# Project Riversong

> A legal reference on data privacy, AI governance and cybersecurity law: what each jurisdiction's law requires, and what legal effect a certification carries under each statutory provision. Reference material only, not legal advice.

## Currency

- As of: 2026-09-23
- Oldest verification: 2026-09-14
- Nearest review due: 2026-10-14
- Rows past their review date: 0
- Every row carries verified_on and review_by; rows past review_by are marked overdue on the site.

## Coverage

- Jurisdictions listed: 59 (published 0, low confidence 5)
- Legal-effect rows: 12 (published 0, low confidence 0)
  - European Union: 12
- Instruments: 2; provisions: 4; certifications: 7

### Published

- None yet.

### Drafting

- [California](https://projectriversong.org/jurisdictions/california)
- [China](https://projectriversong.org/jurisdictions/china)
- [European Union](https://projectriversong.org/jurisdictions/european-union)
- [United States (federal)](https://projectriversong.org/jurisdictions/united-states)

### Planned (listed, not yet written)

- [Argentina](https://projectriversong.org/jurisdictions/argentina)
- [Australia](https://projectriversong.org/jurisdictions/australia)
- [Bahrain](https://projectriversong.org/jurisdictions/bahrain)
- [Brazil](https://projectriversong.org/jurisdictions/brazil)
- [Canada](https://projectriversong.org/jurisdictions/canada)
- [Chile](https://projectriversong.org/jurisdictions/chile)
- [Colombia](https://projectriversong.org/jurisdictions/colombia)
- [Colorado](https://projectriversong.org/jurisdictions/colorado)
- [Connecticut](https://projectriversong.org/jurisdictions/connecticut)
- [Delaware](https://projectriversong.org/jurisdictions/delaware)
- [Egypt](https://projectriversong.org/jurisdictions/egypt) (low confidence)
- [Florida](https://projectriversong.org/jurisdictions/florida)
- [Ghana](https://projectriversong.org/jurisdictions/ghana)
- [Hong Kong](https://projectriversong.org/jurisdictions/hong-kong)
- [India](https://projectriversong.org/jurisdictions/india)
- [Indiana](https://projectriversong.org/jurisdictions/indiana)
- [Indonesia](https://projectriversong.org/jurisdictions/indonesia) (low confidence)
- [Iowa](https://projectriversong.org/jurisdictions/iowa)
- [Israel](https://projectriversong.org/jurisdictions/israel) (low confidence)
- [Japan](https://projectriversong.org/jurisdictions/japan)
- [Kentucky](https://projectriversong.org/jurisdictions/kentucky)
- [Kenya](https://projectriversong.org/jurisdictions/kenya)
- [Malaysia](https://projectriversong.org/jurisdictions/malaysia)
- [Maryland](https://projectriversong.org/jurisdictions/maryland)
- [Mexico](https://projectriversong.org/jurisdictions/mexico) (low confidence)
- [Minnesota](https://projectriversong.org/jurisdictions/minnesota)
- [Montana](https://projectriversong.org/jurisdictions/montana)
- [Morocco](https://projectriversong.org/jurisdictions/morocco)
- [Nebraska](https://projectriversong.org/jurisdictions/nebraska)
- [New Hampshire](https://projectriversong.org/jurisdictions/new-hampshire)
- [New Jersey](https://projectriversong.org/jurisdictions/new-jersey)
- [New Zealand](https://projectriversong.org/jurisdictions/new-zealand)
- [Nigeria](https://projectriversong.org/jurisdictions/nigeria)
- [Ohio](https://projectriversong.org/jurisdictions/ohio)
- [Oregon](https://projectriversong.org/jurisdictions/oregon)
- [Peru](https://projectriversong.org/jurisdictions/peru)
- [Philippines](https://projectriversong.org/jurisdictions/philippines)
- [Qatar](https://projectriversong.org/jurisdictions/qatar)
- [Rhode Island](https://projectriversong.org/jurisdictions/rhode-island)
- [Rwanda](https://projectriversong.org/jurisdictions/rwanda)
- [Saudi Arabia](https://projectriversong.org/jurisdictions/saudi-arabia)
- [Singapore](https://projectriversong.org/jurisdictions/singapore)
- [South Africa](https://projectriversong.org/jurisdictions/south-africa)
- [South Korea](https://projectriversong.org/jurisdictions/south-korea)
- [Switzerland](https://projectriversong.org/jurisdictions/switzerland)
- [Tennessee](https://projectriversong.org/jurisdictions/tennessee)
- [Texas](https://projectriversong.org/jurisdictions/texas)
- [Thailand](https://projectriversong.org/jurisdictions/thailand)
- [Türkiye](https://projectriversong.org/jurisdictions/turkiye)
- [United Arab Emirates](https://projectriversong.org/jurisdictions/united-arab-emirates)
- [United Kingdom](https://projectriversong.org/jurisdictions/united-kingdom)
- [Uruguay](https://projectriversong.org/jurisdictions/uruguay)
- [Utah](https://projectriversong.org/jurisdictions/utah)
- [Vietnam](https://projectriversong.org/jurisdictions/vietnam) (low confidence)
- [Virginia](https://projectriversong.org/jurisdictions/virginia)

