The Gibraltar GDPR takes effect
1 Jan 2021
Following the end of the Brexit transition period, Gibraltar’s own GDPR-equivalent regime takes effect.
Changes to laws and regulations affecting information security, privacy, AI and resilience.
Following the end of the Brexit transition period, Gibraltar’s own GDPR-equivalent regime takes effect.
Ship operators must now address cyber risks in their safety management systems under IMO Resolution MSC.428(98).
New Zealand’s Privacy Act 2020 introduces mandatory breach notification and new rules for overseas organisations.
NATO issues C-M(2002)49-REV1, a revised Security Policy setting minimum standards for protecting NATO classified information, including by contractors.
North American electricity utilities must now manage cyber security risk in their supply chains under NERC CIP-013-1.
Brazil’s General Data Protection Law, the LGPD, is now in force, bringing GDPR-style obligations to organisations processing Brazilians’ data.
US federal agencies can no longer contract with entities that use Huawei, ZTE, Hytera, Hikvision or Dahua telecoms and video surveillance equipment.
The CJEU has invalidated the EU–US Privacy Shield and set new expectations for Standard Contractual Clauses.
The Dubai International Financial Centre’s new GDPR-style Data Protection Law No. 5 of 2020 takes effect.
Properly end-to-end encrypted ITAR technical data can now be sent or stored outside the US without being treated as an export.
Organisations holding New York residents’ private information must now maintain reasonable administrative, technical and physical safeguards.
Uruguay issues Decree 64/020, introducing breach notification, DPO duties and privacy by design.