Changes to laws and regulations affecting information security, privacy, AI and resilience.
Australia’s Telecommunications and Other Legislation Amendment (Assistance and Access) Act 2018 receives Royal Assent, creating new powers over communications providers.
Spain’s Organic Law 3/2018 takes effect, supplementing the GDPR and introducing new digital rights.
Canadian organisations must now report breaches creating a real risk of significant harm and keep records of all breaches.
Ohio now gives organisations with a recognised cybersecurity framework an affirmative defence against data breach tort claims.
The Council of Europe opens the protocol modernising Convention 108 for signature, with the UK among the first signatories.
Australia’s Telecommunications Sector Security Reforms now require carriers to protect networks and notify government of security-relevant changes.
Singapore’s Cybersecurity Act establishes a framework for Critical Information Infrastructure protection.
The Isle of Man’s Data Protection Act 2018 and GDPR and LED Implementing Regulations take effect.
Argentina’s AAIP publishes Resolution 47/2018 setting recommended security measures for processing personal data.
South Dakota’s breach notification law takes effect, meaning every US state now requires notification of personal data breaches.
The Investigatory Powers (Interception by Businesses etc.) Regulations 2018 replace the Lawful Business Practice Regulations 2000.
New UK regulations implementing the EU Trade Secrets Directive provide civil remedies for misuse of trade secrets.