This log lists the reforms and court rulings since 2015 that affect our defamation law guides, newest first. Each entry links to the guide for that state or country and to the official source. Dates are the day a law was signed, took effect or was decided by the court, as noted.
2027
MissouriMissouri HB 2637, HB 3155 and SB 999 of 2026Missouri's first- and second-degree stalking offenses will also cover "technological abuse conduct" directed at a person, under amendments passed in 2026 that take effect on July 1, 2027.
SourcesRSMo 565.225 (version effective July 1, 2027)RSMo 565.227 (version effective July 1, 2027)
AlabamaAlabama Personal Data Protection Act (Act 2026-552)Alabama's consumer data privacy law is scheduled to take effect, letting consumers ask covered businesses to access, correct or delete their personal data. It applies only to businesses that process the data of more than 25,000 consumers or earn more than 25 percent of gross revenue from selling personal data.
SourcesAct 2026-552 (HB 351), enrolled textAla. Code § 8-44-1
IndiaDigital Personal Data Protection Act, 2023: main provisionsUnder the November 2025 notification, the Act's main duties and individuals' rights, including the right to correction and erasure in section 12, come into force 18 months after 13 November 2025.
SourceMeitY notification G.S.R. 843(E), 13 November 2025, para. (c)
OklahomaOklahoma SB 546 (2026)Oklahoma's consumer data privacy law, signed on March 20, 2026, takes effect and lets consumers ask covered businesses to delete personal data provided by or obtained about them. It is enforced by the Attorney General.
SourcesOklahoma Legislature, SB 546 bill historyOklahoma Legislature, Enrolled Senate Bill 546
2026
ChileLey 21.719The amendments that Ley 21.719 makes to Law 19.628 take effect on the first day of the 24th month after the law's publication. From this date the new rights for data subjects, including the broader right of erasure, apply.
SourceBiblioteca del Congreso Nacional, Ley 21.719, first transitional article
ItalyDecreto legislativo 8 ottobre 2026, n. 194Italy's implementation of the EU anti-SLAPP Directive 2024/1069 takes effect, giving procedural protection against manifestly unfounded claims and abusive lawsuits aimed at people for their public participation. It applies to civil matters with cross-border implications.
SourceD.Lgs. 8 ottobre 2026, n. 194 (GU n. 248 of 24 October 2026), in force 8 November 2026 (Normattiva)
- AlabamaAlabama Act 2026-535 (SB 273)
A second or later conviction for second-degree stalking in Alabama, which covers repeatedly following, harassing or contacting someone, including electronically, after being told to stop, is now a Class C felony instead of a misdemeanor.
SourcesAct 2026-535 (SB 273), enrolled textAla. Code § 13A-6-90.1
BelgiumCode pénal 2024 (Loi du 29 février 2024)The new Criminal Code replaced the 1867 Code and restated the offenses of calumny and insult (Articles 240 to 246), which remain crimes in Belgium.
SourceCode pénal 2024 (Justel)
- MissouriMissouri SB 1067, SB 835 and SB 1111 of 2026 (UPEPA)
Missouri's Uniform Public Expression Protection Act, RSMo 537.529, took effect and replaced the narrower anti-SLAPP statute, RSMo 537.528, letting people sued over speech on matters of public concern seek early dismissal.
SourcesRSMo 537.529 (L. 2026 S.B. 835 & 1111 merged with S.B. 1067)RSMo 537.528 (repealed; version ended August 28, 2026)
CaliforniaCalifornia Delete Act (SB 362), DROP obligationsUnder the Delete Act, signed on October 10, 2023, registered data brokers must access the state's Delete Request and Opt-out Platform at least once every 45 days and process the consumer deletion requests it contains.
SourcesCalifornia Privacy Protection Agency, invitation for comments on the accessible deletion mechanismCalPrivacy, About DROP and the Delete Act
KentuckyKy. 2026 Acts ch. 67Kentucky rewrote its stalking law as a single offense in KRS 508.130, with a course of conduct that can include contact through the internet, social media, email or text messages, and repealed the former first- and second-degree stalking sections.
SourcesKRS 508.130 (Amended 2026 Ky. Acts ch. 67, sec. 1, effective July 15, 2026)KRS 508.140 (Repealed, 2026)
NetherlandsAct of 8 July 2026 implementing Directive (EU) 2024/1069 (Stb. 2026, 185)The Netherlands transposed the EU anti-SLAPP Directive through amendments to the Code of Civil Procedure. In cross-border cases covered by the Directive a court can order the claimant to provide security for costs and damages, and a claimant who loses a covered case generally pays the defendant's full legal costs, a rule that also applies to purely domestic cases.
SourcesWet van 8 juli 2026, Staatsblad 2026, 185 (Dutch)Besluit van 9 juli 2026 on entry into force, Staatsblad 2026, 197 (Dutch)
PolandAct of 29 May 2026 on special protection measures in civil proceedings for people taking part in public debatePoland's act implementing EU Directive 2024/1069 took effect for civil cases started from that date, letting courts require security for costs, dismiss manifestly unfounded claims early, fine abusive claimants and award defendants their full lawyers' fees unless excessive. It covers civil proceedings only.
SourcesSejm legal acts database, entry for Dz.U. 2026 poz. 830 (entry into force 8 July 2026)Act of 29 May 2026, Dz.U. 2026 poz. 830, Arts. 3, 6-7, 13-14 and 19 (Polish)
ArkansasArkansas Children and Teens' Online Privacy Protection Act (Act 952 of 2025)Operators of websites and apps covered by the law must let parents of children under 13, and teens aged 13 to 16 themselves, delete personal information and content the child or teen submitted, and correct inaccurate data.
ConnecticutConnecticut P.A. 25-113Amendments to the Connecticut Data Privacy Act lower the coverage threshold from 100,000 to 35,000 consumers and extend it to businesses that process sensitive data or offer personal data for sale.
SourceConn. Gen. Stat. § 42-516 and history note (2026 Supplement)
IowaIowa SF 2280 (2026), Iowa Code § 708.18Makes it a serious misdemeanor to share the personal address, phone number or physical location of a state legislator, a judicial officer or their immediate family with intent to harm them, put them in fear of serious harm or interfere with their duties. It does not cover the general public.
SourcesIowa Legislature, SF 2280 bill history (signed May 6, 2026)SF 2280 enrolled, § 8Iowa Code § 3.7
South DakotaSouth Dakota SB 137 (2026)South Dakota's anti-SLAPP law, based on the Uniform Public Expression Protection Act, took effect, letting people sued over speech on matters of public concern or statements in government proceedings ask for early dismissal.
SourcesSouth Dakota Legislature, SB 137 (2026)S.D. Codified Laws § 2-14-16 (effective date of acts)
SwedenLag (2026:852) om ändring i brottsbalkenA new offence of psychological violence (Penal Code, Chapter 4, Section 7 b) covers repeatedly subjecting someone to violations such as accusations, degrading statements, humiliating behaviour or improper monitoring that together were likely to seriously harm the person's self-esteem, with up to four years in prison.
SourcesSwedish Penal Code (1962:700), amendment register: SFS 2026:852 (Swedish)Swedish Penal Code (1962:700), Chapter 4, Section 7 b (Swedish)
SingaporeOnline Safety (Relief and Accountability) Act 2025 (No. 23 of 2025)The Act's first provisions took effect, creating a Commissioner of Online Safety who can receive reports and give directions over online harms including online harassment, doxxing and online stalking. Its other listed harms, such as statements harmful to reputation, were not among the provisions brought into force on that date.
SourceOnline Safety (Relief and Accountability) Act 2025, Part 3 and commencement dates
- BelgiumLoi du 30 mai 2026 transposant la directive (UE) 2024/1069
The law transposed the EU anti-SLAPP Directive, letting courts dismiss manifestly unfounded claims against people who take part in public debate early, order the claimant to give security for costs and impose higher costs and fines in abusive cases.
VermontVermont Data Privacy and Online Surveillance Act (S.71, Act 145)Vermont enacted a consumer data privacy law that will let consumers have covered businesses delete personal data about them. Its provisions take effect on January 1, 2028.
New ZealandCrimes Legislation (Stalking and Harassment) Amendment Act 2025Stalking and harassment became an offence under the Crimes Act 1961, punishable by up to 5 years in prison: a pattern of specified acts, such as online contact or publishing material about a person, done on at least two occasions within two years, knowing it is likely to cause fear or distress. The Act also repealed Part 2 of the Harassment Act 1997, which contained the earlier criminal harassment offence.
SourceCrimes Legislation (Stalking and Harassment) Amendment Act 2025 (2025 No 72), ss. 2, 4 and 16
FranceDécret n° 2026-337 du 30 avril 2026The decree transposed EU Directive 2024/1069 into civil procedure: in cases brought against someone over their participation in public debate, judges can award an advance on legal costs, quickly dismiss manifestly unfounded claims and make the claimant in an abusive case pay the defendant's costs. It applies to proceedings started from 7 May 2026.
UtahUtah SB 256 (2026)Utah's libel and slander law now covers content made with artificial intelligence or digital manipulation, and requires notice to the publisher before suing over such content, with damages limited to actual damages if it is removed in time.
SourceUtah Legislature, S.B. 256 Identity Protection Modifications, enrolled copy
- SwedenLag (2026:241) om skydd för deltagande i den offentliga debatten vid tvister med gränsöverskridande följder
Sweden's implementation of the EU anti-SLAPP Directive took effect for civil disputes about participation in public debate that have cross-border implications, allowing expedited handling and security for costs. It also lets Swedish courts hear a Swedish resident's claim for damages or costs linked to such proceedings brought against them outside the EU.
PhilippinesCausing v. People, G.R. No. 258524 (En Banc Resolution)Sitting en banc, the Supreme Court denied with finality the motions to reconsider its 2023 ruling, confirming that cyber libel prescribes in one year counted from discovery and that no presumption arises that a post was discovered when it was published.
SourceCausing v. People, G.R. No. 258524 (En Banc Resolution, Apr. 8, 2026)
MichiganMichigan 2025 PA 52 (HB 4045)Michigan's Uniform Public Expression Protection Act took effect, applying to causes of action asserted after that date and letting people sued over protected speech seek early dismissal and recover costs and attorney's fees if they prevail.
Sources2025 Public Act 52 (Enrolled House Bill 4045), approved December 23, 2025MCL 691.1863 (History: 2025, Act 52, Eff. Mar. 24, 2026)
IndianaIndiana SB 140 (2026), Public Law 146-2026Expanded the definition of a threat in the intimidation statute to include posting a person's personal information on a social media platform with intent to cause bodily injury, property damage or a crime against that person. It also raised the penalty for intimidating a legislator.
KenyaBloggers Association of Kenya (BAKE) v Attorney General & 6 others [2026] KECA 430 (KLR)The Court of Appeal held sections 22 and 23 of the Computer Misuse and Cybercrimes Act, the offences of false publication and publication of false information, unconstitutional for being overbroad, and upheld the rest of the Act.
SourceBAKE v Attorney General & 6 others, Civil Appeal 197 of 2020, judgment of 6 March 2026, para. 153
IrelandDefamation (Amendment) Act 2026 (No. 2 of 2026)Most of the Act took effect: High Court defamation actions brought from this date are tried without a jury, and the public interest defence was replaced by a defence of fair publication on a matter of public interest.
