Watching official sources. Last checked 11 minutes ago.
Critical High Medium Low Info
GDPR
The Spanish Data Protection Authority (AEPD) imposed a €100,000 fine on Securitas Direct for violating Article 12 GDPR by directing data subjects to a chargeable 902 …
GDPR
The Spanish Data Protection Authority (AEPD) imposed a EUR 100,000 fine on Securitas Direct for directing data subjects to a chargeable 902 telephone number to exercise …
EHDS
Commission Implementing Regulation (EU) 2026/2099 has been published on 21 September 2026, establishing an interoperable cross-border identification and authentication mechanism for natural persons, health professionals and …
GovRAMP
GovRAMP has released a quick-reference guide outlining phishing-resistant multi-factor authentication requirements for systems classified as Moderate and High impact. The guide specifies applicable authentication assurance levels …
GovRAMP NIST SP 800-53
GovRAMP has released comprehensive guidance to help Service Providers understand and implement phishing-resistant MFA requirements under GovRAMP Rev. 5. The guidance clarifies which authentication methods meet …
NIST SP 800-82
NIST has released the Initial Public Draft of SP 800-82 Revision 4 for public comment and feedback. This update to the Guide to Operational Technology (OT) …
UK GDPR
The Data (Use and Access) Act 2025 modifies the UK GDPR regulatory framework with effect from 21 September 2026. This legislation introduces new requirements and mechanisms …
UK GDPR
The Data (Use and Access) Act 2025 modifies certain provisions of the Data Protection Act 2018. Organizations must review how these legislative changes impact their existing …
GDPR
The European Data Protection Board has adopted guidelines establishing a harmonised five-step methodology for Data Protection Authorities to use when deciding whether to impose administrative fines …
EHDS
The Commission Implementing Regulation (EU) 2026/2099 establishes technical requirements for an interoperable identification and authentication mechanism enabling cross-border health data exchange under the European Health Data …
DORA
The EBA has published its final Guidelines on the management of third-party risk, creating a more proportionate and consistent regulatory framework that aligns with DORA requirements. …
NIST CSF
NIST has published a draft CSF 2.0 Community Profile for Federal Agency Open Radio Access Network (O-RAN) Deployment and opened it for public comment. The profile …
EHDS
Commission Implementing Regulation (EU) 2026/2083 on MyHealth@EU was adopted on 18 September 2026. The regulation enters into force on 11 October 2026 and establishes implementing rules …
EHDS
The European Commission has adopted Implementing Regulation (EU) 2026/2098, laying down the minimum metadata elements and their characteristics that health data holders must provide when describing …
LGPD
ANPD (Autoridade Nacional de Proteção de Dados) has opened public consultation for updates to its Supervisory Regulation and is accepting registrations for a virtual hearing scheduled …
LGPD
ANPD (Brazil's personal data protection authority) issued a fine of R$ 153.7 million to TikTok for violations of LGPD requirements on protection of minors' data. ByteDance, …
NIST SP 800-171
NIST has published Revision 3 of Special Publication 800-171A, which provides guidance for assessing security requirements for Controlled Unclassified Information (CUI) and includes a dedicated small …
Singapore PDPA
The PDPC has published a voluntary undertaking from Grace Orchard School following an enforcement investigation. This undertaking sets out commitments to address any identified breaches of …
Singapore PDPA
The Personal Data Protection Commission (PDPC) of Singapore has accepted a voluntary undertaking from Bee Cheng Hiang Marketing Pte Ltd following a data protection investigation. This …
Singapore PDPA
The Personal Data Protection Commission (PDPC) of Singapore has accepted a voluntary undertaking from Delugs Pte Ltd in connection with a data protection matter. This undertaking …
Singapore PDPA
The Personal Data Protection Commission (PDPC) of Singapore has accepted a voluntary undertaking from Prosegur Singapore Pte Ltd following a data protection investigation. The undertaking commits …
CISA
CISA released new guidance titled "Using Cyber Decoys to Strengthen Detection and Response" to help critical infrastructure owners and operators implement cyber decoy systems that detect …
CCCS guidance
The Canadian Centre for Cyber Security has published ITSAP.00.500, a new guidance document on best practices for setting up a Security Operations Centre (SOC). As cyber …
PCI DSS
The PCI Security Standards Council has published a new information supplement addressing security considerations for artificial intelligence systems. The document covers both the security aspects of …
NBU Regulation 95
The National Bank of Ukraine has made changes to the decision of the Board of the National Bank of Ukraine dated January 3, 2017 No. 2-рш. …