Changes to laws and regulations affecting information security, privacy, AI and resilience.
The Nigeria Data Protection Commission’s General Application and Implementation Directive (GAID) 2025 takes effect, adding detailed compliance requirements under the NDPA.
The EU Data Act now applies, covering access to connected-product data and cloud switching obligations.
The new corporate offence under the Economic Crime and Corporate Transparency Act 2023 applies to large organisations from today.
Israel’s Amendment 13 to the Protection of Privacy Law expands enforcement powers, fines and DPO requirements.
Obligations for providers of general-purpose AI models under the EU AI Act apply from today.
New US Coast Guard rules require US-flagged vessels and regulated facilities to appoint cybersecurity officers and report cyber incidents.
Australia’s CPS 230 now requires APRA-regulated entities to manage operational risk, critical operations and material service providers.
New York’s Child Data Protection Act now limits how online services collect and process the personal data of users under 18.
The DUAA 2025 amends the UK GDPR, DPA 2018 and PECR, with changes commencing in stages.
The Global Cross-Border Privacy Rules Forum launches its Global CBPR and PRP certifications, a new mechanism for international data transfers.
Joint Standard 2 of 2024 now applies to South African financial institutions, setting principle-based cybersecurity and cyber resilience requirements.
Malaysia’s mandatory DPO appointment and data breach notification requirements under the amended PDPA take effect.