SourcesDefamation (Amendment) Act 2026, commencement information (S.I. No. 61 of 2026)Defamation (Amendment) Act 2026, s. 4Defamation (Amendment) Act 2026, s. 11
- IndiaIT Rules Amendment Rules, 2026: grievance resolution deadlines
The general deadline for an intermediary to resolve a user complaint fell from 15 days to seven days, and the expedited deadline for removal requests under the specified categories of rule 3(1)(b), including privacy and impersonation, fell from 72 to 36 hours. The 24-hour acknowledgement deadline remains unchanged; resolving a complaint does not guarantee removal.
SourcesIT Rules Amendment Rules, 2026, G.S.R. 120(E), 10 February 2026, rr. 1(2) and 3(b)(i) (Gazette of India, MeitY)Corrigendum to the IT Rules Amendment Rules, 2026, G.S.R. 148(E), 26 February 2026 (Gazette of India)
- IrelandDefamation (Amendment) Act 2026 (No. 2 of 2026)
The Act was enacted to reform the Defamation Act 2009 and to give effect to the EU anti-SLAPP Directive 2024/1069 for defamation proceedings through a new Part 4A; that Part still needs a commencement order to take effect.
SourcesDefamation (Amendment) Act 2026, long titleDefamation (Amendment) Act 2026, commencement information
New JerseyNew Jersey P.L. 2025, c. 303New Jersey made cyber-harassment a third-degree crime, instead of fourth-degree, when it is committed against a public servant or a member of a public servant's family.
SourceP.L. 2025, c. 303 (approved January 20, 2026; effective immediately)
South KoreaInformation and Communications Network Act, amendment (Act No. 21305)The amendment lets courts award up to 50 million won for harm from unlawful or false information spread online when the exact loss is hard to prove, and up to 5 times the loss against certain high-reach professional publishers who knowingly spread it to cause harm, unless the claim is brought to obstruct public-interest criticism. It applies to information spread after it took effect, six months after promulgation.
IdahoIdaho S.B. 1001 (2025), Uniform Public Expression Protection ActIdaho's first anti-SLAPP law, signed on March 10, 2025, applies to lawsuits filed or claims asserted on or after January 1, 2026. People sued over speech, press, assembly, petition or association on a matter of public concern, or over statements in government proceedings, can ask for early dismissal, and a successful moving party recovers costs and attorney's fees.
SourcesIdaho Legislature, 2025 Senate Bill 1001 (Session Law Chapter 17)Idaho Code § 6-3913 (transitional provision)Idaho Code ch. 39, Title 6
- IndianaIndiana SB 5 (2023), Consumer Data Protection Act
Indiana residents can ask covered businesses to confirm whether their personal data is processed, correct it and delete it. The law, signed on May 1, 2023 as Public Law 94-2023, applies only to businesses above set volume thresholds.
SourcesIndiana General Assembly, Senate Bill 5 (2023)Ind. Code § 24-15-3-1
- KentuckyKy. 2024 Acts ch. 72
The Kentucky Consumer Data Protection Act took effect, giving residents the right to ask covered businesses to delete personal data provided by or obtained about them.
SourceKRS 367.3615 (Created 2024 Ky. Acts ch. 72, sec. 3, effective January 1, 2026)
MalaysiaOnline Safety Act 2025 (Act 866)The Online Safety Act 2025 came into force, regulating harmful content online and placing duties on licensed application service providers, content application service providers and network service providers. It is enforced by the Malaysian Communications and Multimedia Commission.
SourcesOnline Safety Act 2025 (Act 866)Malaysian Communications and Multimedia Commission, Online Safety Act 2025 [Act 866]
OregonOregon SB 180 (2025)Oregon's anti-SLAPP statute, ORS 31.150, now lets a person sued for defamation over a good-faith statement about a sexual assault committed against them file a special motion to strike, and such a claim requires proof of malice.
SourcesOregon Legislature, SB 180 (2025) measure overviewOregon Laws 2025, chapter 275Or. Rev. Stat. § 31.150
Rhode IslandRhode Island Data Transparency and Privacy Protection ActRhode Island's state privacy law took effect, letting customers ask covered businesses to delete personal data provided by or obtained about them, and to access, correct and opt out of certain uses of it.
SwitzerlandFederal Act of 20 June 2025 (Improving Criminal Law Protection against Stalking)A new Article 181b of the Criminal Code made stalking a specific crime: persistently pursuing, harassing or threatening someone in a way likely to significantly restrict their freedom to live as they wish. It is prosecuted on complaint and carries up to three years in prison or a monetary penalty.
SourceSwiss Criminal Code, Art. 181b and footnote (in force since 1 Jan. 2026, AS 2025 740)
2025
Japan2025 amendment to the Stalker Regulation ActObtaining someone's location without consent through a lost-item tracking tag, or attaching such a tag to their belongings, became regulated stalking conduct, and police can now issue warnings on their own initiative. A further provision on stopping third parties from passing victims' information to stalkers took effect on 10 March 2026.
SourcesNational Police Agency, Stalker Regulation Act amendment page (promulgated 10 December 2025)Act on the Regulation of Stalking Behavior (Act No. 81 of 2000), current text on e-Gov
AustraliaDefamation and Other Legislation Amendment Act 2025 (Qld)Queensland's Stage 2 defamation reforms took effect seven days after assent on 19 December 2025, as the Act provides. They add exemptions and a new defence for digital intermediaries such as search engines and platforms, and let courts make orders against digital intermediaries that are not parties to the proceedings.
ColoradoLind-Barnett v. Tender Care Veterinary Center, Inc.The Colorado Supreme Court adopted a two-step test for speech "in connection with a public issue" under the anti-SLAPP law and held that online reviews arising from a private dispute can qualify, regardless of the poster's motive.
SourceLind-Barnett v. Tender Care Veterinary Center, Inc., No. 24SC8 (Colo. Dec. 8, 2025)
District of ColumbiaBanks v. Hoffman (en banc)The full D.C. Court of Appeals unanimously held that the D.C. Council did not exceed its Home Rule Act authority in passing the Anti-SLAPP Act, including its discovery-limiting provisions. This replaced the vacated 2023 division ruling.
SourceBanks v. Hoffman, No. 20-CV-0318 (D.C. Nov. 13, 2025) (en banc)
- IndiaDigital Personal Data Protection Act, 2023: first commencement (G.S.R. 843(E))
The provisions setting up the Data Protection Board and certain general sections came into force; the notification deferred most obligations and individuals' rights for 18 months.
- KenyaComputer Misuse and Cybercrimes (Amendment) Act, 2025 (No. 17 of 2025)
The amendment extended the cyber harassment offence to conduct likely to cause the other person to commit suicide and gave courts further powers to make orders after convictions for certain offences.
SourceComputer Misuse and Cybercrimes (Amendment) Act, 2025, Kenya Gazette Supplement No. 170, ss. 4-6
- ConnecticutConnecticut P.A. 25-77
For civil actions filed on or after this date, Connecticut's anti-SLAPP law redefines protected free speech and sets a time frame for hearing motions involving written statements about pending criminal proceedings or discrimination complaints.
SourceConn. Gen. Stat. § 52-196a and history note (2026 Supplement)
MarylandMaryland Online Data Privacy Act (SB 541 of 2024)The Maryland Online Data Privacy Act took effect, giving consumers the right to ask covered businesses to delete personal data provided by or obtained about them.
SourceSB 541 (2024 Regular Session), Chapter 455, effective October 1, 2025
MaineMaine P.L. 2025, c. 403 (L.D. 385)An amendment to Maine's Uniform Public Expression Protection Act extended its protection to communications by people who report sexual assault, sexual harassment, sexual misconduct, cyberbullying or discrimination.
SourcesP.L. 2025, c. 403 (First Special Session; general effective date September 24, 2025)14 M.R.S. § 733 (Applicability)
- MaineMaine P.L. 2025, c. 417 (L.D. 537)
Maine prohibited the doxing of a minor and created a civil action for damages against a person who does it.
SourcesP.L. 2025, c. 417 (First Special Session; general effective date September 24, 2025)14 M.R.S. § 9102 (Doxing of minor prohibited)
DelawareDelaware SB 80 (Uniform Public Expression Protection Act)Delaware adopted the Uniform Public Expression Protection Act, replacing its narrower anti-SLAPP statute for civil actions filed on or after this date and letting people sued over protected speech seek early dismissal.
Sources10 Del. C. ch. 60 (85 Del. Laws, c. 217)Delaware News, Governor Matt Meyer signs pro-free speech legislation (Sept. 15, 2025)
IllinoisIll. Public Act 104-431 (SB 1181)Amended the Citizen Participation Act to cover freedom of the press, direct courts to construe it broadly and pause other proceedings while an anti-SLAPP motion is pending. The changes apply only to actions commenced on or after January 1, 2026.
SourcesPublic Act 104-0431Bill status, SB 1181 (104th General Assembly)
IsraelProtection of Privacy Law (Amendment No. 13), 5784-2024Amendment No. 13 took effect one year after its publication, as its commencement section provides. It updates the Protection of Privacy Law's rules on personal information in databases and expands the Privacy Protection Authority's enforcement powers, including financial sanctions.
SourcesProtection of Privacy Law (Amendment No. 13), Sefer Ha-Hukkim 3287, p. 1430, s. 74 (published August 14, 2024)Israel Privacy Protection Authority, updated guidance on personal information (Amendment No. 13 in force August 14, 2025)
MinnesotaLaws of Minnesota 2024, ch. 121, art. 5The Minnesota Consumer Data Privacy Act took effect, giving consumers the right to have covered businesses delete personal data concerning them; postsecondary institutions have until July 31, 2029.
SourcesLaws of Minnesota 2024, ch. 121, art. 5 (effective July 31, 2025)Minn. Stat. § 325M.14 (Consumer personal data rights)
- IowaIowa HF 472 (2025), Uniform Public Expression Protection Act
Iowa's first anti-SLAPP law, signed on May 19, 2025, applies to civil actions filed on or after its July 1, 2025 effective date. Defendants sued over protected expression on matters of public concern can file a special motion to dismiss, and a winning defendant recovers costs and attorney fees.
SourcesIowa Legislature, HF 472 bill history (Acts ch. 93)HF 472 enrolled text, § 13 (applicability)Iowa Code § 3.7Iowa Code ch. 652
TennesseeTennessee Information Protection Act (HB 1181, Pub. Ch. 408)Tennessee's consumer privacy law, signed in 2023, took effect and lets Tennessee residents ask covered businesses to delete personal information about them.
SourceTennessee General Assembly, HB 1181 (113th General Assembly)
- TennesseeTennessee HB 1314 (Pub. Ch. 522)
Tennessee made it a crime to post a person's telephone number or home address on a publicly accessible website with intent to cause harm or a threat of harm to that person or their family or household.
SourceTennessee General Assembly, HB 1314 (114th General Assembly)
BrazilRE 1.037.396 (Tema 987) and RE 1.057.258 (Tema 533), STFThe Supreme Federal Court declared Article 19 of the Marco Civil da Internet partly unconstitutional, so platforms can now be liable for many illegal third-party posts they fail to remove after a private notice. For crimes against honor (calúnia, difamação and injúria) a court order is still required, but once a court orders removal, identical copies must be taken down on notice.
