TSA issues first cybersecurity directive for US pipelines
27 May 2021
Following the Colonial Pipeline attack, US pipeline owners must now report cyber incidents to CISA and appoint a cybersecurity coordinator.
Changes to laws and regulations affecting information security, privacy, AI and resilience.
Following the Colonial Pipeline attack, US pipeline owners must now report cyber incidents to CISA and appoint a cybersecurity coordinator.
The US Supreme Court has held that equipment must use a random or sequential number generator to be an autodialer under the TCPA.
The Basel Committee on Banking Supervision publishes its Principles for Operational Resilience, alongside revised principles for operational risk management.
UK financial regulators have published final rules requiring firms to identify important business services, set impact tolerances and test resilience.
Kuwait’s telecoms and IT regulator CITRA approves a Data Privacy Protection Regulation for service providers, including 72-hour breach notification.
CMN Resolution 4,893 sets cyber security policy and cloud outsourcing requirements for Brazilian financial institutions.
Singapore’s amended PDPA introduces mandatory data breach notification.
UNECE Regulations 155 and 156 enter into force, making cyber security and software update management systems part of vehicle type approval.
ASEAN digital ministers approve Model Contractual Clauses for cross-border data flows between ASEAN member states.
Brazil’s ANATEL Resolution 740/2020 now requires telecoms providers to adopt cyber security policies, manage risk and report incidents.
With the end of the Brexit transition period, the UK GDPR and Data Protection Act 2018 now form the UK’s data protection regime.
Portland, Oregon now bans private entities from using face recognition technology in places of public accommodation.