Connecticut privacy law amendments take effect
1 Oct 2026
Amendments to the Connecticut Data Privacy Act, including a ban on selling precise geolocation data, take effect on 1 October 2026.
Changes to laws and regulations affecting information security, privacy, AI and resilience.
Amendments to the Connecticut Data Privacy Act, including a ban on selling precise geolocation data, take effect on 1 October 2026.
Ofcom expects online platforms serving UK users to use hash matching, or equally effective measures, to stop illegal intimate images and deepfakes being shared from 30 September 2026.
The Information Commissioner’s Office is replaced by a board-led Information Commission under the Data (Use and Access) Act 2025.
The EDPB has adopted Guidelines 04/2026 on administrative fines, replacing the 2017 guidelines, and finalised its DSA–GDPR guidelines.
Manufacturers must now report actively exploited vulnerabilities and severe incidents under the EU Cyber Resilience Act.
EU authorities can now issue European Production and Preservation Orders directly to service providers.
Registered California data brokers must now retrieve and act on consumer deletion requests submitted through the state’s DROP platform.
Amendments to the EU AI Act defer high-risk obligations and soften the AI literacy duty.
Section 250 of the Crime and Policing Act 2026 extends corporate criminal liability to any offence committed by a senior manager.
The Bill expanding the UK NIS regime has completed its Commons stages and moves to the House of Lords.
Canada’s Critical Cyber Systems Protection Act creates mandatory cyber security programmes and incident reporting for federally regulated critical sectors.
Hong Kong authorised institutions must now be operationally resilient, meeting the HKMA’s OR-2 requirements.