SourceSupremo Tribunal Federal, judgment summary, RE 1.037.396 (Tema 987) and RE 1.057.258 (Tema 533)
United KingdomEconomic Crime and Corporate Transparency Act 2023, ss. 194-195Courts in England and Wales gained power to strike out a SLAPP claim early if the claimant fails to show it is more likely than not to succeed at trial. The definition only covers claims about speech on economic crime.
SourcesEconomic Crime and Corporate Transparency Act 2023, s. 194Economic Crime and Corporate Transparency Act 2023, s. 195Civil Procedure (Amendment) Rules 2025 (SI 2025/106), r. 1
- AustraliaPrivacy and Other Legislation Amendment Act 2024 (Cth), Schedule 2
A statutory cause of action for serious invasions of privacy was added to the Privacy Act 1988, letting individuals sue over serious intrusions into their seclusion or misuse of their private information.
MontanaMontana HB 292 of 2025 (Ch. 250, L. 2025)Montana's Uniform Public Expression Protection Act took effect on approval, letting people sued over protected speech, including speech on matters of public concern, file a special motion for expedited relief to dismiss the claim and recover attorney's fees if they prevail.
SourcesMont. Code Ann. § 27-34-101 (En. Sec. 1, Ch. 250, L. 2025)Ch. 250, L. 2025 (HB 292), session law: effective on passage and approvalMontana Legislature, 2025 effective dates by chapter number: Ch. 250 (HB 292), May 1, 2025
OhioOhio SB 237 (UPEPA)Ohio's Uniform Public Expression Protection Act (R.C. Chapter 2747) took effect, letting people sued over protected public expression, such as speech on matters of public concern, ask the court for expedited dismissal and recover litigation expenses if they win.
SourceOhio Rev. Code Chapter 2747 (Uniform Public Expression Protection Act)
- JapanInformation Distribution Platform Act (Act No. 25 of 2024)
The Provider Liability Limitation Act was renamed and now requires designated large platforms to publish a removal-request contact point and procedure, decide on removal requests within a set period, publish removal standards and notify posters when their posts are deleted.
SourcesMinistry of Internal Affairs and Communications, Information Distribution Platform Act overview (effective 1 April 2025)Act No. 137 of 2001, current text on e-Gov
FloridaVericker v. Powell and Fla. R. App. P. 9.130 amendmentThe Florida Supreme Court held that certiorari is not available to review orders denying anti-SLAPP motions, and on the same day amended Rule 9.130 to allow immediate appeals of nonfinal orders denying motions under § 768.295(4) and the parallel condominium and homeowners' association anti-SLAPP provisions. The rule change took effect immediately.
SourcesVericker v. Powell, No. SC2022-1042 (Fla. Mar. 27, 2025)In re Amendments to Fla. R. App. P. 9.130, No. SC2024-1798 (Fla. Mar. 27, 2025)
MexicoLey Federal de Protección de Datos Personales en Posesión de los Particulares (DOF 20 March 2025)A new federal data protection law for private parties replaced the 2010 law, taking effect the day after its publication. It keeps the ARCO rights, including the right to have personal data cancelled and to object to its processing.
- MalaysiaPenal Code (Amendment) Act 2025 (Act A1750)
The Act received Royal Assent, adding sections 507B to 507G to the Penal Code. They criminalise threatening, abusive or insulting words, communications or acts made by any means that cause harassment, distress, fear or alarm, and publishing a person's identity information (doxxing) to cause that harm; the main harassment and doxxing offences (sections 507B and 507E) carry up to three years in prison.
- NetherlandsUitvoeringswet digitaledienstenverordening (Stb. 2025, 21)
The Dutch act implementing the EU Digital Services Act took effect, designating the Authority for Consumers and Markets (ACM) as the Netherlands' digital services coordinator responsible for supervising online platforms and other intermediary services.
SourcesWet van 29 januari 2025, Staatsblad 2025, 21 (Dutch)Uitvoeringswet digitaledienstenverordening, wetstechnische informatie (Dutch)
- MalaysiaCommunications and Multimedia (Amendment) Act 2025 (Act A1743)
The amending Act received Royal Assent. Among other changes, it amends section 233 of the Communications and Multimedia Act 1998 on improper use of network services, which covers obscene, indecent, false, menacing or grossly offensive communications sent to annoy, abuse, threaten or harass any person, and raises the maximum fine for that offence to RM500,000.
SourceCommunications and Multimedia (Amendment) Act 2025 (Act A1743), s. 91
- New JerseyNew Jersey P.L. 2023, c. 266
The New Jersey Data Privacy Act took effect, giving residents the right to ask covered businesses to delete personal data about them.
SourceP.L. 2023, c. 266 (approved January 16, 2024; effective on the 365th day following enactment)
- DelawareDelaware Personal Data Privacy Act
The Delaware Personal Data Privacy Act took effect, letting consumers ask covered businesses to access, correct and delete their personal data, with enforcement by the Delaware Department of Justice.
Sources6 Del. C. ch. 12DDelaware Department of Justice, Personal Data Privacy Portal for consumers
- IowaIowa SF 262 (2023), Consumer Data Protection Act
Iowa residents can ask covered businesses to delete personal data they provided, among other rights. The law, signed on March 28, 2023, applies only to businesses above set volume thresholds and is enforced only by the Attorney General.
SourcesIowa Legislature, SF 262 bill historySF 262 enrolled, § 10 (effective January 1, 2025)Iowa Code ch. 715D
- MaineMaine P.L. 2023, c. 626 (L.D. 870)
Maine's Uniform Public Expression Protection Act took effect and replaced the former anti-SLAPP statute, 14 M.R.S. § 556, giving people sued over protected speech a special motion for expedited relief.
SourcesP.L. 2023, c. 626, effective January 1, 202514 M.R.S. § 731 (Short title)
NebraskaNebraska LB 1074 of 2024 (Data Privacy Act)Nebraska's Data Privacy Act became operative, giving consumers the right to ask covered businesses to delete personal data they provided or that was obtained about them.
SourcesLB 1074 (108th Legislature), slip law, sec. 100 (operative date January 1, 2025)Neb. Rev. Stat. § 87-1107
New HampshireN.H. Laws 2024, 5 (RSA 507-H)New Hampshire's consumer privacy law took effect, letting consumers ask covered businesses to confirm, access, correct and delete personal data provided by or obtained about them.
SourceN.H. Rev. Stat. § 507-H:4 (Source: 2024, 5:1, eff. Jan. 1, 2025)
2024
- AustraliaPrivacy and Other Legislation Amendment Act 2024 (Cth), Schedule 3
New federal doxxing offences took effect, criminalising the use of a carriage service to publish or share a person's personal data in a way reasonable people would regard as menacing or harassing.
- SwedenLag (2024:954) med kompletterande bestämmelser till EU:s förordning om digitala tjänster
Sweden's act supplementing the EU Digital Services Act took effect, setting out national supervision and enforcement of the DSA's rules for online intermediaries and platforms.
SourceAct (2024:954) supplementing the EU Digital Services Act (Swedish)
- ChileLey 21.719
Ley 21.719 rewrites Law 19.628 as the Personal Data Protection Law, adds a broader right of erasure (supresión) and creates the Personal Data Protection Agency. It was published in the Diario Oficial on 13 December 2024.
TurkeyLaw No. 7531 (Penal Code Arts. 73 and 75)For insult offences prosecuted on complaint, the complaint can no longer be made more than two years after the act, whenever the victim learned of it. The amendment also brought most insult offences under the prepayment procedure, which lets a suspect avoid prosecution by paying a set amount.
SourceTurkish Penal Code (Law No. 5237), Arts. 73 and 75 and amendment table (official text)
HawaiiHawaii Act 187 (H.B. 1916), SLH 2024Hawaii created HRS chapter 92H, which lets covered public servants such as judges, legislators and election officials require agencies, people and businesses to take their protected personal information, like home addresses, off the internet on written request. Public servants can go to court for an injunction if the information is not removed.
SourcesAct 187, Session Laws of Hawaii 2024 (H.B. 1916)HRS § 92H-2
- MontanaMontana SB 384 of 2023 (Ch. 681, L. 2023)
The Montana Consumer Data Privacy Act took effect, giving residents the right to access, correct and delete personal data that covered businesses hold about them.
SourcesMontana Legislative Services memo on SB 384 (signed May 19, 2023; effective October 1, 2024)Mont. Code Ann. § 30-14-2808
- CaliforniaCalifornia AB 1979 (Doxing Victims Recourse Act)
The Governor signed a law adding Civil Code section 1708.89, which lets a person who has been doxed sue the person responsible for damages.
ColombiaSentencia T-394 de 2024 (Constitutional Court)The Constitutional Court confirmed that companies can seek constitutional protection of their reputation but dismissed El Colombiano's tutela over social media posts because it had not first requested rectification. It applied the existing subsidiarity requirements rather than ordering the posts removed.
SourceCorte Constitucional, Sentencia T-394/24 (19 September 2024), paras. 31, 43–48, 62–66 and decision
- OhioWeidman v. Hildebrant, 2024-Ohio-2931
The Supreme Court of Ohio held that the discovery rule applies to the one-year limit for libel claims in R.C. 2305.11 when the statement was published in a secretive, concealed or otherwise inherently unknowable way, so the claim accrues when the plaintiff discovers, or should have discovered, it. The same rule applies to related claims based on the same allegations.
PennsylvaniaPennsylvania UPEPA (Act 72 of 2024, HB 1466)Pennsylvania enacted the Uniform Public Expression Protection Act, which gives immunity and attorney fees to people sued over protected public expression when the claim lacks legal or factual support. The Act took effect immediately with some exceptions.
SourcesPennsylvania General Assembly, Act 72 of 202442 Pa.C.S. § 8340.11
- FloridaFlorida Digital Bill of Rights (CS/CS/SB 262, ch. 2023-201)
The Florida Digital Bill of Rights took effect, letting Florida consumers ask covered businesses to delete, correct or access their personal data and to opt out of certain uses. It applies only to very large companies that meet its revenue and business-activity thresholds.
SourcesLaws of Fla. ch. 2023-201 (CS/CS/SB 262)Fla. Stat. § 501.705
- IndiaBharatiya Nyaya Sanhita, 2023 (No. 45 of 2023)
The new criminal code replaced the Indian Penal Code, and criminal defamation moved from IPC sections 499-500 to BNS section 356, which adds community service as a possible punishment.
SourcesBharatiya Nyaya Sanhita, 2023, ss. 356 and 358, Gazette of IndiaMinistry of Home Affairs notification S.O. 850(E), 23 February 2024
LouisianaLouisiana Act 423 of 2024 (HB 315)Civil Code article 3493.1 replaced the one-year prescription for delictual actions, including defamation, with a two-year period that runs from the day the injury or damage is sustained, for claims arising after July 1, 2024.
SourceLa. Civ. Code art. 3493.1 (Acts 2024, No. 423, §1, eff. July 1, 2024)
- OregonOregon Consumer Privacy Act (SB 619)
The Oregon Consumer Privacy Act, signed on July 18, 2023, became operative, letting Oregon residents require covered controllers to correct or delete personal data about them. It does not apply to 501(c)(3) tax-exempt nonprofits before July 1, 2025.
