Ecuador Clarified That Data Transfers Carry Two Layers of Compliance
Ecuador's Resolution SPDP-SPD-2025-0024-R clarifies how general privacy duties and transfer-specific rules operate together.
July 2025 Patch Tuesday: what Security and IT teams should prioritise
July 2025 Patch Tuesday covers 112 approved patch records and 226 unique CVEs across Microsoft, Adobe and SAP.
The UK Data (Use and Access) Act Changes Privacy Operations Without Replacing UK GDPR
The Data (Use and Access) Act 2025 did not sweep away the UK’s privacy framework. It changed how parts of that framework operate—and added complaint, research, digital-verification and smart-data provisions around it. The Act received Royal Assent on 19 June…
June 2025 Patch Tuesday: what Security and IT teams should prioritise
June 2025 Patch Tuesday covers 88 approved patch records and 349 unique CVEs across Microsoft, Adobe and SAP.
Malaysia’s Privacy Reform Puts DPOs and Breach Notices on the Clock
Malaysia’s 2024 privacy amendments introduced mandatory breach notification, Data Protection Officers for qualifying processing and direct security duties for processors through a three-stage commencement schedule. Malaysia’s Personal Data Protection (Amendment) Act 2024, Act A1727, received Royal Assent on 9 October…
May 2025 Patch Tuesday: what Security and IT teams should prioritise
May 2025 Patch Tuesday covers 99 approved patch records and 131 unique CVEs across Microsoft, Adobe and SAP.
Zambia Split Cybersecurity Regulation From Cybercrime. The Obligations Got Sharper.
Zambia's two 2025 cyber laws separate regulatory security duties from criminal offences while sharpening incident, audit, hosting and licensing obligations.
Luxembourg’s DSA Law Gives Platform Oversight Enforcement Teeth
Luxembourg’s national DSA law turned the Competition Authority’s coordinating role into an enforceable procedure, with information requests, inspections and penalties for intermediary-service providers established in the country. The EU Digital Services Act became generally applicable on 17 February 2024, and…
April 2025 Patch Tuesday: what Security and IT teams should prioritise
April 2025 Patch Tuesday covers 97 approved patch records and 193 unique CVEs across Microsoft, Adobe and SAP.
Peru’s New Privacy Regulation Brings a 48-Hour Breach Clock
Peru’s replacement data-protection regulation turns security incidents, advertising consent and privacy governance into defined operating processes. Peru’s new Regulation of Law No. 29.733 entered into force on 31 March 2025. Approved by Supreme Decree No. 016-2024-JUS, it replaces the earlier…
The European Health Data Space Is Not Just Another GDPR Article
The European Health Data Space creates infrastructure and governance for exchanging and reusing health data. It entered into force in March 2025, but most operational duties arrive through a long, staged implementation. Regulation (EU) 2025/327 entered into force on 26…
Mexico Rewrote Its Federal Privacy Law and Moved the Regulator
Mexico’s 2025 federal privacy law preserves many familiar obligations for private organisations while changing the institution that interprets and enforces them. Mexico published a new Federal Law on the Protection of Personal Data Held by Private Parties on 20 March…