Skip to main content
Privacy & data protection

Regulations we honor

AutoPublish is operated as a sole proprietorship in Ontario, Canada. We honor the substantive rights granted under 20+ privacy regulations across 6 continents.

We list a regulation when we proactively design our product to honor the rights it grants. For jurisdiction-specific questions email [email protected].

Rights we honor universally

Access. Get a copy of all personal data we hold about you.

Correction. Update inaccurate information.

Deletion. Have your account and content removed.

Portability. Export your data in a machine-readable format.

Opt-out. Decline marketing, non-essential cookies, and data sharing.

Withdraw consent. Revoke any consent you previously gave.

Object to automated decisions. Request a human review of significant decisions.

File a complaint. Lodge a complaint with a supervisory authority in your region.

Exercise any right via the Data Subject Request page, or email [email protected]. We respond within 30 days (or sooner where required).

🇨🇦 Canada — Our home jurisdiction

Canada (Federal) · 2001, updated continuously

PIPEDAPersonal Information Protection and Electronic Documents Act

🇨🇦
AccessCorrectionWithdrawal of consentComplaint

Supervisory authority: Office of the Privacy Commissioner of Canada (priv.gc.ca)

Quebec, Canada · Phased 2022-2024

Quebec Law 25Act to modernize the protection of personal information

🇨🇦
AccessCorrectionDeletion (de-indexing)PortabilityObject to automated processing

Supervisory authority: Commission d'accès à l'information du Québec (CAI)

🇪🇺 European Union, UK, Switzerland

European Union / EEA · May 25, 2018

GDPRGeneral Data Protection Regulation

🇪🇺
Access (Art. 15)Rectification (Art. 16)Erasure (Art. 17)Restriction (Art. 18)Portability (Art. 20)Object (Art. 21)Withdraw consent

Supervisory authority: Per-country DPA (CNIL, ICO, AEPD, etc.)

United Kingdom · January 31, 2020

UK GDPRData Protection Act 2018 + UK GDPR

🇬🇧
AccessRectificationErasureRestrictionPortabilityObjectAutomated decision-making

Supervisory authority: Information Commissioner's Office (ICO)

Switzerland · September 1, 2023

FADPFederal Act on Data Protection (revised)

🇨🇭
InformationAccessCorrectionDeletionRestriction

Supervisory authority: Federal Data Protection and Information Commissioner (FDPIC)

🇺🇸 United States — State laws

California · Jan 1, 2020 / Jan 1, 2023

CCPA / CPRACalifornia Consumer Privacy Act / California Privacy Rights Act

🇺🇸
KnowDeleteCorrectOpt-out of sale/sharingLimit use of sensitive infoNon-discriminationPortability

Supervisory authority: California Privacy Protection Agency (CPPA)

Colorado · Jul 1, 2023

CPAColorado Privacy Act

🇺🇸
AccessCorrectDeletePortabilityOpt-out

Connecticut · Jul 1, 2023

CTDPAConnecticut Data Privacy Act

🇺🇸
AccessCorrectDeletePortabilityOpt-out

Delaware · Jan 1, 2025

DPDPADelaware Personal Data Privacy Act

🇺🇸
AccessCorrectDeletePortabilityOpt-out

Iowa · Jan 1, 2025

ICDPAIowa Consumer Data Protection Act

🇺🇸
AccessDeletePortabilityOpt-out of sale

Montana · Oct 1, 2024

MCDPAMontana Consumer Data Privacy Act

🇺🇸
AccessCorrectDeletePortabilityOpt-out

Nebraska · Jan 1, 2025

NDPANebraska Data Privacy Act

🇺🇸
AccessCorrectDeletePortabilityOpt-out

New Hampshire · Jan 1, 2025

NHPANew Hampshire Privacy Act (SB 255)

🇺🇸
AccessCorrectDeletePortabilityOpt-out

New Jersey · Jan 15, 2025

NJDPANew Jersey Data Privacy Act

🇺🇸
AccessCorrectDeletePortabilityOpt-out

Oregon · Jul 1, 2024

OCDPAOregon Consumer Privacy Act

🇺🇸
AccessCorrectDeletePortabilityOpt-outThird-party list

Texas · Jul 1, 2024

TDPSATexas Data Privacy and Security Act

🇺🇸
AccessCorrectDeletePortabilityOpt-out

Utah · Dec 31, 2023

UCPAUtah Consumer Privacy Act

🇺🇸
AccessDeletePortabilityOpt-out of sale / targeted ads

Virginia · Jan 1, 2023

VCDPAVirginia Consumer Data Protection Act

🇺🇸
AccessCorrectDeletePortabilityOpt-out

🌎 Americas (other)

Brazil · August 16, 2020

LGPDLei Geral de Proteção de Dados

🇧🇷
Confirmation of processingAccessCorrectionAnonymization/blocking/deletionPortabilityWithdraw consentInformation about sharing

Supervisory authority: Autoridade Nacional de Proteção de Dados (ANPD)

🌏 Asia–Pacific

Japan · Amended Apr 1, 2022

APPIAct on the Protection of Personal Information

🇯🇵
DisclosureCorrectionDeletionCessation of useCessation of third-party provision

Supervisory authority: Personal Information Protection Commission (PPC)

Thailand · June 1, 2022

PDPAPersonal Data Protection Act B.E. 2562

🇹🇭
AccessCorrectionErasureRestrictionPortabilityObject

Supervisory authority: Personal Data Protection Committee (PDPC)

Australia · Continuously updated

APAPrivacy Act 1988 (as amended)

🇦🇺
AccessCorrectionComplaint

Supervisory authority: Office of the Australian Information Commissioner (OAIC)

New Zealand · December 1, 2020

NZPAPrivacy Act 2020

🇳🇿
AccessCorrectionComplaintBreach notification protection

Supervisory authority: Office of the Privacy Commissioner (OPC)

🌍 Africa

South Africa · July 1, 2021 (enforcement)

POPIAProtection of Personal Information Act

🇿🇦
AccessCorrectionDeletion/destructionObjectComplaint

Supervisory authority: Information Regulator (South Africa)

Important disclosure

This page is a plain-English summary, not legal advice — the full text of each regulation is authoritative. We do not claim formal certification under any of these laws.

If you believe we have failed to honor your rights, contact [email protected] first — you always retain the right to lodge a complaint directly with the supervisory authority in your jurisdiction.