SourcesOregon Legislature, SB 619 (2023) measure overviewOregon Laws 2023, chapter 369, sections 13 and 15Oregon Department of Justice, Privacy Law FAQs for Consumers
TexasTexas Data Privacy and Security Act (HB 4)The Texas Data Privacy and Security Act took effect, letting consumers ask covered businesses to delete personal data provided by or obtained about them.
SourceTexas Legislature Online, HB 4 (88th Legislature) history
- MinnesotaLaws of Minnesota 2024, ch. 123, art. 18 (UPEPA)
Minnesota's Uniform Public Expression Protection Act took effect the day after it was signed, replacing the former anti-SLAPP law in sections 554.01 to 554.06 and applying to pending and new civil actions.
SourceLaws of Minnesota 2024, ch. 123, art. 18 (signed May 24, 2024)
- BrazilADI 6792 and ADI 7055 (STF, judicial harassment of journalists)
The Supreme Federal Court held that filing many lawsuits over the same facts in different places to intimidate journalists or media outlets is judicial harassment, and that the defendant may then ask for all the cases to be joined in the court of their domicile. It also held that journalists and media outlets are civilly liable only for intent or gross negligence in checking facts.
SourcesSupremo Tribunal Federal, news of 22 May 2024 on ADIs 6792 and 7055Supremo Tribunal Federal, judgment summary and thesis, ADIs 6792 and 7055
ArizonaArizona HB 2394 (Laws 2024, ch. 193)Arizona's governor signed an emergency measure creating a civil action that lets candidates and other Arizona citizens seek a court declaration that a published audio or visual digital impersonation of them is fake; the new section applies 14 days after the act took effect. Damages and injunctions are available only in narrower cases.
- FranceLoi n° 2024-449 visant à sécuriser et à réguler l'espace numérique (SREN)
The law adapted French law to the EU Digital Services Act, designating Arcom as the digital services coordinator, and let criminal courts order the suspension of online accounts used to commit certain offenses.
SourceLoi n° 2024-449 du 21 mai 2024, arts. 16 and 51 (Légifrance)
GermanyDigitale-Dienste-Gesetz (DDG)The Digital Services Act took effect, setting up national enforcement of the EU Digital Services Act in Germany, including a Digital Services Coordinator, and amending the NetzDG at the same time. Platforms' notice-and-action duties for illegal content now come mainly from the EU regulation.
SourcesDigitale-Dienste-Gesetz of 6 May 2024 (BGBl. 2024 I Nr. 149), in force 14 May 2024 (Gesetze im Internet)Netzwerkdurchsetzungsgesetz, as last amended by Art. 29 of the law of 6 May 2024 (Gesetze im Internet)
GreeceLaw 5090/2024Simple defamation (former Article 362 of the Penal Code) stopped being a crime, and slanderous defamation under a rewritten Article 363 now requires a false fact that the speaker knew was false. The law also repealed Article 367, which had listed situations where unfavourable statements were not unlawful. Insult (Article 361) remains a crime.
SourcesLaw 5090/2024, Art. 136: repeal of Penal Code Arts. 362 and 367 (official Government Gazette text)Law 5090/2024, Art. 138: entry into force on 1 May 2024 (official Government Gazette text)Law 5090/2024, Art. 54: new Penal Code Art. 363 (official Government Gazette text)
- UtahUtah HB 158 (2024)
Utah repealed its criminal defamation offense, Utah Code § 76-9-404, so defamation is now handled only through civil lawsuits.
SourcesUtah Legislature, H.B. 158 Criminal Defamation Amendments (2024 General Session)Utah Legislature, H.B. 158 enrolled copy
MississippiMississippi HB 1126 of 2024The Governor approved the Walker Montgomery Protecting Children Online Act, which requires digital service providers to take steps to prevent or mitigate harms to minors, including stalking, online bullying and harassment, with an effective date of July 1, 2024.
SourcesHB 1126 (2024 Regular Session), bill historyHB 1126, as approved by the Governor
- GreeceLaw 5099/2024
Greece adopted measures to apply the EU Digital Services Act, with the Hellenic Telecommunications and Post Commission (EETT) acting as the national Digital Services Coordinator that oversees how online platforms handle illegal content.
SourceEETT, Digital services legislative and regulatory framework (Law 5099/2024 of 4 April 2024)
South AfricaJudicial Matters Amendment Act 15 of 2023Section 34 of the Act repealed the common law crime of defamation, so defamation can no longer be prosecuted as a criminal offence. Civil liability for defamation under the common law is expressly unaffected.
SourcesJudicial Matters Amendment Act 15 of 2023, ss. 34-35 (Government Gazette 50430, 3 April 2024)Department of Justice and Constitutional Development, Fact sheet: Judicial Matters Amendment Act 15 of 2023
NevadaNevada SB 370 of 2023Nevada's consumer health data law took effect, giving consumers the right to have covered entities delete their consumer health data on request.
SourcesSB 370 (2023), enrolled text, effective March 31, 2024NRS 603A.515
MassachusettsBristol Asphalt Co. v. Rochester Bituminous Products, 493 Mass. 539The Supreme Judicial Court eliminated the extra analysis it had added in Blanchard and returned to the earlier two-stage framework for anti-SLAPP special motions to dismiss under G. L. c. 231, § 59H.
SourceBristol Asphalt Co. v. Rochester Bituminous Products, Inc., No. SJC-13460 (Mass. Feb. 29, 2024)
NigeriaCybercrimes (Prohibition, Prevention, etc.) (Amendment) Act 2024The President assented to an amendment narrowing section 24(1) of the Cybercrimes Act 2015, the cyberstalking offence. It now covers messages that the sender knows are false and sends to cause a breakdown of law and order or pose a threat to life, replacing wording that also reached grossly offensive, indecent or menacing messages and false messages sent to cause annoyance or insult.
SourcesCybercrimes (Prohibition, Prevention, etc.) (Amendment) Act 2024, s. 5 and assent schedule (copy certified by the Clerk to the National Assembly under the Acts Authentication Act, hosted by PLAC; no official government copy found online)Cybercrimes (Prohibition, Prevention, etc.) Act 2015, s. 24 (original text)
AustriaDSA-Begleitgesetz (BGBl. I Nr. 182/2023)The act implemented the EU Digital Services Act in Austria, naming KommAustria as digital services coordinator and repealing the national Communication Platforms Act (KoPl-G).
- AustriaDSA-Begleitgesetz (BGBl. I Nr. 182/2023), Art. 4
The one-year deadline for civil claims over purely verbal insults in § 1490 of the Civil Code ceased to apply after 16 February 2024, so such claims fall under the general limitation rules; claims already time-barred by then stay barred.
SourceBGBl. I Nr. 182/2023, Art. 4 (§ 1490 and § 1503 Abs. 24 ABGB) (RIS)
DenmarkAct no. 1765 of 28 December 2023 on enforcement of the Digital Services ActThe act implemented enforcement of the EU Digital Services Act in Denmark, designating the Danish Competition and Consumer Authority as digital services coordinator.
- IrelandDigital Services Act 2024 (No. 2 of 2024)
Ireland's national act giving effect to the EU Digital Services Act commenced, providing the domestic enforcement framework for online platforms' duties under that Regulation.
SourceDigital Services Act 2024, commencement information (S.I. No. 53 of 2024)
- United KingdomOnline Safety Act 2023, ss. 179 and 181
New offences took effect for sending a message the sender knows is false intending to cause non-trivial psychological or physical harm, and for sending a message threatening death or serious harm.
SourcesOnline Safety Act 2023, s. 179Online Safety Act 2023, s. 181
- BrazilLaw 14.811/2024
Law 14.811 added Article 146-A to the Penal Code, making systematic intimidation (bullying) a crime. When it is carried out through computer networks, social media, apps, online games or other digital environments, the penalty is two to four years of imprisonment plus a fine.
SourceCâmara dos Deputados, Lei nº 14.811, de 12 de janeiro de 2024 (original publication)
- IllinoisIll. Public Act 103-439 (HB 2954), Civil Liability for Doxing Act
Created a civil claim against anyone who intentionally publishes a person's identifying information without consent, intending it to be used to harm or harass them and knowing or recklessly disregarding that they would likely suffer death, bodily injury or stalking, when it causes significant economic injury, emotional distress, fear of serious bodily harm or a substantial disruption to their life.
SourcesPublic Act 103-0439740 ILCS 195/10Bill status, HB 2954 (103rd General Assembly)
- NetherlandsWet strafbaarstelling gebruik persoonsgegevens voor intimiderende doeleinden (Stb. 2023, 274)
Doxxing became a specific crime under new Article 285d of the Criminal Code: obtaining, spreading or otherwise making available someone's personal data to frighten them, cause them serious nuisance or seriously hinder them in their work. The maximum penalty is two years in prison, increased by a third for victims targeted in certain public roles.
SourcesBesluit van 25 augustus 2023, Staatsblad 2023, 280 (Dutch)Dutch Criminal Code, Article 285d (Dutch)
2023
- UtahUtah Consumer Privacy Act (SB 227, 2022)
The Utah Consumer Privacy Act took effect, giving consumers rights against covered businesses, including deleting personal data they provided.
SourcesUtah Legislature, S.B. 227 Consumer Privacy Act (2022 General Session)Utah Code § 13-61-201
- IrelandCriminal Justice (Miscellaneous Provisions) Act 2023 (No. 24 of 2023), s. 23
Section 10 of the Non-Fatal Offences against the Person Act 1997 was replaced, creating a standalone stalking offence alongside harassment and listing acts such as communicating with or about a person and disclosing private information.
SourceNon-Fatal Offences against the Person Act 1997, s. 10 (revised, annotation F12)
- United KingdomOnline Safety Act 2023
The Online Safety Act 2023 received Royal Assent, providing for Ofcom to regulate certain internet services and creating new communications offences. Its provisions are brought into force in stages.
ArgentinaLaw 27.736 (Ley Olimpia)Law 27.736 amended Law 26.485 on violence against women to add digital or telematic violence, including online harassment, threats and attacks on reputation. Judges can order platforms, social networks and websites to remove such content.
SourcesInfoLeg, Law 27.736 (passed 10 October 2023; Boletín Oficial 23 October 2023)InfoLeg, Decree 542/2023 promulgating Law 27.736 (20 October 2023)
- PhilippinesCausing v. People, G.R. No. 258524
The Supreme Court held that cyber libel prescribes in one year, not 15, with the period counted from discovery of the post by the offended party or the authorities.
- TurkeyConstitutional Court decision E.2020/76, K.2023/172
The Constitutional Court annulled Article 9 of Law No. 5651, the court route for removing or blocking online content that violated personality rights. The annulment took effect on 10 October 2024, nine months after the decision was published.
SourceLaw No. 5651, Art. 9 (annulled) and amendment table (official text)
- New JerseyNew Jersey P.L. 2023, c. 155 (UPEPA)
New Jersey's Uniform Public Expression Protection Act took effect for civil actions filed on or after that date, letting people sued over speech on matters of public concern ask for early dismissal and attorney's fees.
SourceP.L. 2023, c. 155 (approved September 7, 2023; effective on the 30th day after enactment)
- PolandAct of 7 July 2022 amending the Criminal Code (Dz.U. 2022 poz. 2600)
The stalking offense in Article 190a of the Criminal Code was rewritten and now punishes persistent harassment, and impersonating someone using their image or personal data to harm them, with six months to eight years in prison.
