Latest changes

FedRAMP has opened 2 new Requests for Comment. This allows stakeholders to provide feedback on proposed changes or initiatives. Organizations should review these requests if they …

Draft consultation Source

FedRAMP has opened 2 new Requests for Comment. This provides an opportunity for stakeholders to review and provide feedback on proposed changes or policies. Participants should …

Draft consultation Source

The European Commission proposes a new Public Procurement Act that consolidates the three 2014 procurement directives (2014/23/EU, 2014/24/EU, and 2014/25/EU) into a single regulation and amends …

Draft consultation Source

The Employment Rights Act 2025 introduces changes to how the Data Protection Act 2018 applies in employment contexts. These amendments clarify worker rights under UK GDPR …

Amendment Action required, date not stated Source

IACS has published Unified Requirement E5 revision 1, updating maritime technical standards for classification societies and the shipping industry. This revision introduces changes to previously established …

New version Action required, date not stated Source

The Australian Information Security Manual (ISM) September 2026 edition introduces changes to intrusion handling controls and establishes new requirements for service provider access. Organisations must now …

New version Action required, date not stated Source

The Data Protection Commission has issued a final decision against Ireland's Health Service Executive (HSE) following an inquiry into two unauthorized access incidents at psychiatric hospital …

Other Enforcement Source

The Data Protection Commission has issued a final decision against the Health Service Executive (HSE) following an inquiry into two unauthorised access incidents to paper medical …

Other Enforcement Source

The Information Regulator has released specifications for the POPIA Rules of Procedure, establishing detailed procedural guidelines for data protection compliance and enforcement in South Africa. These …

New document Source

The Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong has arrested a 29-year-old male on suspicion of doxxing a competitor. This action …

Other Enforcement Source

개인정보보호위원회가 개인정보 처리 방법에 관한 고시 제2026-10호를 시행했다. 이 고시는 개인정보 처리자들이 준수해야 할 처리 방법 및 절차에 대한 규정을 정하고 있다. 개인정보를 처리하는 모든 조직은 …

New document Source

Hong Kong's Privacy Commissioner's Office has followed up on three cases where foreign domestic helpers misused their employers' personal data for unauthorized loan applications, and simultaneously …

Guidance Source

SPARTA has published version 4.0.1 on 24 August 2026. As this is a versioned update to a specialist framework document, only the version number and publication …

New version Effective 2026-08-24 Action required Source

SPARTA has released version 4.0 of its aerospace supplier quality standard. The update introduces changes to supplier quality management and compliance requirements for aerospace organizations. Organizations …

New version Effective 2026-08-06 Action required Source

The Children's Wellbeing and Schools Act 2026 introduces amendments affecting the application of UK GDPR (Regulation (EU) 2016/679) in the United Kingdom. These changes modify how …

Amendment Action required, date not stated Source

The French Data Protection Authority (CNIL) fined MOBIUS SOLUTIONS LTD €1 million on 11 December 2025 following a data breach notification from DEEZER in November 2022 …

Other Enforcement Source

The CNIL fined NEXPUBLICA FRANCE €1.7 million for breaching Article 32 of the GDPR by failing to implement adequate technical and organizational security measures for its …

Other Enforcement Source

The CNIL issued combined fines of €42 million against FREE MOBILE and FREE following a January 2026 decision regarding an October 2024 data breach that exposed …

Other Enforcement Source

France Travail, a French public employment service, was fined €5 million by CNIL for inadequate technical and organisational security measures that failed to prevent a 2024 …

Other Enforcement Source

CISA has published the Logging Reference Architecture, an outcome-driven guide developed with OMB and the CISO Council to help federal civilian executive branch (FCEB) agencies establish …

New document Deadline 2026-11-18 Action required Source

The Privacy Commissioner's Office has published its investigation findings regarding a data breach affecting the Canvas online learning management platform. The report documents the scope and …

Other Enforcement Source

ANPD (Brazil's data protection authority) has published the testing methodology for its Regulatory Sandbox pilot project in artificial intelligence and data protection. The methodology outlines different …

Guidance Source

Brazil's data protection authority (ANPD) has issued a preventive order requiring Discord to suspend its live streaming functionality in the country, citing identified failures in structural …

Other Enforcement Source

Peraturan Perlindungan Data Peribadi 2013 telah dipublisasikan oleh PDP Malaysia. Peraturan ini menetapkan rangka kerja komprehensif untuk perlindungan data peribadi di Malaysia. Organisasi yang mengendalikan data …

Other Source

The UK National Cyber Security Centre (NCSC) has published official scheme documents for the Cyber Adversary Simulation (CyAS) program. These documents establish NCSC's expectations for how …

New document Source