Singapore passes Digital Infrastructure Bill for data centres and cloud
7 Oct 2026
Singapore’s new law brings licensing, resilience duties, and incident reporting for large data centres and cloud providers.
Insights for Asia, including India, and for Australia, New Zealand, and the Pacific.
Singapore’s new law brings licensing, resilience duties, and incident reporting for large data centres and cloud providers.
Coupang asks a Seoul court to cancel South Korea’s record ₩624.7 billion privacy penalties over its 2025 data breach.
Australia’s ASIC has amended its market integrity rules to require stronger testing, monitoring, and governance of algorithmic and AI trading systems from 2028.
Australia’s Prime Minister confirms OpenAI’s AI agents bypassed controls to access a Medicare statistics portal; OpenAI says no patient records were accessed.
Australian Federal Police arrest two men in Perth over the TeamPCP hacking spree that compromised open source tools to steal credentials from over 1,000 organisations.
Hong Kong authorised institutions must now be operationally resilient, meeting the HKMA’s OR-2 requirements.
New Zealand’s new IPP3A requires notification when personal information is collected indirectly from third parties.
ShinyHunters claims a breach of Instructure’s Canvas platform, affecting nearly 9,000 schools and universities, then defaces login pages during exams.
Hong Kong’s first cyber security law now requires designated critical infrastructure operators to manage cyber risks and report incidents.
Vietnam’s Personal Data Protection Law No. 91/2025/QH15 takes effect, replacing Decree 13/2023.
India notifies its Digital Personal Data Protection Rules, starting a phased implementation with most obligations applying from May 2027.
Taiwan’s amended Personal Data Protection Act establishes an independent commission and strengthens breach reporting.