SourcesAct of 7 July 2022 amending the Criminal Code, art. 1 point 73 (Polish)Sejm legal acts database, entry for Dz.U. 2022 poz. 2600 (entry into force 1 October 2023)
Saudi ArabiaPersonal Data Protection Law (Royal Decree No. M/19)The Personal Data Protection Law came into force, giving individuals rights to access, correct and update their personal data and to ask for data no longer needed to be destroyed. Organizations had a one-year grace period to comply.
SourcesSDAIA, Guide to the Saudi Personal Data Protection Law for controllers and processorsPersonal Data Protection Law, official English translation (SDAIA)
- District of ColumbiaBanks v. Hoffman (panel)
A three-judge division of the D.C. Court of Appeals held that the Anti-SLAPP Act's limits on discovery exceeded the D.C. Council's authority under the Home Rule Act. The court later vacated this decision and reached the opposite result en banc in 2025.
- AlabamaAlabama Act 2023-369 (HB 287)
Alabama made doxing a crime: electronically publishing someone's personal identifying information intending that others use it to harass or harm them, when that actually happens. A first offense is a Class A misdemeanor and a repeat offense a Class C felony.
SourcesAct 2023-369 (HB 287), enrolled textAla. Code § 13A-11-38 (Doxing)
- SwitzerlandFederal Act on Data Protection (FADP) of 25 September 2020
The revised Federal Act on Data Protection took effect, letting people ask a court to prohibit processing or disclosure of their personal data or to order it deleted. It also added a criminal offence of using another person's identity without consent to harm them or gain an unlawful advantage (Art. 179decies Criminal Code).
SourcesFederal Act on Data Protection (FADP), Art. 32 (Fedlex)Swiss Criminal Code, Art. 179decies and footnote (inserted by the Data Protection Act of 25 Sept. 2020, in force since 1 Sept. 2023)
- IndiaDigital Personal Data Protection Act, 2023 (No. 22 of 2023)
India's first general data protection law received Presidential assent, including a right for individuals to have personal data they consented to share corrected or erased.
SourceDigital Personal Data Protection Act, 2023 (No. 22 of 2023), Gazette of India
- South KoreaAct on Punishment of Crime of Stalking, amendment (Act No. 19518)
The amendment removed the rule that stalking could not be prosecuted against the victim's objection and expanded the definition of stalking to cover providing, distributing or posting a person's personal or location information online.
- ColoradoColorado SB21-190 (Colorado Privacy Act)
The Colorado Privacy Act took effect, giving Colorado consumers rights to access, correct and delete personal data held by covered businesses and to opt out of certain processing.
- ConnecticutConnecticut P.A. 22-15 (Connecticut Data Privacy Act)
The Connecticut Data Privacy Act took effect, giving consumers rights to access, correct and delete personal data held by covered businesses.
SourceConn. Gen. Stat. §§ 42-515 et seq. and history notes (2026 Supplement)
- NigeriaNigeria Data Protection Act 2023
The Nigeria Data Protection Act took effect, establishing the Nigeria Data Protection Commission and giving people rights over their personal data, including the right to have it erased without undue delay and to object to processing.
SourceNigeria Data Protection Act 2023 (Act No. 37), commencement and ss. 34 and 36
- MalaysiaPenal Code (Amendment) Act 2023 (Act A1681)
A new section 507A of the Penal Code made stalking a crime: repeated acts of harassment, including communicating or trying to communicate with a person by any means, that are intended or likely to cause them distress, fear or alarm. The maximum penalty is three years in prison, a fine or both.
SourcesPenal Code (Amendment) Act 2023 (Act A1681)Penal Code (Act 574), reprint as at 4 July 2023, list of amended sections (s. 507A, Act A1681, in force 31-05-2023)
- UtahUtah UPEPA (SB 18, 2023)
Utah's Uniform Public Expression Protection Act took effect, letting people sued over speech on matters of public concern file a special motion for expedited relief and seek costs and attorney fees.
SourcesUtah Legislature, S.B. 18 Public Expression Protection Act (2023 General Session)Utah Code § 78B-25-103
VirginiaVirginia HB 1757 (2023 Acts ch. 462)Virginia amended its anti-SLAPP immunity statute, Va. Code § 8.01-223.2, so that it covers any tort claim based solely on protected statements, adds statements by employees against employers protected by anti-retaliation law, and removes immunity for statements the speaker knew or should have known were false. Anyone who otherwise prevails under the immunity may also be awarded attorney fees and costs.
SourcesVirginia Acts of Assembly, 2023 Session, Chapter 462Va. Code § 8.01-223.2
- IrelandOnline Safety and Media Regulation Act 2022 (No. 41 of 2022)
Most sections of the Act commenced, establishing Coimisiún na Meán and a regulatory framework for online safety that applies to designated online services.
SourcesOnline Safety and Media Regulation Act 2022, commencement information (S.I. No. 71 of 2023)Online Safety and Media Regulation Act 2022, long title
North CarolinaGrimmett v. Freeman (4th Cir.)The Fourth Circuit concluded that North Carolina's criminal ban on knowingly false derogatory reports about election candidates, G.S. 163-274(a)(9), is likely unconstitutional and sent the case back to the district court.
SourcesGrimmett v. Freeman, No. 22-1844 (4th Cir. Feb. 8, 2023)N.C. Gen. Stat. § 163-274
- SingaporeOnline Safety (Miscellaneous Amendments) Act 2022 (No. 38 of 2022)
A new Part 10A of the Broadcasting Act began regulating online communication services such as social media, letting the Infocomm Media Development Authority direct providers to disable Singapore users' access to egregious content. The Authority can also designate services as regulated online communication services that must follow codes of practice on online safety.
SourcesOnline Safety (Miscellaneous Amendments) Act 2022 (No. 38 of 2022), s. 5 (new Part 10A of the Broadcasting Act 1994) and commencement dateMinistry of Digital Development and Information, Online Safety (Miscellaneous Amendments) Act takes effect on 1 February 2023
- CaliforniaCalifornia Privacy Rights Act (Proposition 24)
The CPRA amendments to the California Consumer Privacy Act, approved by voters in November 2020, took effect, adding rights such as correcting inaccurate personal information and limiting the use of sensitive personal information.
SourceCalifornia Attorney General, California Consumer Privacy Act (CCPA)
- VirginiaVirginia Consumer Data Protection Act (HB 2307 / SB 1392)
The Virginia Consumer Data Protection Act took effect, giving consumers rights against covered businesses, including deleting personal data provided by or obtained about them.
SourcesVirginia Acts of Assembly, 2021 Special Session I, Chapter 35Va. Code § 59.1-577
2022
SpainLey Orgánica 10/2022A new Article 172 ter.5 of the Criminal Code made it a crime to use a person's image without consent to create ads or fake profiles on social networks, contact sites or other public media when this causes them harassment or humiliation.
- JapanAct No. 27 of 2021 amending the Provider Liability Limitation Act
A new non-contentious court procedure lets victims of online abuse seek disclosure of a poster's identity in a single proceeding, instead of the usual two lawsuits against the platform and then the internet provider. Courts can also order providers to share information and preserve logs while the case is pending.
SourcesMinistry of Internal Affairs and Communications, outline of the 2021 amendmente-Gov revision history for Act No. 137 of 2001 (Act No. 27 of 2021 in force 1 October 2022)
- ArizonaArizona HB 2722 (Laws 2022, ch. 267)
Arizona's expanded anti-SLAPP law took effect. A person sued over protected petition, speech, press, association or assembly activity can move to dismiss by first showing that the suit was substantially motivated by a desire to deter, retaliate against or prevent that activity.
SourcesLaws 2022, ch. 267 (HB 2722)Arizona Legislature, general effective datesA.R.S. § 12-751
- KentuckyKy. 2022 Acts ch. 233 (UPEPA)
Kentucky's Uniform Public Expression Protection Act took effect, letting people sued over protected speech, including speech on matters of public concern, ask for early dismissal and recover costs and attorney's fees if they win.
SourcesKRS 454.460 (Created 2022 Ky. Acts ch. 233, sec. 1, effective July 14, 2022)KRS 454.478 (Costs and attorney's fees)
- JapanAct No. 67 of 2022 (insult, Penal Code Art. 231)
The penalty for public insult rose from penal detention or a petty fine to up to one year in prison or a fine of up to 300,000 yen, and the limitation period for prosecuting insult grew from one to three years. It applies to acts committed on or after 7 July 2022.
SourcesMinistry of Justice, Q&A on the increase of the penalty for insultPenal Code (Act No. 45 of 1907), current text on e-Gov
- ArgentinaDenegri, Natalia Ruth c/ Google Inc. (CSJN, Fallos 345:482)
The Supreme Court overturned lower-court orders that required Google to remove search results linking a person to events from more than 20 years earlier, and rejected the claim, which relied on a 'right to be forgotten'. Removal of such results is not available on that basis alone under current Argentine law.
- HawaiiHawaii Act 96 (S.B. 3329), SLH 2022
Hawaii adopted the Public Expression Protection Act, HRS chapter 634G, based on the Uniform Public Expression Protection Act, and repealed the narrower chapter 634F. Defendants sued over speech on matters of public concern can file a special motion for early dismissal and recover costs and attorney's fees if they win it.
SourcesAct 96, Session Laws of Hawaii 2022 (S.B. 3329)HRS § 634G-3
- ArizonaArizona HB 2722 (Laws 2022, ch. 267)
Arizona's governor signed a law expanding the state's anti-SLAPP statute beyond petitioning activity to cover lawsuits brought over speech, press, association and assembly.
- TurkeyLaw No. 7406 (Penal Code Art. 123/A)
Persistent stalking became a crime, covering persistently following someone or trying to contact them through communication tools, information systems or third parties in a way that causes serious distress or fear for their safety. It carries six months to two years in prison, or one to three years in aggravated cases, and is prosecuted on the victim's complaint.
SourceTurkish Penal Code (Law No. 5237), Art. 123/A and amendment table (official text)
- JapanAct No. 44 of 2020 amending the Act on the Protection of Personal Information
People gained a wider right to ask businesses to stop using or delete their personal data: no longer only for unlawful use or collection, but also when the data is no longer needed, after a serious breach, or when handling it risks harming their rights or legitimate interests.
SourcesPersonal Information Protection Commission, 2020 amendment page (full entry into force 1 April 2022)Personal Information Protection Commission, overview of the 2020 amendment (March 2022)
- AustraliaOnline Safety Act 2021 (Cth)
The federal Online Safety Act commenced, giving the eSafety Commissioner powers to order removal of cyber-abuse material targeting Australian adults.
SourceOnline Safety Act 2021 (Cth), No. 76, 2021, s 2 (commencement)
United Arab EmiratesFederal Decree-Law No. 31 of 2021 (Crimes and Penalties Law)A new Crimes and Penalties Law took effect, setting out the offences of libel and insult (Articles 425 to 427). Libel through any means of publicity can lead to up to two years in prison or a fine of up to AED 20,000, with heavier penalties in aggravated cases.
