{
  "$schema": "../schemas/index.schema.json",
  "_comment": "Country (ISO 3166-1 alpha-2) → ruleset_id map. Generated 2026-05-20 per spec 001 FR-01 + Q1/Q2/Q8 resolutions.",
  "_version": "1.2.0",
  "_default_fallback": "fallback-gdpr-most-protective",
  "countries": {
    "AD": "gdpr-strict",
    "AT": "gdpr-strict",
    "BE": "gdpr-strict",
    "BG": "gdpr-strict",
    "HR": "gdpr-strict",
    "CY": "gdpr-strict",
    "CZ": "gdpr-strict",
    "DK": "gdpr-strict",
    "EE": "gdpr-strict",
    "FI": "gdpr-strict",
    "FR": "gdpr-france",
    "DE": "gdpr-germany",
    "GR": "gdpr-strict",
    "HU": "gdpr-strict",
    "IE": "gdpr-ireland",
    "IT": "gdpr-italy",
    "LV": "gdpr-strict",
    "LT": "gdpr-strict",
    "LU": "gdpr-strict",
    "MT": "gdpr-strict",
    "NL": "gdpr-netherlands",
    "PL": "gdpr-poland",
    "PT": "gdpr-strict",
    "RO": "gdpr-strict",
    "SK": "gdpr-strict",
    "SI": "gdpr-strict",
    "ES": "gdpr-spain",
    "SE": "gdpr-strict",
    "IS": "gdpr-strict",
    "LI": "gdpr-strict",
    "NO": "gdpr-strict",
    "CH": "gdpr-strict",
    "MC": "gdpr-strict",
    "SM": "gdpr-strict",
    "VA": "gdpr-strict",
    "GB": "uk-gdpr-pecr",
    "US": "us-router",
    "CA": "pipeda-canada",
    "BR": "lgpd-brazil",
    "AR": "gdpr-strict",
    "UY": "gdpr-strict",
    "PE": "gdpr-strict",
    "CO": "gdpr-strict",
    "MX": "gdpr-strict",
    "CL": "gdpr-strict",
    "EC": "gdpr-strict",
    "CR": "gdpr-strict",
    "PA": "gdpr-strict",
    "DO": "gdpr-strict",
    "BO": "gdpr-strict",
    "PY": "gdpr-strict",
    "VE": "gdpr-strict",
    "CN": "pipl-china",
    "JP": "appi-japan",
    "KR": "pipa-korea",
    "IN": "dpdpa-india",
    "SG": "pdpa-singapore",
    "TH": "pdpa-thailand",
    "VN": "pdpd-vietnam",
    "ID": "gdpr-strict",
    "MY": "pdpa-malaysia",
    "PH": "gdpr-strict",
    "HK": "gdpr-strict",
    "TW": "gdpr-strict",
    "MO": "gdpr-strict",
    "AU": "privacy-act-australia",
    "NZ": "privacy-act-newzealand",
    "ZA": "popia-southafrica",
    "NG": "gdpr-strict",
    "KE": "gdpr-strict",
    "EG": "gdpr-strict",
    "MA": "gdpr-strict",
    "TN": "gdpr-strict",
    "DZ": "gdpr-strict",
    "GH": "gdpr-strict",
    "RW": "gdpr-strict",
    "UG": "gdpr-strict",
    "SN": "gdpr-strict",
    "AE": "uae-pdpl",
    "SA": "ksa-pdpl",
    "BH": "gdpr-strict",
    "QA": "gdpr-strict",
    "OM": "gdpr-strict",
    "IL": "israel-ppl",
    "TR": "turkey-kvkk",
    "RU": "gdpr-strict",
    "KZ": "gdpr-strict",
    "BY": "gdpr-strict",
    "UA": "gdpr-strict"
  },
  "_us_regions": {
    "_comment": "Region-level routing for US visitors. Each entry is the specific state ruleset. Other US states (no privacy law) fall back to gdpr-strict per Q2 2026-05-19.",
    "US-CA": "ccpa-california",
    "US-CO": "cpa-colorado",
    "US-CT": "ctdpa-connecticut",
    "US-VA": "vcdpa-virginia",
    "US-UT": "ucpa-utah",
    "US-IA": "icdpa-iowa",
    "US-TN": "tipa-tennessee",
    "US-MT": "mcdpa-montana",
    "US-TX": "tdpsa-texas",
    "US-OR": "ocpa-oregon",
    "US-FL": "fdbr-florida",
    "US-DE": "delaware-dpdpa",
    "US-NJ": "njdpl-newjersey",
    "US-NH": "nhpl-newhampshire",
    "US-KY": "kcdpa-kentucky",
    "US-MD": "modpa-maryland",
    "US-MN": "mcdpa-minnesota",
    "US-RI": "ridtppa-rhodeisland",
    "US-IN": "icdpa-indiana"
  }
}