Brazil’s international-transfer regulation gives the LGPD its own contractual machinery. Global companies cannot assume that EU clauses or a general data-processing agreement automatically do the job. On 23 August 2024, Brazil’s National Data Protection Authority issued Resolution CD/ANPD No. 19.…
Malaysia’s Cyber Security Act 2024 turns critical-infrastructure security into a recurring governance process—and gives designated entities only six hours to submit the first prescribed details of a known cyber incident. Malaysia’s Cyber Security Act 2024, Act 854, was gazetted on…
Colombia's Circular 002 applies privacy by design, accountability and impact assessment to personal-data processing in AI systems.
Ethiopia's Personal Data Protection Proclamation combines familiar privacy duties with local-storage rules, transfer controls and a 72-hour breach clock.
The African Digital Compact and Continental AI Strategy are not binding laws, but they set a common direction for digital and AI governance.
Italy’s Law 90/2024 combines operational cybersecurity duties with stronger cybercrime provisions. For covered public organisations, the message is immediate: detect quickly, report in stages and put accountable security leadership in place. Law No. 90 of 28 June 2024 was published…
Brazil's Resolution CD/ANPD No. 18 turns the LGPD's data protection officer role into a more concrete governance function.
South Africa's final National Data and Cloud Policy promotes cloud-first government, but its security, sovereignty and implementation choices deserve equal attention.
France’s SREN law treats cloud exit as a market rule: switching fees, portability, interoperability and contract transparency are no longer matters that customers can safely postpone until migration day. Law 2024-449 on securing and regulating the digital space was published…
The European Digital Identity Framework is not simply a government login application. It creates a cross-border trust architecture for wallets, credentials and the organisations that request them. Regulation (EU) 2024/1183—the updated eIDAS framework—applied from 20 May 2024. It requires Member…
