News & insights
The latest news, insights, and updates on information & cyber security, privacy, and AI governance from Taylor Baines.
Get the latest threats, vulnerabilities, and legal, standards, and AI updates in your inbox every Monday.
Get our weekly insights by email
Israel’s Privacy Law Amendment 13 takes effect
Israel’s Amendment 13 to the Protection of Privacy Law expands enforcement powers, fines and DPO requirements.
OpenAI launches GPT-5
OpenAI releases GPT-5 to ChatGPT users, describing it as its most capable model and bringing reasoning to its default experience.
NCSC releases Cyber Assessment Framework 4.0
CAF v4.0 responds to the growing threat, with new emphasis on threat understanding, secure software and AI-related risks.
EU AI Act: general-purpose AI obligations apply
Obligations for providers of general-purpose AI models under the EU AI Act apply from today.
SharePoint zero-day exploited in wave of attacks on organisations
Attackers exploit a zero-day flaw in on-premises Microsoft SharePoint servers, known as ToolShell, with hundreds of organisations reported compromised.
US Coast Guard maritime cybersecurity rule takes effect
New US Coast Guard rules require US-flagged vessels and regulated facilities to appoint cybersecurity officers and report cyber incidents.
APRA’s CPS 230 operational risk standard takes effect
Australia’s CPS 230 now requires APRA-regulated entities to manage operational risk, critical operations and material service providers.
New York’s Child Data Protection Act takes effect
New York’s Child Data Protection Act now limits how online services collect and process the personal data of users under 18.
Data (Use and Access) Act 2025 receives Royal Assent
The DUAA 2025 amends the UK GDPR, DPA 2018 and PECR, with changes commencing in stages.
Global CBPR and PRP certifications go live
The Global Cross-Border Privacy Rules Forum launches its Global CBPR and PRP certifications, a new mechanism for international data transfers.
Celebrating 15 years of Taylor Baines
Taylor Baines Ltd celebrates 15 years of independent, pragmatic information security advice.
Malaysia’s DPO and breach notification duties take effect
Malaysia’s mandatory DPO appointment and data breach notification requirements under the amended PDPA take effect.