Singapore’s Cybersecurity Act amendments take effect
31 Oct 2025
Singapore’s amended Cybersecurity Act extends oversight to virtual and third-party-owned Critical Information Infrastructure.
Insights for Asia, including India, and for Australia, New Zealand, and the Pacific.
Singapore’s amended Cybersecurity Act extends oversight to virtual and third-party-owned Critical Information Infrastructure.
Australia’s CPS 230 now requires APRA-regulated entities to manage operational risk, critical operations and material service providers.
Malaysia’s mandatory DPO appointment and data breach notification requirements under the amended PDPA take effect.
Japan enacts its Active Cyber Defense Act, requiring critical infrastructure operators to report incidents and share information.
Ireland’s Data Protection Commission fines TikTok EUR 530 million over transfers of EEA users’ data to China and a lack of transparency.
Chinese start-up DeepSeek’s R1 reasoning model tops app download charts and triggers a record one-day fall in Nvidia’s market value.
The Privacy and Other Legislation Amendment Act 2024 adds a statutory privacy tort, new OAIC powers and automated decision-making transparency.
Australia’s first standalone cyber security law introduces mandatory ransomware payment reporting and minimum security standards for smart devices.
India’s Telecom Cyber Security Rules 2024 require six-hour incident reporting and a Chief Telecom Security Officer.
Australia’s Protective Security Policy Framework Release 2024 restructures government security requirements and adds new risk and technology domains.
Indonesia’s Personal Data Protection Law is now fully effective after a two-year transition period.
Japan’s Financial Services Agency publishes guidelines setting cyber security expectations for financial institutions.