Guernsey’s new data protection law comes into force
25 May 2018
The Data Protection (Bailiwick of Guernsey) Law 2017 takes effect, bringing a GDPR-equivalent regime to the Bailiwick.
Changes to laws and regulations affecting information security, privacy, AI and resilience.
The Data Protection (Bailiwick of Guernsey) Law 2017 takes effect, bringing a GDPR-equivalent regime to the Bailiwick.
Ireland’s Data Protection Act 2018 takes effect alongside the GDPR and establishes the Data Protection Commission.
The Data Protection (Jersey) Law 2018 and Data Protection Authority (Jersey) Law 2018 take effect.
The GDPR applies from today, supplemented in the UK by the new Data Protection Act 2018.
The Network and Information Systems Regulations 2018, implementing the EU NIS Directive, are now in force in the UK.
Israel’s Privacy Protection (Data Security) Regulations now set tiered security requirements for databases.
The US Clarifying Lawful Overseas Use of Data (CLOUD) Act has become law, with implications for data held by US providers outside the US.
Mauritius’s GDPR-aligned Data Protection Act 2017 comes into force, with registration, DPIA and 72-hour breach notification requirements.
The Payment Services Regulations 2017, implementing PSD2 in the UK, now apply, with new security and incident reporting obligations.
US insurance regulators have adopted a model law requiring insurers to maintain security programmes and report cyber events within 72 hours.
Corporate offences under Part 3 of the Criminal Finances Act 2017 come into force.
China’s Cybersecurity Law introduces security obligations for network operators and data localisation for critical information infrastructure.