SourceFederal Decree-Law No. 31 of 2021, legislation record (issued 20 Sep 2021, effective 2 Jan 2022)
- United Arab EmiratesFederal Decree-Law No. 34 of 2021 on Countering Rumors and Cybercrimes
A new cybercrime law took effect, covering online insult and defamation, online threats and extortion, and invading someone's privacy by publishing their photos, data or location online. These offences carry prison, fines of AED 150,000 to AED 500,000, or both.
SourceFederal Decree-Law No. 34 of 2021, legislation record (issued 20 Sep 2021, effective 2 Jan 2022)
- United Arab EmiratesFederal Decree-Law No. 45 of 2021 on the Protection of Personal Data
The UAE's federal Personal Data Protection Law came into force, letting people ask a controller to correct their data and, in set cases, to erase it. It does not apply to government entities or to free-zone companies covered by their own data protection laws.
SourcesFederal Decree-Law No. 45 of 2021, Arts. 2 and 15, legislation record (issued 20 Sep 2021, effective 2 Jan 2022)UAE Government portal, Data protection laws
- DenmarkAct no. 2600 of 28 December 2021 (Styrket indsats mod stalking)
A standalone stalking offense was added as section 242 of the Criminal Code, covering systematic and persistent contact, following or other harassment likely to violate a person's peace, punishable by a fine or up to three years in prison.
2021
Hong KongPersonal Data (Privacy) (Amendment) Ordinance 2021Disclosing a person's personal data without consent with intent or recklessness to cause specified harm (doxxing) became an offence, and the Privacy Commissioner gained powers to investigate, prosecute and issue cessation notices requiring removal of doxxing content.
SourcesHKSAR Government press release, Personal Data (Privacy) (Amendment) Ordinance 2021 comes into effect (8 October 2021)Personal Data (Privacy) Ordinance (Cap. 486), s. 64
- GermanyStGB § 238 (stalking) reform
The stalking offence was widened to cover repeated rather than persistent conduct and impairment that is not insignificant rather than serious, and now expressly covers digital stalking such as stalkerware, hacking accounts and posing as the victim online. Particularly serious cases carry up to five years in prison.
SourcesFederal Ministry of Justice, press release of 1 October 2021 on law changes taking effect that dayStGB § 238, current text (Gesetze im Internet)
- ArizonaArizona HB 2502 (Laws 2021, ch. 295)
Arizona made it a crime to post or share a person's personal identifying information electronically, without consent, to cause unwanted contact, injury or harassment by others, when it actually leads to that result.
SourcesLaws 2021, ch. 295 (HB 2502)Arizona Legislature, general effective datesA.R.S. § 13-2916
- GermanyStGB § 126a and § 192a
Two new crimes took effect: § 126a StGB punishes publicly spreading someone's personal data in a way suited and intended to expose them or people close to them to a serious crime, and § 192a punishes sending someone content that attacks a group they belong to. Both carry up to two years in prison or a fine, or up to three years under § 126a if the data were not generally accessible.
SourcesFederal Ministry of Justice, Press Release No. 60/2021 of 21 September 2021StGB § 126a, current text (Gesetze im Internet)
- FranceLoi n° 2021-1109 confortant le respect des principes de la République
Article 36 created Article 223-1-1 of the Penal Code, which makes it a crime to reveal or spread information that identifies or locates a person in order to expose them or their family to a direct risk of harm, punishable by three years in prison and a 45,000 euro fine.
SourceLoi n° 2021-1109 du 24 août 2021, art. 36 (Légifrance)
- LouisianaLouisiana Act 60 of 2021 (HB 23)
Louisiana repealed its criminal defamation statutes, R.S. 14:47 through 14:50, and R.S. 15:443, which governed truth as evidence in defamation prosecutions, so defamation in Louisiana is now handled only as a civil claim.
SourcesHB 23 (2021 Regular Session), bill history: signed June 4, 2021, effective August 1, 2021Acts 2021, No. 60 (HB 23), enrolled actLa. R.S. 14:47 (repealed by Acts 2021, No. 60, §1)
WashingtonWashington UPEPA (SB 5009)Washington's Uniform Public Expression Protection Act took effect, letting people sued over speech on matters of public concern or statements in government proceedings file a special motion for expedited relief.
SourcesWashington State Legislature, SB 5009 (2021-22) bill summaryRev. Code Wash. chapter 4.105
- AustraliaDefamation (Model Provisions) and Other Legislation Amendment Act 2021 (Qld)
Queensland's Stage 1 uniform defamation reforms took effect, adding a serious harm element, a public interest defence and a single publication rule for limitation periods.
- NevadaNevada AB 296 of 2021
Nevada created a civil action against a person who disseminates someone's personal identifying or sensitive information under circumstances that would cause a reasonable person to fear death, bodily injury or stalking.
SourcesAB 296 (2021), enrolled text, effective July 1, 2021NRS 41.1347
- KentuckyKy. 2021 Acts ch. 199
KRS 525.085 took effect, making it a crime to post someone's personally identifying information online with intent to intimidate, abuse, threaten, harass or frighten them, and KRS 411.065 gave victims a civil action.
SourcesKRS 525.085 (Created 2021 Ky. Acts ch. 199, sec. 1, effective June 29, 2021)KRS 411.065 (Created 2021 Ky. Acts ch. 199, sec. 2, effective June 29, 2021)
- ItalyCorte costituzionale, sentenza n. 150/2021
The Constitutional Court struck down Article 13 of the Press Law, which made prison mandatory for press defamation involving a specific fact, and the matching rule for radio and television. Prison under Article 595 of the Penal Code remains possible only in exceptionally serious cases.
SourcesCorte costituzionale, sentenza n. 150/2021 (decided 22 June 2021, filed 12 July 2021)Gazzetta Ufficiale, 1st special series, no. 28 of 14 July 2021
- OregonOregon HB 3047 (2021)
Oregon created a civil cause of action for improper disclosure of private information, now ORS 30.835, against someone who knowingly discloses a person's personal information without consent, intending to stalk, harass or injure them, when that harm results. The bill had an emergency clause and took effect when the Governor signed it on June 15, 2021.
SourcesOregon Legislature, HB 3047 (2021) measure overviewOregon Laws 2021, chapter 300Or. Rev. Stat. § 30.835
Wisconsin2021 Wisconsin Act 28Wisconsin's stalking law, Wis. Stat. § 940.32, was amended so that electronic messages, repeated notifications to a person's devices, and content posted on websites or apps can be part of a stalking course of conduct.
Source2021 Wisconsin Act 28
- South KoreaAct on Punishment of Crime of Stalking (Act No. 18083)
South Korea adopted a dedicated stalking law covering unwanted conduct that causes anxiety or fear, including sending messages, images or video through communication networks. The Act took effect six months after promulgation.
SourceAct on Punishment of Crime of Stalking, Addendum to Act No. 18083 (English translation, KLRI)
- FloridaFlorida CS/HB 1 (ch. 2021-6), § 836.115
Florida created the misdemeanor of cyberintimidation by publication, which covers electronically publishing another person's personal identification information with intent to incite violence or a crime against them, or to threaten or harass them so they fear bodily harm. The law took effect when signed.
SourcesLaws of Fla. ch. 2021-6 (CS/HB 1), § 14Fla. Stat. § 836.115
- GermanyGesetz zur Bekämpfung des Rechtsextremismus und der Hasskriminalität
The anti-hate-crime law raised the maximum penalty for public online insult to two years in prison, extended the special protection of § 188 StGB expressly to local politicians, and toughened penalties for public threats. A duty for large social networks to report certain serious criminal posts to the Federal Criminal Police Office was set to apply from 1 February 2022.
SourcesFederal Ministry of Justice, press release of 1 April 2021 (law in force 3 April 2021)Strafgesetzbuch (StGB) §§ 185-188, current text (Gesetze im Internet)
- BrazilLaw 14.132/2021 (crime of stalking)
Law 14.132 added Article 147-A to the Penal Code, making repeated pursuit of a person by any means, including online, a crime punishable by six months to two years of imprisonment plus a fine. It took effect on publication.
SourceCâmara dos Deputados, Lei nº 14.132, de 31 de março de 2021 (original publication)
- ArkansasArkansas Act 375 of 2021 (SB 170)
Arkansas made it a crime to dox a minor on a social media platform, meaning to post the minor's private or identifying information, or other communications about the minor, to frighten, intimidate, threaten or harass them in a way that puts them in reasonable fear of physical injury.
SourceAct 375 of 2021 (SB 170)
- AustriaHass-im-Netz-Bekämpfungs-Gesetz (HiNBG, BGBl. I Nr. 148/2020)
The package broadened the online harassment offense in § 107c of the Criminal Code, created a fast-track court injunction for serious online violations of personality rights (§ 549 ZPO), and let victims of online defamation or insult ask a court to have the suspected author identified (§ 71 StPO).
2020
- New JerseyNew Jersey P.L. 2020, c. 125 (Daniel's Law)
Daniel's Law took effect, restricting the publication of the home addresses and unpublished home telephone numbers of active, former and retired judges, prosecutors and law enforcement officers and their immediate family members; the provisions for law enforcement officers became operative 18 months later.
SourceP.L. 2020, c. 125 (approved November 20, 2020; effective immediately)
New YorkNew York S52-A/A5991-A (Chapter 250 of 2020)New York broadened its anti-SLAPP law, effective immediately, to cover communications in a public place or forum and other lawful speech or petitioning on issues of public concern, and made costs and attorney's fees recoverable when such a suit lacks a substantial basis in fact or law.
- TurkeyLaw No. 7253 amending Law No. 5651
Foreign social network providers with more than one million daily accesses from Turkey became required to appoint a representative in Turkey to handle official notices and individuals' applications under the internet law, with escalating fines for not doing so.
SourceLaw No. 5651, Additional Article 4 and amendment table (official text)
Canada1704604 Ontario Ltd. v. Pointes Protection Association, 2020 SCC 22The Supreme Court of Canada set out how Ontario courts must apply the s. 137.1 anti-SLAPP test, and dismissed a developer's lawsuit against a residents' group as a SLAPP.
- South AfricaProtection of Personal Information Act 4 of 2013 (POPIA)
Most of POPIA, including sections 2 to 38, came into operation, giving people the right to ask a responsible party to correct or delete personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained.
SourcesProclamation R. 21 of 2020, Government Gazette 43461 (22 June 2020)Protection of Personal Information Act 4 of 2013, s. 24
- FranceConseil constitutionnel, décision n° 2020-801 DC
The Constitutional Council struck down the core of the law on hateful online content (loi Avia), including the duty for platforms to remove manifestly unlawful hateful content within 24 hours and the one-hour removal duty for content flagged by the authorities.
SourceDécision n° 2020-801 DC du 18 juin 2020 (Conseil constitutionnel)
- SingaporeProtection from Harassment (Amendment) Act 2019 (No. 17 of 2019)
Section 3 of the Protection from Harassment Act was rewritten so that publishing a person's identity information, or that of a related person, with intent to cause harassment, alarm or distress, and causing it, became an offence. The same amendment extended the offences to entities as well as individuals.
SourcesProtection from Harassment (Amendment) Act 2019, s. 4 and commencement datesProtection from Harassment Act 2014, s. 3 (timeline)
2019
- KenyaData Protection Act, 2019 (No. 24 of 2019)
Kenya's Data Protection Act took effect, giving people rights to object to processing and to have false or misleading personal data corrected or deleted.
