News & insights
The latest news, insights, and updates on information & cyber security, privacy, and AI governance from Taylor Baines.
Get the latest threats, vulnerabilities, and legal, standards, and AI updates in your inbox every Monday.
Get our weekly insights by email
Quebec’s Law 25 main privacy obligations take effect
Most of Quebec’s Law 25 is now in force, including privacy impact assessments, privacy by default and significant new penalties.
Major amendments to South Korea’s PIPA take effect
Sweeping amendments to South Korea’s Personal Information Protection Act take effect, unifying rules and strengthening sanctions.
Cyber attack disrupts MGM Resorts casinos and hotels
A cyber attack on MGM Resorts shut down systems across its US casinos and hotels, costing the company around $100m.
Switzerland’s revised Data Protection Act comes into force
Switzerland’s revised Federal Act on Data Protection takes effect, bringing Swiss law closer to the GDPR with some notable differences.
India’s Digital Personal Data Protection Act receives assent
India’s first comprehensive data protection law receives Presidential assent, setting consent and security duties with extraterritorial reach.
Electoral Commission reveals hackers accessed UK electoral registers
The UK Electoral Commission disclosed that hostile actors had access to its systems for over a year, including registers with data on around 40 million voters.
National Security Act 2023 receives Royal Assent
The National Security Act 2023 replaces the Official Secrets Acts 1911–1939 and creates new offences relating to foreign powers, including sabotage of electronic systems.
EU–US Data Privacy Framework adopted
The European Commission has adopted an adequacy decision for the EU–US Data Privacy Framework, three years after Schrems II.
New York City begins enforcing AI hiring tool law
New York City now enforces Local Law 144, requiring bias audits and candidate notices for automated employment decision tools.
Nigeria Data Protection Act 2023 signed into law
Nigeria’s President signs the Nigeria Data Protection Act 2023, establishing the Nigeria Data Protection Commission and a comprehensive, extraterritorial data protection regime.
Updated FTC Safeguards Rule requirements take effect in the US
The main new requirements of the amended FTC Safeguards Rule now apply to US non-bank financial institutions, including MFA and encryption.
African Union’s Malabo Convention comes into force
The African Union Convention on Cyber Security and Personal Data Protection enters into force, nine years after adoption.