Here are some source documents you should find informative, on various countries'/regions' Privacy Protection regulations. If you have users from other countries or regions, these may apply to you, regardless of where your company resides.

• European Union - GDPR  https://gdpr-info.eu/
• California - CCPA  https://oag.ca.gov/privacy/ccpa
• Canada - PIPEDA  https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/pipeda_brief/
• Africa - various https://dataprotection.africa/
• Australia - Privacy Act 1988 - https://www.legislation.gov.au/C2004A03712/asmade/text
• Argentina - PDPL - https://www.argentina.gob.ar/normativa/nacional/ley-25326-64790/actualizacion
• Brazil - LGPD - https://lgpd-brazil.info/
• Mexico - LFPDPPP - https://www.global-regulation.com/translation/mexico/560242/federal-law-of-protection-of-personal-data-in-the-possession-of-private-individuals.html
• United Kingdom - Data Protection Act 2018 - https://www.legislation.gov.uk/ukpga/2018/12/contents/enacted