SourceData Protection Act (Cap. 411C), assent and commencement
- GermanyFederal Constitutional Court, Right to be forgotten II (1 BvR 276/17)
The Federal Constitutional Court held that search-engine delisting claims fall under fully harmonised EU law and are reviewed against the EU Charter of Fundamental Rights, with courts weighing the person's privacy against the publisher's freedom of expression and the public's interest in information. It also said the interest in delisting can grow stronger over time.
SourceFederal Constitutional Court, Press Release No. 84/2019 (order of 6 November 2019, 1 BvR 276/17)
- MarylandMaryland SB 103 of 2019 (Grace's Law 2.0)
Maryland expanded its ban on electronic harassment of minors to cover malicious electronic communications sent as part of a series that intimidate or harass a minor and cause physical injury or serious emotional distress.
SourceSB 103 (2019 Regular Session), Chapter 26, effective October 1, 2019
- ColombiaSentencia SU-420 de 2019 (Constitutional Court)
The Constitutional Court set the rules for tutela actions over defamatory or insulting posts on social media. A person must usually first ask the author to remove or correct the post and use the platform's reporting tools, and judges weigh who posted, who is targeted and the reach of the content before ordering removal.
SourceCorte Constitucional, Sentencia SU420/19 (12 September 2019)
- TexasTexas HB 2730 (2019)
Amendments to the Texas Citizens Participation Act, the state's anti-SLAPP law, took effect, changing the rules on civil actions involving the exercise of free speech, petition and association rights.
SourceTexas Legislature Online, HB 2730 (86th Legislature) history
PortugalLaw 58/2019 (Lei da Proteção de Dados Pessoais)Portugal's law implementing the GDPR took effect the day after publication, naming the CNPD as the supervisory authority. Its Article 24 sets national rules on balancing data protection with freedom of expression and information, and says freedom of expression does not justify disclosing personal data such as home addresses and contact details unless they are widely known.
- ColoradoColorado HB19-1324
Colorado's anti-SLAPP law, signed on June 3, 2019, took effect, letting a person sued over petitioning or speech connected with a public issue file a special motion to dismiss with a right to an immediate appeal in some cases.
- TennesseeTennessee Public Participation Act (HB 777, Pub. Ch. 185)
Tennessee's anti-SLAPP law took effect, letting people sued over speech on matters of public concern petition for early dismissal and recover costs and attorney fees if the case is dismissed.
SourceTennessee General Assembly, HB 0777 (111th General Assembly)
- MinnesotaIn re Welfare of A.J.B.
The Minnesota Supreme Court held the stalking-by-mail provision, Minn. Stat. § 609.749, subd. 2(6), facially overbroad and void, and narrowed the mail-harassment statute, § 609.795, subd. 1(3), to messages sent with intent to abuse.
SourceIn re Welfare of A.J.B., No. A17-1161 (Minn. June 19, 2019)
- PhilippinesSafe Spaces Act (Republic Act No. 11313)
The Safe Spaces Act made gender-based online sexual harassment an offense, covering acts such as online threats, cyberstalking, impersonation and posting lies to harm a victim's reputation.
SourceRepublic Act No. 11313 (Safe Spaces Act), approved April 17, 2019
- MontanaMyers v. Fulbright (D. Mont.)
A federal district court declared Montana's criminal defamation statute, Mont. Code Ann. § 45-8-212, facially unconstitutional because it does not require proof of actual malice; the statute remains in the code.
SourcesMyers v. Fulbright, No. CV 17-59-M-DWM (D. Mont. Mar. 18, 2019), opinion and orderMont. Code Ann. § 45-8-212
- DenmarkAct no. 1719 of 27 December 2018 (Freds- og ærekrænkelser m.v.)
The reform rewrote the Criminal Code's defamation rules, raising the maximum penalty to one year in prison, or two years for untrue serious accusations or accusations spread through mass media that can cause substantial harm, and letting courts order defamatory statements or images deleted.
2018
- SpainLey Orgánica 3/2018
Spain's data protection law alongside the GDPR took effect, adding a right to have search engines delist results for a person's name when the information is inaccurate, irrelevant, outdated or excessive, and a right to have data removed from social networks.
- ItalyDecreto legislativo 10 agosto 2018, n. 101
Italy's Personal Data Protection Code was adapted to the GDPR, keeping national rules such as complaints to the Garante alongside the GDPR's right to erasure.
- BrazilLaw 13.709/2018 (General Data Protection Law, LGPD)
The LGPD set general rules for processing personal data, including online, by individuals, companies and public bodies. It gives people rights over their data, including asking for unnecessary, excessive or unlawfully processed data to be deleted.
SourceCâmara dos Deputados, Lei nº 13.709, de 14 de agosto de 2018 (original publication)
- FranceLoi n° 2018-703 renforçant la lutte contre les violences sexuelles et sexistes
Article 11 extended the harassment offense in Article 222-33-2-2 of the Penal Code to coordinated or successive group harassment, even when no single person acted repeatedly, and made use of a digital or electronic medium an aggravating circumstance.
NorwayPersonal Data Act 2018 (personopplysningsloven)The new Personal Data Act made the EU General Data Protection Regulation, including the right to erasure, apply as Norwegian law and repealed the Personal Data Act of 2000.
SourcePersonal Data Act (lov 15. juni 2018 nr. 38), § 32 (Norwegian)
- CaliforniaCalifornia AB 375 (CCPA)
The Governor signed the California Consumer Privacy Act, which gives California consumers rights over the personal information businesses collect about them, including the right to ask a covered business to delete it.
SourcesAB-375 bill history (Chapter 55, Statutes of 2018)California Attorney General, California Consumer Privacy Act (CCPA)
- FranceLoi n° 2018-493 relative à la protection des données personnelles
The law rewrote the 1978 Data Protection Act (loi Informatique et Libertés) to adapt French law to the GDPR, which governs requests to erase personal data.
- KenyaComputer Misuse and Cybercrimes Act, 2018 (No. 5 of 2018)
The Act took effect, creating offences including cyber harassment.
SourceComputer Misuse and Cybercrimes Act (Cap. 79C), assent and commencement
- AustriaDatenschutz-Anpassungsgesetz 2018 (BGBl. I Nr. 120/2017)
The amended Data Protection Act (DSG) took effect alongside the GDPR, adding national rules that supplement the GDPR, including its right to erasure.
- DenmarkDatabeskyttelsesloven (Act no. 502 of 23 May 2018)
The Data Protection Act took effect alongside the GDPR, supplementing its rules, including the right to erasure, and repealing the 2000 Personal Data Act.
- GermanyBundesdatenschutzgesetz (BDSG) 2018
The new Federal Data Protection Act took effect on the day the GDPR started to apply, adding national rules alongside the GDPR's rights, including the right to erasure, for people whose data is processed in Germany.
- IrelandData Protection Act 2018 (No. 7 of 2018)
Ireland's Data Protection Act 2018 commenced alongside the GDPR, setting up the Data Protection Commission and national rules that supplement GDPR rights such as erasure.
SourceData Protection Act 2018, commencement information (S.I. No. 174 of 2018)
- NetherlandsUitvoeringswet Algemene verordening gegevensbescherming (UAVG)
The Dutch GDPR Implementation Act took effect on the day the GDPR began to apply, replacing the Personal Data Protection Act (Wbp). It supplements the GDPR's rights, including the right to erasure, with national exemptions such as one for journalistic purposes.
SourcesBesluit van 16 mei 2018, Staatsblad 2018, 145 (Dutch)Uitvoeringswet AVG, Article 43 (Dutch)
- PolandPersonal Data Protection Act of 10 May 2018 (ustawa o ochronie danych osobowych)
Poland's national act applying the GDPR took effect, naming the President of the Personal Data Protection Office as the supervisory authority and setting criminal penalties for processing personal data without a legal basis.
SourceSejm legal acts database, Dz.U. 2018 poz. 1000 (entry into force 25 May 2018)
- SwedenDataskyddslag (2018:218)
Sweden's Data Protection Act, which supplements the GDPR, took effect. It provides that most GDPR rules, including the right to erasure, do not apply to processing for journalistic purposes or academic, artistic or literary expression, or where they would conflict with the constitutional press and media laws.
SourceData Protection Act (2018:218), Chapter 1, Section 7 (Swedish)
- United KingdomData Protection Act 2018
Most of the Data Protection Act 2018 came into force, supplementing the GDPR in the UK. Together they give people a right to ask organisations to erase their personal data in set cases, subject to exceptions such as freedom of expression.
- MexicoSCJN, Acción de Inconstitucionalidad 122/2015 y acumuladas 124/2015 y 125/2015
The Supreme Court upheld many provisions of the Right of Reply Law but declared others invalid, including the five-business-day deadline for requesting a reply, and gave Congress 90 days to legislate a new time limit. The ruling was published in the Diario Oficial de la Federación on 24 April 2018.
- ConnecticutConnecticut P.A. 17-71
Connecticut's anti-SLAPP law, Conn. Gen. Stat. § 52-196a, took effect for civil actions filed on or after this date, letting a person sued over speech, petition or association on a matter of public concern file a special motion to dismiss.
SourceConn. Gen. Stat. § 52-196a and history note (2026 Supplement)
2017
- New JerseyState v. Burkert, 231 N.J. 257
The New Jersey Supreme Court narrowed the harassment provision in N.J.S.A. 2C:33-4(c) as applied to speech, limiting it to repeated communications directed at a person that reasonably put them in fear for their safety or security or that intolerably interfere with their reasonable expectation of privacy.
- IllinoisPeople v. Relerford, 2017 IL 121094
The Illinois Supreme Court held that the part of the stalking and cyberstalking statutes making it a crime to negligently "communicate to or about" a person in a way that causes emotional distress was facially overbroad under the First Amendment. That phrase was struck from both statutes; the rest of the laws remain in force.
SourcesPeople v. Relerford, 2017 IL 121094 (Ill. Nov. 30, 2017)720 ILCS 5/12-7.5 (cyberstalking)
- GermanyNetzwerkdurchsetzungsgesetz (NetzDG)
The Network Enforcement Act took effect, requiring large social networks to run a complaints procedure for unlawful content, including criminal insult and defamation, and to remove clearly unlawful content quickly. Most of its platform duties were later removed when the Digital Services Act regime took over.
- ItalyLegge 29 maggio 2017, n. 71 (cyberbullying)
The cyberbullying law took effect. It lets a victim aged 14 or older, or a parent, ask a website or social media operator to hide, remove or block the minor's personal data, and to turn to the data protection authority (Garante) if the operator does not act within 48 hours.
- MinnesotaLeiendecker v. Asian Women United of Minnesota
The Minnesota Supreme Court held that the anti-SLAPP statute, Minn. Stat. § 554.02, violates the state constitutional right to a jury trial when applied to tort claims.
SourceLeiendecker v. Asian Women United of Minn., No. A16-0360 (Minn. May 24, 2017)
- MassachusettsBlanchard v. Steward Carney Hospital, 477 Mass. 141
The Supreme Judicial Court added a further step to the test for special motions to dismiss under the anti-SLAPP statute, G. L. c. 231, § 59H, letting some claims proceed if they were not brought primarily to chill petitioning.
