California Consumer Privacy Act comes into force
1 Jan 2020
The CCPA gives Californians rights to know, delete and opt out of the sale of their personal information.
Changes to laws and regulations affecting information security, privacy, AI and resilience.
The CCPA gives Californians rights to know, delete and opt out of the sale of their personal information.
California now requires connected devices to have reasonable security features, such as unique passwords, effectively ending default passwords.
Kenya’s Data Protection Act 2019 comes into force, introducing GDPR-style obligations, registration and 72-hour breach notification.
The Cayman Islands’ GDPR-style Data Protection Law takes effect.
Council of Europe Convention 108 and its Additional Protocol enter into force for Morocco, strengthening the country’s Law 09-08 data protection regime.
Bahrain’s Personal Data Protection Law No. 30 of 2018 comes into force.
Australia’s TGA issues guidance on meeting the Essential Principles for medical device cyber security across the product lifecycle.
The EU Cybersecurity Act gives ENISA a permanent mandate and creates an EU-wide cybersecurity certification framework.
Health Canada finalises its guidance on pre-market cyber security requirements for medical device licence applications.
Uganda’s Data Protection and Privacy Act 2019 commences, introducing registration, security safeguards and breach notification requirements.
Abu Dhabi’s Department of Health launches ADHICS, a mandatory information and cyber security standard for healthcare entities.
Illinois’ top court has held that individuals need not show actual harm to sue under the Biometric Information Privacy Act.