In the July 2024 King’s Speech, the UK government announced its intention to introduce a Cyber Security and Resilience Bill (the “Bill”) to improve the UK’s cyber defenses and protect essential public services. The announcement comes as companies and … [Read more] about Forthcoming UK Cyber Security and Resilience Bill to Boost the UK’s Cyber Defenses
On October 15, 2024, the Cyber Security Agency of Singapore (“CSA”) published Guidelines on Securing AI Systems (the “Guidelines”) alongside a Companion Guide for Securing AI Systems (the “Companion Guide”), which is intended to serve as support for … [Read more] about Singapore Cybersecurity Agency Publishes Guidelines on Securing AI Systems
On October 16, 2024, the New York Department of Financial Services (“NYDFS”) issued an industry letter covering Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks (the "Industry Letter”). The Industry … [Read more] about NYDFS Issues Guidance on Artificial Intelligence-related Cybersecurity Risks
EU Member States had until today, October 17, 2024, to transpose the Network and Information Security (NIS) 2 Directive into their national laws. As Directives are not directly applicable in EU Member States, the EU legislator required all 27 Member … [Read more] about Green Light for the Enforcement of NIS 2 in Limited EU Countries Only
On October 7, 2024, the European Data Protection Board (“EDPB”) adopted an opinion on obligations following from the use of processors and sub-processors (the “Opinion”). The EDPB is the body that seeks to ensure harmonised application of the EU GDPR … [Read more] about EDPB Adopts Opinion on the Use of Processors and Sub-processors