## Gaps

No entry at all for 116 countries and territories: Afghanistan, Albania, Algeria, Angola, Armenia, Azerbaijan, Bahamas, Bangladesh, Belarus, Belize, Benin, Bhutan, Bolivia, Bosnia and Herz., Botswana, Brunei, Burkina Faso, Burundi, Cambodia, Cameroon, Central African Rep., Chad, Congo, Costa Rica, Cuba, Côte d'Ivoire, Dem. Rep. Congo, Djibouti, Dominican Rep., Ecuador, El Salvador, Eq. Guinea, Eritrea, Ethiopia, Falkland Is., Fiji, Fr. S. Antarctic Lands, Gabon, Gambia, Georgia, Greenland, Guatemala, Guinea, Guinea-Bissau, Guyana, Haiti, Honduras, Iceland, Iran, Iraq, Jamaica, Jordan, Kazakhstan, Kosovo, Kuwait, Kyrgyzstan, Laos, Lebanon, Lesotho, Liberia, Libya, Macedonia, Madagascar, Malawi, Mali, Mauritania, Moldova, Mongolia, Montenegro, Mozambique, Myanmar, N. Cyprus, Namibia, Nepal, New Caledonia, Nicaragua, Niger, North Korea, Norway, Oman, Pakistan, Palestine, Panama, Papua New Guinea, Paraguay, Puerto Rico, Russia, S. Sudan, Senegal, Serbia, Sierra Leone, Solomon Is., Somalia, Somaliland, Sri Lanka, Sudan, Suriname, Syria, Taiwan, Tajikistan, Tanzania, Timor-Leste, Togo, Trinidad and Tobago, Tunisia, Turkmenistan, Uganda, Ukraine, Uzbekistan, Vanuatu, Venezuela, W. Sahara, Yemen, Zambia, Zimbabwe, eSwatini.
Full list with contribution links: https://projectriversong.org/gaps

## Tiers of legal effect

Taxonomy name: TAXONOMY_NAME (not yet named).
- TIER 00 No legal effect: Market and procurement signal only. No statute references it. https://projectriversong.org/tiers/no-legal-effect
- TIER 01 Evidentiary element: May be submitted as evidence of compliance. Burden of proof stays with you. https://projectriversong.org/tiers/evidentiary-element
- TIER 02 Mitigating factor: Does not prevent a finding of breach. Reduces the sanction after one. https://projectriversong.org/tiers/mitigating-factor
- TIER 03 Affirmative defense / damages bar: Defeats or caps a civil claim. You must plead and prove it. https://projectriversong.org/tiers/affirmative-defense
- TIER 04 Presumption of conformity: Burden shifts to the regulator, who must disprove your compliance. https://projectriversong.org/tiers/presumption-conformity
- TIER 05 Legal gateway: The certificate is itself permission to do something otherwise unlawful. https://projectriversong.org/tiers/legal-gateway

## Lenses

Six reader positions, each with a handbook from the knowledge-base volumes (drafting material, not yet published).
- End user / data subject: What can I actually do about this today, and what does it cost me. https://projectriversong.org/lenses/end-user
- Business: What does this obligate us to build, and by when. https://projectriversong.org/lenses/business
- Government: Government is one lens carrying two sub-lenses, each with judicial reviewability analysis. https://projectriversong.org/lenses/government
  - Policymaker: What did the drafters intend, and what did the text achieve. https://projectriversong.org/lenses/policymaker
  - Regulator / enforcer: What can this authority make stick on appeal. https://projectriversong.org/lenses/regulator
- Certifying body: What is the scope of what we are attesting to. https://projectriversong.org/lenses/certifying-body
- Front-line staff: What do I do when this lands on my desk. https://projectriversong.org/lenses/front-line-staff
- Human rights / privacy advocate: Who does this regime fail, and can that be shown. https://projectriversong.org/lenses/advocate

## Machine access

- OpenAPI description: https://projectriversong.org/openapi.json
- Sitemap: https://projectriversong.org/sitemap.xml
- Permanent row URLs: https://projectriversong.org/effect/{jurisdiction}/{provision}/{certification}
- Changelog, generated from git history: https://projectriversong.org/changelog