Nicaragua Expanded Its Cybercrime Law Beyond Technical Attacks
Nicaragua's Law 1219 expands the Special Cybercrime Law's territorial reach, participant liability and online information offences.
Legislation
When NIS2 Becomes Dutch Law: What Changes on 15 August 2026
The Netherlands will implement the Cyberbeveiligingswet (Cbw) on 15 August 2026, enforcing the NIS2 Directive to enhance cybersecurity for over 8,000 organisations across various sectors. Key responsibilities include registration, risk analysis, incident reporting, and management accountability, aimed at strengthening overall cyber resilience and integrating security measures into governance.
Brazil’s Standard Contractual Clauses Change the Paperwork Behind Global Data Flows
Brazil’s international-transfer regulation gives the LGPD its own contractual machinery. Global companies cannot assume that EU clauses or a general data-processing agreement automatically do the job. On 23 August 2024, Brazil’s National Data Protection Authority issued Resolution CD/ANPD No. 19.…
Malaysia’s Cyber Security Act Starts a Six-Hour NCII Incident Clock
Malaysia’s Cyber Security Act 2024 turns critical-infrastructure security into a recurring governance process—and gives designated entities only six hours to submit the first prescribed details of a known cyber incident. Malaysia’s Cyber Security Act 2024, Act 854, was gazetted on…
Colombia Put Existing Privacy Law Inside the AI Lifecycle
Colombia's Circular 002 applies privacy by design, accountability and impact assessment to personal-data processing in AI systems.
Ethiopia’s Privacy Law Is Also a Data-Sovereignty Law
Ethiopia's Personal Data Protection Proclamation combines familiar privacy duties with local-storage rules, transfer controls and a 72-hour breach clock.
Africa’s Digital Compact Is Not a Law. It Still Sets the Direction of Regulation.
The African Digital Compact and Continental AI Strategy are not binding laws, but they set a common direction for digital and AI governance.
Italy’s Law 90/2024 Connects Public-Sector Deadlines to Cybercrime Enforcement
Italy’s Law 90/2024 combines operational cybersecurity duties with stronger cybercrime provisions. For covered public organisations, the message is immediate: detect quickly, report in stages and put accountable security leadership in place. Law No. 90 of 28 June 2024 was published…
Brazil Defined the DPO Role. Independence Now Has to Be Operational.
Brazil's Resolution CD/ANPD No. 18 turns the LGPD's data protection officer role into a more concrete governance function.
South Africa’s Cloud-First Policy Comes With a Data-Sovereignty Warning
South Africa's final National Data and Cloud Policy promotes cloud-first government, but its security, sovereignty and implementation choices deserve equal attention.