Saudi Arabia’s Personal Data Protection Law took effect in September 2023. Its general one-year grace period ended on 14 September 2024, moving compliance from preparation to operation. Saudi Arabia’s PDPL establishes rules for processing personal data and is supported by…
Nicaragua's Law 1219 expands the Special Cybercrime Law's territorial reach, participant liability and online information offences.
The Netherlands will implement the Cyberbeveiligingswet (Cbw) on 15 August 2026, enforcing the NIS2 Directive to enhance cybersecurity for over 8,000 organisations across various sectors. Key responsibilities include registration, risk analysis, incident reporting, and management accountability, aimed at strengthening overall cyber resilience and integrating security measures into governance.
Brazil’s international-transfer regulation gives the LGPD its own contractual machinery. Global companies cannot assume that EU clauses or a general data-processing agreement automatically do the job. On 23 August 2024, Brazil’s National Data Protection Authority issued Resolution CD/ANPD No. 19.…
Malaysia’s Cyber Security Act 2024 turns critical-infrastructure security into a recurring governance process—and gives designated entities only six hours to submit the first prescribed details of a known cyber incident. Malaysia’s Cyber Security Act 2024, Act 854, was gazetted on…
Colombia's Circular 002 applies privacy by design, accountability and impact assessment to personal-data processing in AI systems.
Ethiopia's Personal Data Protection Proclamation combines familiar privacy duties with local-storage rules, transfer controls and a 72-hour breach clock.
The African Digital Compact and Continental AI Strategy are not binding laws, but they set a common direction for digital and AI governance.
Italy’s Law 90/2024 combines operational cybersecurity duties with stronger cybercrime provisions. For covered public organisations, the message is immediate: detect quickly, report in stages and put accountable security leadership in place. Law No. 90 of 28 June 2024 was published…
Brazil's Resolution CD/ANPD No. 18 turns the LGPD's data protection officer role into a more concrete governance function.
