US reauthorises FISA Section 702
20 Apr 2024
The US has reauthorised FISA Section 702 for two years, expanding the definition of electronic communication service providers.
Changes to laws and regulations affecting information security, privacy, AI and resilience.
The US has reauthorised FISA Section 702 for two years, expanding the definition of electronic communication service providers.
Chile’s Cybersecurity Framework Law 21.663 is published, creating a National Cybersecurity Agency and incident reporting duties.
The Reserve Bank of India’s Master Direction on IT governance, risk, controls and assurance practices is now in effect.
Washington’s consumer health data law takes effect, requiring consent for collecting and sharing health data and allowing private lawsuits.
TPR’s new General Code of Practice, including expectations on cyber controls, is now in force.
UK organisations can no longer rely on the pre-2021 EU Standard Contractual Clauses for restricted transfers.
Canada’s federally regulated financial institutions must now meet OSFI’s expectations for technology and cyber risk management.
FINMA Circular 2023/1 on operational risks and resilience now applies to Swiss banks and securities firms.
US-listed companies must now disclose material cybersecurity incidents on Form 8-K within four business days of determining materiality.
Major amendments to New York’s cybersecurity regulation for financial services strengthen governance, MFA and incident reporting.
Two major UK Acts receive Royal Assent: the Online Safety Act 2023 and the Economic Crime and Corporate Transparency Act 2023.
UK organisations can now transfer personal data to US organisations certified under the UK Extension to the EU–US Data Privacy Framework.