New York DFS cybersecurity regulation takes effect
1 Mar 2017
New York’s financial regulator now requires banks, insurers and other regulated entities to maintain a cybersecurity programme and appoint a CISO.
Changes to laws and regulations affecting information security, privacy, AI and resilience.
New York’s financial regulator now requires banks, insurers and other regulated entities to maintain a cybersecurity programme and appoint a CISO.
The first-ever amendment to the WTO TRIPS Agreement enters into force, after two-thirds of WTO members accepted it.
The Investigatory Powers Act 2016 becomes law, overhauling UK interception, communications data and equipment interference powers.
Qatar becomes the first GCC state to issue a general data protection law, setting security, breach and transfer rules.
A new exemption to the DMCA’s anti-circumvention rules now allows good-faith security research on lawfully acquired devices and software.
The first EU-wide cybersecurity legislation has entered into force; Member States have until May 2018 to implement it.
The revised OMB Circular A-130 updates how US federal agencies and their contractors must manage information security and privacy.
The European Commission has adopted the EU–US Privacy Shield, replacing the invalidated Safe Harbor framework.
CPMI and IOSCO publish Guidance on Cyber Resilience for Financial Market Infrastructures, including a two-hour recovery expectation.
The EU General Data Protection Regulation has entered into force and will apply from 25 May 2018.
The 2005 Amendment to the Convention on the Physical Protection of Nuclear Material enters into force, extending obligations to nuclear facilities.
Türkiye’s Personal Data Protection Law No. 6698 is published, introducing the country’s first comprehensive data protection regime.