| South Korea | — | — | in_force | ICT service providers, E-commerce, Financial services, Healthcare | |
| Japan | — | — | in_force | All sectors | |
| Japan | — | — | in_force | Defense, Government, Defense contractors | |
| South Korea | — | — | in_force | Critical information infrastructure, Government, Finance, Energy, Telecommunications | |
| Brazil | — | — | in_force | All sectors processing personal data | |
| Brazil | — | — | in_force | Banking, Financial institutions, Payment institutions | |
| Japan | — | — | in_force | Government, Critical infrastructure, All sectors | |
| Canada | — | — | proposed | Finance, Telecommunications, Energy, Transportation, Nuclear | |
| United Arab Emirates | — | — | in_force | Banking, Insurance, Financial services, Payment services | |
| United States (Federal) | — | — | in_force | Federal civilian executive branch agencies (FCEB) | |
| Mexico | — | — | in_force | Banking institutions, Financial entities | |
| United States (Federal) | — | — | in_force | cross-sector | |
| China | — | — | in_force | Energy, Finance, Transportation, Water, Healthcare, Government, Telecommunications | |
| Singapore | — | — | in_force | Energy, Water, Banking, Finance, Healthcare, Transport, Infocomm, Media, Security and emergency services, Government, Aviation | |
| United Kingdom | — | — | in_force | Government supply chain, All sectors (voluntary), Healthcare (NHS) | |
| United States (Federal) | Cybersecurity and Infrastructure Security Agency | — | proposed | critical infrastructure | |
| South Africa | Information Regulator of South Africa | — | in_force | cross-sector | |
| South Africa | — | — | in_force | All sectors, Electronic communications service providers | |
| Singapore | Cyber Security Agency of Singapore | — | in_force | cross-sector | |
| China | — | — | in_force | All sectors, Critical information infrastructure, Network operators | |
| China | Cyberspace Administration of China | — | amended | cross-sector | |
| China | — | — | in_force | All sectors, Data processors, Critical information infrastructure | |
| European Union | European Banking Authority | — | in_force | financial | |
| European Union | European Union Agency for Cybersecurity | — | in_force | cross-sector | |
| Saudi Arabia | National Cybersecurity Authority | — | in_force | cross-sector | |
| United States (Federal) | — | — | in_force | Federal agencies, Federal contractors, Software vendors to government | |
| Switzerland | — | — | in_force | Government, Critical infrastructure | |
| United Arab Emirates | Telecommunications and Digital Government Regulatory Authority | — | in_force | cross-sector | |
| United States (Federal) | Office of Management and Budget | — | in_force | government | |
| United States (Federal) | Federal Trade Commission | — | in_force | financial | |
| United States (Federal) | Department of Health and Human Services | — | in_force | healthcare | |
| Hong Kong | — | — | in_force | Banking, Financial institutions, Authorized institutions | |
| Israel | — | — | in_force | Energy, Water, Finance, Healthcare, Transportation, Defense industry, Government, Telecommunications | |
| India | Indian Computer Emergency Response Team | — | in_force | cross-sector | |
| India | — | — | in_force | All sectors handling sensitive personal data | |
| Germany | — | — | in_force | Critical infrastructure, Energy, Water, Finance, Healthcare, Transport, Digital infrastructure | |
| Singapore | — | — | in_force | Banking, Insurance, Capital markets, Payment services | |
| France | — | — | in_force | Defense, Critical infrastructure, Essential services, Government | |
| Saudi Arabia | — | — | in_force | Government entities, Critical national infrastructure, Cloud service providers | |
| United Arab Emirates | — | — | in_force | Critical national infrastructure, Government, Energy, Finance, Telecommunications | |
| United Kingdom | National Cyber Security Centre | — | in_force | cross-sector | |
| Netherlands | — | — | in_force | Energy, Transport, Banking, Financial market infrastructure, Healthcare, Drinking water, Digital infrastructure, ICT service management | |
| New York | New York Department of Financial Services | — | in_force | financial | |
| United Kingdom | National Cyber Security Centre | — | in_force | technology | |
| United Kingdom | — | — | in_force | Consumer electronics manufacturers, IoT device manufacturers, Importers and distributors | |
| South Africa | — | — | in_force | All sectors processing personal information | |
| India | — | — | in_force | Banking, Scheduled commercial banks, Urban cooperative banks | |
| European Union | European Union Agency for Cybersecurity | — | in_force | technology | |
| Brazil | Banco Central do Brasil | — | in_force | financial | |
| Saudi Arabia | — | — | in_force | Banking, Insurance, Financial market institutions, Payment services | |
| United States (Federal) | Securities and Exchange Commission | — | in_force | financial | |
| Australia | Australian Signals Directorate | — | in_force | critical infrastructure | |
| Australia | — | — | in_force | Energy, Water, Transport, Finance, Healthcare, Food, Education, Space, Defence industry, Communications, Data storage and processing | |
| New Zealand | — | — | in_force | Telecommunications, Network operators, Internet service providers | |
| Canada | — | — | in_force | Federal government departments and agencies | |