Australia expands critical infrastructure security law
2 Dec 2021
Amendments to Australia’s SOCI Act extend coverage to 11 sectors and introduce mandatory cyber incident reporting.
Changes to laws and regulations affecting information security, privacy, AI and resilience.
Amendments to Australia’s SOCI Act extend coverage to 11 sectors and introduce mandatory cyber incident reporting.
Germany’s Telecommunications Telemedia Data Protection Act takes effect, tightening consent rules for cookies and similar technologies.
China’s PIPL introduces consent-based processing, strict transfer rules and extraterritorial reach for personal information of people in China.
Rwanda publishes Law No. 058/2021 on personal data protection and privacy, introducing registration and data localisation requirements.
India’s Central Electricity Authority issues its first cyber security guidelines for the power sector, including trusted source procurement.
China’s Critical Information Infrastructure Security Protection Regulations set enhanced security duties for critical operators.
New York City now requires businesses collecting customers’ biometric data to post clear notices and bans selling that data.
The BVI’s Data Protection Act 2021 comes into force, introducing modern data protection principles.
The one-year grace period under South Africa’s Protection of Personal Information Act ends today, and full compliance is now required.
The European Commission has recognised the UK as providing adequate data protection, allowing personal data to keep flowing from the EU.
The European Commission has adopted modernised Standard Contractual Clauses for international transfers of personal data under the GDPR.
The US Supreme Court has narrowed the CFAA’s “exceeds authorized access” limb, limiting criminal liability for misusing legitimately accessible data.