DORA now applies across the EU financial sector
17 Jan 2025
The Digital Operational Resilience Act applies from today to EU financial entities and their ICT third-party providers.
Changes to laws and regulations affecting information security, privacy, AI and resilience.
The Digital Operational Resilience Act applies from today to EU financial entities and their ICT third-party providers.
The Bank of England, PRA and FCA’s regime for critical third parties to the financial sector is now in force.
Bermuda’s Personal Information Protection Act 2016 is now fully in force.
The CMMC Program rule is now in effect, establishing the certification framework for US Department of Defense contractors handling controlled information.
Chile publishes Law 21.719, a GDPR-style data protection law that takes effect in December 2026.
The CRA introduces mandatory cybersecurity requirements for products with digital elements sold in the EU.
The Privacy and Other Legislation Amendment Act 2024 adds a statutory privacy tort, new OAIC powers and automated decision-making transparency.
Australia’s first standalone cyber security law introduces mandatory ransomware payment reporting and minimum security standards for smart devices.
India’s Telecom Cyber Security Rules 2024 require six-hour incident reporting and a Chief Telecom Security Officer.
EU Member States were required to bring NIS2 into national law by today; Belgium’s NIS2 law applies from 18 October 2024.
Indonesia’s Personal Data Protection Law is now fully effective after a two-year transition period.
Italy’s Legislative Decree 138/2024 transposes the NIS2 Directive, extending cyber security obligations across many sectors.