SourceBlanchard v. Steward Carney Hospital, Inc., 477 Mass. 141 (2017)
- KenyaOkuta & another v Attorney General & 2 others [2017] KEHC 8382 (KLR)
The High Court declared section 194 of the Penal Code, the criminal defamation offence, unconstitutional and invalid except for speech falling within Article 33(2)(a)-(d) of the Constitution.
SourceOkuta & another v Attorney General & 2 others, Petition 397 of 2016, judgment of 6 February 2017
- JapanAct No. 102 of 2016 amending the Stalker Regulation Act
Repeatedly sending social media messages after being refused, and posting comments on a person's blog or social media page, were added to the conduct covered by the Stalker Regulation Act. Provisions revising the prohibition-order system followed on 14 June 2017.
SourcesNational Police Agency, outline of the 2016 amendmentNational Police Agency, 2017 White Paper on Crime Victims, Column 12 (promulgated 14 December 2016, in force 3 January 2017)
2016
- District of ColumbiaCompetitive Enterprise Institute v. Mann
The D.C. Court of Appeals held that denials of Anti-SLAPP special motions to dismiss can be appealed immediately, and that a plaintiff defeats the motion by presenting evidence on which a properly instructed jury could reasonably find in the plaintiff's favor. The opinion was amended on December 13, 2018 without changing these holdings.
- New ZealandHarmful Digital Communications Act Commencement Order (No 2) 2016
The Act's civil regime took effect, letting people harmed by digital communications ask the District Court, after first complaining to the Approved Agency, for orders such as takedown, correction, apology or release of an anonymous author's identity to the court.
SourceHarmful Digital Communications Act 2015, s. 2 and note on LI 2016/226
- AlabamaAlabama Act 2016-371 (HB 529)
Alabama rewrote its criminal defamation statute so that it applies only to false accusations that a private citizen, not holding or running for public office, committed a felony or other indictable offense involving moral turpitude, made knowingly or with reckless disregard for the truth. The offense became a Class B misdemeanor.
SourcesAct 2016-371 (HB 529), enrolled textAla. Code § 13A-11-163 (Defamation)
GeorgiaGeorgia HB 513 (Act 420)Georgia rewrote its anti-SLAPP statute, O.C.G.A. § 9-11-11.1, extending it beyond statements tied to government proceedings to statements made in a public place or forum on issues of public interest or concern, and letting defendants file a motion to strike that the plaintiff must defeat by showing a probability of prevailing. The act also allowed a direct appeal of rulings on such motions.
SourcesGeorgia General Assembly, Summary of General Statutes Enacted, 2016 Session (Act 420; HB 513)HB 513 (2015-2016), committee substitute text
KansasKansas SB 319 (2016), Public Speech Protection ActKansas's anti-SLAPP law lets a person sued over speech, petitioning or association on a public issue file a motion to strike, which pauses discovery while it is decided. It was approved by the Governor on May 6, 2016.
- NorwayPenal Code § 266 a (serious stalking)
Serious stalking became a specific crime: repeatedly threatening, following, watching, contacting or otherwise pursuing someone in a way likely to cause fear or anxiety, with up to four years in prison.
SourcePenal Code § 266 a, inserted by Act of 17 June 2016 No. 53 (Norwegian)
- SwedenLag (2016:485) om ändring i brottsbalken
A new offence of unlawful identity use (Penal Code, Chapter 4, Section 6 b) made it a crime to use another person's identity details without permission to pose as them in a way that causes them harm or inconvenience.
SourcesSwedish Penal Code (1962:700), amendment register: SFS 2016:485 (Swedish)Swedish Penal Code (1962:700), Chapter 4, Section 6 b (Swedish)
- North CarolinaState v. Bishop, 368 N.C. 869
The North Carolina Supreme Court held that the provision of the cyberbullying statute banning online posting of private, personal or sexual information about a minor with intent to intimidate or torment, G.S. 14-458.1(a)(1)(d), violates the First Amendment.
- MinnesotaLaws of Minnesota 2016, ch. 126, § 8
Minnesota amended its criminal defamation statute to cover only false statements made with knowledge of their false and defamatory character, and removed the provision under which truth was a defense only if communicated with good motives and for justifiable ends.
SourcesLaws of Minnesota 2016, ch. 126, § 8 (signed May 19, 2016; effective the day following final enactment)Minn. Stat. § 609.765
- TurkeyPersonal Data Protection Law (Law No. 6698)
Turkey's first general data protection law was published in the Official Gazette and most of it took effect that day. It includes the right to ask a data controller to delete, destroy or anonymize personal data once the reasons for processing no longer apply, a provision that took effect six months after publication along with the complaint procedure.
SourceLaw No. 6698 (KVKK), Arts. 7, 11 and 32 (official text, Mevzuat Bilgi Sistemi)
- MichiganMichigan 2015 PA 210
Michigan repealed MCL 750.97, a criminal provision on derogatory statements about the financial condition of a bank.
SourceMCL 750.97 (Repealed. 2015, Act 210, Eff. Mar. 14, 2016)
- ItalyDecreto legislativo 15 gennaio 2016, n. 7
Insult (ingiuria, former Article 594 of the Penal Code) stopped being a crime and became a civil wrong punished with a civil financial penalty. Defamation under Article 595 remains a crime.
SourceD.Lgs. 15 gennaio 2016, n. 7 (GU n. 17 of 22 January 2016), in force 6 February 2016 (Normattiva)
- AustriaStrafrechtsänderungsgesetz 2015 (BGBl. I Nr. 112/2015)
The reform added § 107c to the Criminal Code, a new offense of continued harassment by means of telecommunication or a computer system, often described as cyberbullying.
2015
- BrazilLaw 13.188/2015 (right of reply)
Law 13.188 gives anyone offended by material published or broadcast by a media outlet a free right of reply or correction, and took effect on publication. It also added a rule to the Penal Code that, where the offense was committed through the media, a retraction can be made through the same media if the victim wishes.
SourceCâmara dos Deputados, Lei nº 13.188, de 11 de novembro de 2015 (original publication)
- CanadaProtection of Public Participation Act, 2015, S.O. 2015, c. 23
Ontario's anti-SLAPP law took effect on Royal Assent, adding s. 137.1 to the Courts of Justice Act so defendants can ask a court to dismiss a lawsuit arising from their expression on a matter of public interest.
SourceProtection of Public Participation Act, 2015, S.O. 2015, c. 23, s. 6 (commencement)
- MexicoLey Reglamentaria del Artículo 6o., párrafo primero, en materia del Derecho de Réplica
Mexico's federal Right of Reply Law was promulgated and then published in the Diario Oficial de la Federación on 4 November 2015. It lets a person affected by inaccurate or false information published or broadcast by a media outlet ask for a reply or correction, with recourse to a federal judge if the outlet refuses.
- NorwayPenal Code 2005 (straffeloven) in force; 1902 Penal Code repealed
The 2005 Penal Code took effect and the 1902 Penal Code, which contained the old defamation offenses, was repealed from the same date. The new code has no general defamation offense, so defamation claims are now brought as civil claims.
SourceAct of 19 June 2015 No. 65 on the entry into force of the Penal Code 2005, § 1 (Norwegian)
- NorwayDamages Act (skadeserstatningsloven) § 3-6 a
A new civil rule makes a person who negligently makes a statement that can harm someone's honor or reputation liable to pay compensation, unless the statement is justified after weighing freedom of expression.
SourceDamages Act, § 3-6 a, inserted by Act of 19 June 2015 No. 65 (Norwegian)
- MassachusettsCommonwealth v. Lucas, 472 Mass. 387
The Supreme Judicial Court held that G. L. c. 56, § 42, which made certain false statements about political candidates or ballot questions a crime, violates free speech rights under article 16 of the Massachusetts Declaration of Rights.
- ArgentinaCivil and Commercial Code of the Nation (Law 26.994)
The new Civil and Commercial Code replaced the old Civil Code and Commercial Code. It recognizes the dignity of every person and lets anyone harmed in their privacy, honor, reputation, image or identity ask a court to prevent and repair the harm.
SourceInfoLeg, Law 26.994 (entry into force on 1 August 2015, as set by Law 27.077)
- PortugalLaw 83/2015 (Lei n.º 83/2015)
This amendment to the Criminal Code created the crime of stalking (perseguição, Article 154-A): repeatedly pursuing or harassing another person by any means, directly or indirectly, in a way likely to cause them fear or unease or to restrict their freedom of determination, with up to three years in prison or a fine.
- New ZealandHarmful Digital Communications Act 2015
The day after Royal assent, the Act's offence of posting a digital communication intended to cause serious emotional distress took effect, together with a complaint-and-takedown process that protects online content hosts from liability for user content when they follow it.
SourceHarmful Digital Communications Act 2015, ss. 2 and 22-25
- FloridaFlorida CS/SB 1312 (ch. 2015-70)
Florida's anti-SLAPP statute, § 768.295, was extended from suits brought by government entities to suits brought by any person, and now protects free speech in connection with public issues, including statements made in news reports, books, films and similar works. A person sued in violation of the statute can seek expedited dismissal, and the prevailing party on that claim recovers attorney fees and costs.
SourcesLaws of Fla. ch. 2015-70 (CS/SB 1312)Fla. Stat. § 768.295
- SpainLey Orgánica 1/2015
The Criminal Code reform removed minor insults (injurias leves) from criminal law, except against partners, family members and the other people listed in Article 173.2, so only insults regarded as serious remain a crime. Minor insults can still be pursued in the civil courts.
SourceLey Orgánica 1/2015, de 30 de marzo, preamble and Art. 208 amendment (BOE núm. 77, 31 March 2015)
- SpainLey Orgánica 1/2015
A new Article 172 ter of the Criminal Code made stalking a crime, covering insistent and repeated conduct such as watching or following a person or contacting them by any means of communication in a way that seriously disrupts their daily life.
SourceLey Orgánica 1/2015, de 30 de marzo, new Art. 172 ter (BOE núm. 77, 31 March 2015)
- NevadaNevada SB 444 of 2015
Nevada amended its anti-SLAPP law, effective on approval, so that a plaintiff facing a special motion to dismiss must show with prima facie evidence a probability of prevailing on the claim, and declared that this burden matches California's standard.
SourcesSB 444 (2015), enrolled text, Chapter 428NRS 41.660 and 41.665
- WashingtonDavis v. Cox, No. 90233-0 (Wash. 2015)
The Washington Supreme Court struck down the state's 2010 anti-SLAPP statute, RCW 4.24.525, holding that its early-dismissal procedure violated the right to a jury trial under the Washington Constitution.
- MinnesotaState v. Turner, 864 N.W.2d 204
The Minnesota Court of Appeals held the criminal defamation statute, Minn. Stat. § 609.765, unconstitutionally overbroad and reversed a conviction under it.
SourceState v. Turner, 864 N.W.2d 204 (Minn. Ct. App. 2015), No. A14-1408
- District of ColumbiaAbbas v. Foreign Policy Group (D.C. Cir.)
The federal appeals court for D.C. held that federal courts hearing diversity cases may not apply the special motion to dismiss in D.C.'s Anti-SLAPP Act, because the Federal Rules of Civil Procedure govern dismissal there. Defendants sued in federal court in D.C. cannot use that early-dismissal motion.
SourceAbbas v. Foreign Policy Group, LLC, No. 13-7171 (D.C. Cir. Apr. 24, 2015)