Security · Infrastructure · Automation · AI
Security · Infrastructure · Automation · AI
The Netherlands will implement the Cyberbeveiligingswet (Cbw) on 15 August 2026, enforcing the NIS2 Directive to enhance cybersecurity for over 8,000 organisations across various sectors. Key responsibilities include registration, risk analysis, incident reporting, and management accountability, aimed at strengthening overall cyber resilience and integrating security measures into governance.
Brazil’s international-transfer regulation gives the LGPD its own contractual machinery. Global companies cannot assume that EU clauses or a general data-processing agreement automatically do the job. On 23 August 2024, Brazil’s National Data Protection Authority issued Resolution CD/ANPD No. 19.…
Malaysia’s Cyber Security Act 2024 turns critical-infrastructure security into a recurring governance process—and gives designated entities only six hours to submit the first prescribed details of a known cyber incident. Malaysia’s Cyber Security Act 2024, Act 854, was gazetted on…
Italy’s Law 90/2024 combines operational cybersecurity duties with stronger cybercrime provisions. For covered public organisations, the message is immediate: detect quickly, report in stages and put accountable security leadership in place. Law No. 90 of 28 June 2024 was published…
France’s SREN law treats cloud exit as a market rule: switching fees, portability, interoperability and contract transparency are no longer matters that customers can safely postpone until migration day. Law 2024-449 on securing and regulating the digital space was published…
The European Digital Identity Framework is not simply a government login application. It creates a cross-border trust architecture for wallets, credentials and the organisations that request them. Regulation (EU) 2024/1183—the updated eIDAS framework—applied from 20 May 2024. It requires Member…
Brazil’s data-protection authority has replaced an open-ended breach-notification standard with a defined three-business-day clock and a detailed test for deciding which incidents must be reported. Brazil’s Lei Geral de Proteção de Dados, or LGPD, has always required controllers to communicate…
From 29 April 2024, consumer connectable products placed on the UK market became subject to three deceptively simple security requirements. The difficult part is proving that the whole supply chain meets them. The United Kingdom’s Product Security and Telecommunications Infrastructure…
Chile’s Cybersecurity Framework Law creates a national regulator, defines essential services and requires an early incident alert within three hours. That first message is designed for speed, not forensic certainty. Chile published Law No. 21.663, the Cybersecurity Framework Law, on…
The Digital Services Act, applicable from 17 February 2024, regulates intermediary services within the EU, imposing varying obligations based on service type and size. It mandates effective notice, classification, and moderation workflows while ensuring transparency in automated decision-making. Large platforms are held to higher standards, requiring systemic risk assessments and accountability measures.