Watching official sources. Last checked 44 minutes ago.
Critical High Medium Low Info
MPA Content Security
The TPN+ Service Provider How-To Guide has been updated to version 5.3.1. This guide provides service providers with instructions on implementing and maintaining TPN+ compliance requirements. …
LGPD
ANPD releases explanatory guide on ECA Digital application, clarifying which products and services are subject to the law and what responsibilities digital service providers must fulfill. …
Korea PIPA
Amendment No. 137 to the Personal Information Protection Commission's Regulatory Operations Rules (훈령 개인정보보호위원회 규제업무 운영규정) has been enforced effective October 22, 2026. Specific details of …
CSA CCM
The Cloud Security Alliance has released STAR for AI Level 2, a framework that allows organizations to extend their existing industry certifications and assurance frameworks into …
Hong Kong PDO
The Privacy Commissioner's Office (PCPD) has published guidance titled "Smart Glasses: Tips on Protecting Personal Data Privacy" to address privacy concerns related to smart glasses devices. …
LGPD
ANPD established corrective measures against Feira de Santana Municipality after inspection process confirmed exposure of medical data of 1,200 people. The breach involved sensitive information of …
POPIA
The Information Regulator has issued enforcement action against CJC and FNB, imposing fines for contraventions of POPIA. This demonstrates active enforcement of South Africa's data protection …
LGPD
The ANPD (National Data Protection Authority) opened a stakeholder consultation to develop a standard on the rights of personal data subjects. The consultation will remain open …
Singapore PDPA
The Personal Data Protection Commission (PDPC) in Singapore has accepted a voluntary undertaking from X Star Financial Services Pte Ltd as part of an enforcement decision. …
POPIA
The Information Regulator has issued an infringement notice to Central Johannesburg TVET College for violations of the Protection of Personal Information Act (POPIA). The college failed …
POPIA
The Information Regulator of South Africa has issued an enforcement notice to First National Bank regarding compliance violations. This enforcement action requires the bank to take …
UK GDPR
The Levelling-up and Regeneration Act 2023 introduces amendments to the Data Protection Act 2018, UK legislation that implements the UK GDPR framework. These changes may affect …
POPIA
The Information Regulator of South Africa has issued an infringement notice to First National Bank for alleged breaches of the Protection of Personal Information Act. The …
CCCS guidance
The Canadian Centre for Cyber Security has published new guidance addressing cyber threats to the aviation industry. This guidance provides aviation sector organizations with information on …
ENISA
ENISA published a Technical Advisory for Software Bill of Materials on 22 October 2026. The document provides practical guidance on SBOM adoption and is intended for …
ENISA
ENISA has published a Technical Advisory providing practical guidance on Software Bill of Materials (SBOM) adoption, primarily targeting micro-, small and medium enterprises (SMEs) and supply …
UA Cloud Services Law UA Critical Infrastructure Law
The bill proposes amendments to Ukrainian legislation regarding the provision of cloud services and data center services. The changes aim to develop digital infrastructure for the …
CCCS guidance
CCCS has published ITSM.00.125, new guidance on managing AI token consumption as part of operational resilience strategies. Organizations should implement controls to monitor, limit, and optimize …
CISA MITRE ATT&CK
CISA, FBI, U.S. Secret Service and international partners released a joint advisory warning of SafePay ransomware actors, identified as one of the most active ransomware groups …
Singapore PDPA
The Personal Data Protection Commission (PDPC) of Singapore has accepted a voluntary undertaking from DCS Card Centre Pte Ltd following an investigation into data protection compliance. …
Singapore PDPA
The Personal Data Protection Commission (PDPC) of Singapore issued an enforcement decision against KLP LLP for breaching protection and accountability obligations. This decision establishes precedent for …
Singapore PDPA
The PDPC has issued an enforcement decision finding that Courts Singapore Pte Ltd breached the protection obligation under the Personal Data Protection Act. This decision sets …
UA Electronic Communications Law
Changes are being introduced to Article 43 of the Law of Ukraine "On Electronic Communications" to strengthen legal mechanisms for countering offenses that threaten the functioning …
LGPD
The National Data Protection Authority (ANPD) has opened an administrative proceeding against Meta following reports of potential violations in account suspension and content removal practices. The …
EU AI Act ISO 42001
The European Commission has published EN 18286:2026 — Artificial intelligence - Quality management system for EU AI Act regulatory purposes — as the first harmonised standard …