Skip to main content

Maldives Draft PDPB

Draft Privacy and Data Protection Bill

Maldives' draft data protection law proposing Data Protection Authority and defining sensitive data including health information.

Jurisdiction

Maldives

Enacted

Pending

Effective

TBD

Enforcement

Data Protection Authority (proposed)

Under consideration

Regulations.AI Maldives Overview

Why It Matters

Maldives' proposed health data protections will impact mental health chatbots serving Maldivian users if enacted. Monitor for passage.

Recent Developments

Draft under consideration; passage timing unclear

At a Glance

Applies to

Mental Health AppGeneral Chatbot

Who Must Comply

  • Data controllers and processors in Maldives (when enacted)
  • Entities processing health or sensitive data

Safety Provisions

  • Data Protection Authority proposed
  • Sensitive data includes health information
  • Data subject rights framework
  • Breach notification proposed
  • Cross-border transfer restrictions

Compliance & Enforcement

Penalties

To be determined upon enactment

View on map

Maldives

Focus Areas

Mental health & crisis

Cite This

APA

Maldives. (n.d.). Draft Privacy and Data Protection Bill.

Related Regulations

In Effect BN

Brunei PDPO

Brunei's personal data protection order requiring DPIA and imposing penalties up to 10% Brunei turnover or $1M.

In Effect IN

India DPDP Act

STRICTEST children's provisions in APAC. Children = under 18; verifiable parental consent MANDATORY; PROHIBITION on tracking, behavioral monitoring, targeted advertising to children.

In Effect ID

Indonesia PP 17/2025

Indonesia's comprehensive child online protection regulation establishing age-appropriate design requirements for electronic systems accessible to children. Most granular age classification globally (5 groups). Requires risk assessments, privacy-by-default, parental consent, DPIAs, and prohibits data profiling of children. First of its kind in Asia and Global South.

In Effect CN

China CSL Amendments

First major revision of China's foundational Cybersecurity Law since 2017. Introduces formal AI governance provisions, significantly increases penalties, and expands extraterritorial application to all cybersecurity violations.

In Effect AU

AU National AI Plan

National AI policy roadmap replacing previously proposed mandatory AI guardrails. Focuses on leveraging existing legal frameworks rather than new mandatory requirements. Establishes the Australian AI Safety Institute (AISI) to monitor, test, and share information on AI risks and harms.

In Effect IN

India AI Governance Guidelines

Voluntary AI governance framework built on seven core principles ('sutras'): Trust, People First, Innovation over Restraint, Fairness & Equity, Accountability, Understandable by Design, and Safety/Resilience/Sustainability. Establishes AI Governance Group, AI Safety Institute, and Technology & Policy Expert Committee.

Last updated January 22, 2026. Verify against primary sources before relying on this information.