Japan’s FSA issues financial sector cyber security guidelines
4 Oct 2024
Japan’s Financial Services Agency publishes guidelines setting cyber security expectations for financial institutions.
Changes to laws and regulations affecting information security, privacy, AI and resilience.
Japan’s Financial Services Agency publishes guidelines setting cyber security expectations for financial institutions.
The FDA has finalised guidance explaining how its electronic records and signatures rules apply to clinical investigations, including cloud services.
Organisations accessing US criminal justice information must now use multi-factor authentication, as the CJIS Security Policy requirement becomes auditable.
Switzerland adds certified US organisations to its list of adequate countries, allowing transfers under the Swiss–US Data Privacy Framework.
Saudi Arabia’s Personal Data Protection Law is now fully enforceable after a one-year grace period.
The first legally binding international AI treaty opens for signature, with the UK, EU and US among the first signatories.
Australia’s amended Defence Trade Controls Act introduces AUKUS licence exemptions and new controls on supplies and services.
The Dutch data protection authority fines Uber €290 million for transferring European drivers’ data to the US without adequate safeguards.
Malaysia’s Cyber Security Act 2024 takes effect, imposing duties on National Critical Information Infrastructure entities.
India’s securities regulator SEBI issues CSCRF, standardising cyber security controls across regulated entities.
Korea’s Financial Services Commission announces a phased roadmap easing network separation rules to allow cloud, SaaS and generative AI use.
Illinois has amended its biometric privacy law so that repeated collection of the same biometric data counts as a single violation.