Quebec’s Law 25 main privacy obligations take effect
22 Sep 2023
Most of Quebec’s Law 25 is now in force, including privacy impact assessments, privacy by default and significant new penalties.
Changes to laws and regulations affecting information security, privacy, AI and resilience.
Most of Quebec’s Law 25 is now in force, including privacy impact assessments, privacy by default and significant new penalties.
Sweeping amendments to South Korea’s Personal Information Protection Act take effect, unifying rules and strengthening sanctions.
Switzerland’s revised Federal Act on Data Protection takes effect, bringing Swiss law closer to the GDPR with some notable differences.
India’s first comprehensive data protection law receives Presidential assent, setting consent and security duties with extraterritorial reach.
The National Security Act 2023 replaces the Official Secrets Acts 1911–1939 and creates new offences relating to foreign powers, including sabotage of electronic systems.
The European Commission has adopted an adequacy decision for the EU–US Data Privacy Framework, three years after Schrems II.
New York City now enforces Local Law 144, requiring bias audits and candidate notices for automated employment decision tools.
Nigeria’s President signs the Nigeria Data Protection Act 2023, establishing the Nigeria Data Protection Commission and a comprehensive, extraterritorial data protection regime.
The main new requirements of the amended FTC Safeguards Rule now apply to US non-bank financial institutions, including MFA and encryption.
The African Union Convention on Cyber Security and Personal Data Protection enters into force, nine years after adoption.
Ecuador’s Organic Law on Personal Data Protection is now fully in force, with corrective measures and sanctions applying.
ASEAN and the European Commission publish a Joint Guide comparing ASEAN Model Contractual Clauses and EU Standard Contractual Clauses.