South Korea’s AI Basic Act entered into force on 22 January 2026, combining industrial promotion with obligations for high-impact and generative AI. Europe is not the only jurisdiction turning AI principles into law. South Korea’s Framework Act on the Development…
Somalia's 2026 regulations turn the 2023 Data Protection Act into a more operational regime for registration, supervision and breach response.
The EU Data Act, effective from 12 September 2025, grants users rights to access and share data from connected products, aiming to enhance data portability and interoperability. It imposes new requirements on cloud service providers to facilitate easier switching and data extraction, fundamentally altering infrastructure and user access dynamics.
Uruguay's Decree 276/025 creates governed test environments and data spaces for innovative projects, including AI and data uses.
Mexico's mobile-line identification rules require operators to link active numbers to verified people or organisations before the June 2026 deadline.
India notified the Digital Personal Data Protection Rules and the Act’s commencement schedule in November 2025. The result is not a single start date but a sequence extending into 2027. India enacted the Digital Personal Data Protection Act in August…
Singapore’s amended Cybersecurity Act expands oversight beyond traditional critical infrastructure and recognises that essential services may depend on virtual systems, cloud providers and data centres. Key provisions of Singapore’s Cybersecurity (Amendment) Act commenced on 31 October 2025. The original Act…
Egypt's long-awaited executive regulations have turned its 2020 privacy statute into an operational licensing, transfer and breach-response regime.
Brazil's ECA Digital requires digital services likely to be used by children to build safety, age assurance and parental controls into products.
Peru's Decree 115-2025-PCM classifies AI by risk and adds rules for transparency, human oversight, privacy and security.
