EU AI Act enters into force
1 Aug 2024
The world’s first comprehensive AI law enters into force, with obligations phasing in from February 2025.
Changes to laws and regulations affecting information security, privacy, AI and resilience.
The world’s first comprehensive AI law enters into force, with obligations phasing in from February 2025.
UN Regulations 155 and 156 become mandatory for all new vehicles registered in the EU, extending beyond new vehicle types.
IACS Unified Requirements E26 and E27 on cyber resilience now apply to ships contracted for construction from 1 July 2024.
The US has prohibited Kaspersky from selling antivirus and cybersecurity products in the US, with software updates banned from 29 September 2024.
Amendments to Türkiye’s KVKK introduce standard contracts for cross-border transfers of personal data.
France’s SREN law introduces cloud market rules and sovereign cloud requirements for sensitive public sector data.
The revised EU eIDAS Regulation introduces European Digital Identity Wallets and new trust services.
Colorado has passed the first comprehensive US state law on high-risk AI systems, targeting algorithmic discrimination in consequential decisions.
US non-bank financial institutions must now notify the FTC within 30 days of discovering a breach affecting 500 or more consumers.
The PSTI Act product security requirements now apply to consumer connectable (IoT) products sold in the UK.
Amendments to the Investigatory Powers Act 2016 introduce notification notices and update bulk data and communications data powers.
Brazil’s data protection authority adopts Resolution 15/2024, requiring notification of relevant security incidents within three working days.