour les d\u00e9veloppeurs. En savoir plus d\u00e8s aujourd'hui !","publisher":{"@id":"https:\/\/www.mailgun.com\/fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mailgun.com\/fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/www.mailgun.com\/fr\/#organization","name":"Transactional Email API Service For Developers | Mailgun","url":"https:\/\/www.mailgun.com\/fr\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.mailgun.com\/fr\/#\/schema\/logo\/image\/","url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/06\/cropped-android-chrome-512x512-1.png","contentUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/06\/cropped-android-chrome-512x512-1.png","width":512,"height":512,"caption":"Transactional Email API Service For Developers | Mailgun"},"image":{"@id":"https:\/\/www.mailgun.com\/fr\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/blog\/15041","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/users\/22"}],"version-history":[{"count":6,"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/blog\/15041\/revisions"}],"predecessor-version":[{"id":26039,"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/blog\/15041\/revisions\/26039"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/media\/4074"}],"wp:attachment":[{"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/media?parent=15041"}],"wp:term":[{"taxonomy":"blog_category","embeddable":true,"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/blog_category?post=15041"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}