California’s Student Online Personal Information Protection Act takes effect
1 Jan 2016
California’s SOPIPA now bans edtech providers from targeted advertising and selling student data, and requires reasonable security.
Changes to laws and regulations affecting information security, privacy, AI and resilience.
California’s SOPIPA now bans edtech providers from targeted advertising and selling student data, and requires reasonable security.
US nuclear power licensees will have to notify the regulator of cyber attacks within one, four or eight hours, depending on severity.
The CJEU has declared the EU–US Safe Harbor framework invalid, affecting transfers of personal data to the United States.
New consumer rights for digital content take effect, including liability for damage caused by defective digital content.
New Computer Misuse Act offences, including attacks causing serious damage, take effect.
The Bank of Israel issues Directive 361, requiring banks to appoint a cyber defence manager and adopt a board-approved strategy.
From today, suppliers bidding for certain UK central government contracts must hold Cyber Essentials certification.
The Wassenaar Arrangement agrees to add intrusion software and IP network surveillance systems to its dual-use export control list.
US covered entities and business associates must now comply with the HIPAA Omnibus Rule, which extends HIPAA obligations directly to business associates.
Colombia enacts Statutory Law 1581 of 2012, its general data protection law.
The Philippines enacts Republic Act 10173, the Data Privacy Act of 2012.
Ghana enacts the Data Protection Act 2012 (Act 843), establishing a Data Protection Commission.