Data privacy · AI governance · Cybersecurity law
What the certifications doesn’t buy you
Jurisdiction by jurisdiction and provision by provision: what the law requires, and what legal effect a certification carries. Every claim is sourced, dated and set to expire.
- Jurisdictions
- 59
- Instruments
- 2
- Legal effects
- 12
Project Riversong.
001 / The name
Project Riversong
In the Appalachians, people set stones into a streambed so the water would break over them and sing. The sound carried further than the water could be seen, and anyone walking the hills could hear where the stream ran and follow it out.
The stones did not move the river. They made it audible, and they were placed by people who had already walked that ground, for the benefit of whoever came next.
That is what this is. The law is the stream: it runs whether or not you can follow it. Every row here is a stone set deliberately — a provision, what a certification does under it, who checked, when, and when the claim expires — so the next person can hear where the law actually runs, and take the right path through it.
002 / The map
Where the law stands, region by region
Hover a region for its coverage. Click it for the data protection rights, the regulator and when the entry was last verified.
003 / Six lenses
Read it from where you stand
The same law reads differently to the person it protects, the business it binds and the authority that enforces it. Each lens has its own handbook.
- 01 / LensEnd user / data subjectWhat can I actually do about this today, and what does it cost me.Read the handbook
- 02 / LensBusinessWhat does this obligate us to build, and by when.Read the handbook
- 03 / LensGovernmentGovernment is one lens carrying two sub-lenses, each with judicial reviewability analysis.PolicymakerRegulator / enforcerRead the handbook
- 04 / LensCertifying bodyWhat is the scope of what we are attesting to.Read the handbook
- 05 / LensFront-line staffWhat do I do when this lands on my desk.Read the handbook
- 06 / LensHuman rights / privacy advocateWho does this regime fail, and can that be shown.Read the handbook