South Korea’s AI Basic Act Is Now Live

South Korea’s AI Basic Act entered into force on 22 January 2026, combining industrial promotion with obligations for high-impact and generative AI. Europe is not the only jurisdiction turning AI principles into law. South Korea’s Framework Act on the Development…

The EU Data Act Is a Cloud-Exit Law as Much as an IoT Law

The EU Data Act, effective from 12 September 2025, grants users rights to access and share data from connected products, aiming to enhance data portability and interoperability. It imposes new requirements on cloud service providers to facilitate easier switching and data extraction, fundamentally altering infrastructure and user access dynamics.

Singapore Now Regulates the Cloud Behind Critical Services

Singapore’s amended Cybersecurity Act expands oversight beyond traditional critical infrastructure and recognises that essential services may depend on virtual systems, cloud providers and data centres. Key provisions of Singapore’s Cybersecurity (Amendment) Act commenced on 31 October 2025. The original Act…

The EU AI Act After 2 August 2026: What Applies Now and What Comes Next

The EU AI Act's phased application reached a significant milestone on 2 August 2026, with new transparency obligations enforced. While high-risk rules have extended deadlines, organisations must remain proactive in governance, ensuring AI literacy and accountability. Compliance should not hinder innovation, as effective inventory management aids both.

Malaysia’s Privacy Reform Puts DPOs and Breach Notices on the Clock

Malaysia’s 2024 privacy amendments introduced mandatory breach notification, Data Protection Officers for qualifying processing and direct security duties for processors through a three-stage commencement schedule. Malaysia’s Personal Data Protection (Amendment) Act 2024, Act A1727, received Royal Assent on 9 October…

Luxembourg’s DSA Law Gives Platform Oversight Enforcement Teeth

Luxembourg’s national DSA law turned the Competition Authority’s coordinating role into an enforceable procedure, with information requests, inspections and penalties for intermediary-service providers established in the country. The EU Digital Services Act became generally applicable on 17 February 2024, and…