Cybersecurity regulations

Act on the Prevention of Damage from Unauthorized Acts against Important Computers (Act No. 42 of 2025)

Cyber Security and Resilience (Network and Information Systems) Bill

Cybersecurity Maturity Model Certification (CMMC) Program (32 CFR Part 170) and DFARS acquisition rule (48 CFR Parts 204, 212, 217, 252)

Directive (EU) 2024/2853 on liability for defective products (new Product Liability Directive)

California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (Cal. Civ. Code 1798.100 et seq.) and CPPA regulations (Cal. Code Regs. tit. 11, 7000 et seq.)

Regulation (EU) 2025/38 laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cyber threats and incidents (Cyber Solidarity Act)

Required Rulemaking on Personal Financial Data Rights (12 CFR Part 1033)

Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS2 Directive)

Cybersecurity Law 2025 (Law No. 116/2025/QH15)

Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act)

Cyber Security Act 2024 (Cth) and Cyber Security (Ransomware Payment Reporting) Rules 2025

Security of Critical Infrastructure Act 2018

Critical Cyber Systems Protection Act (enacted by Bill C-8, An Act respecting cyber security)

Administrative Measures for National Cybersecurity Incident Reporting

Cybersecurity Law of the People's Republic of China (as amended by the NPC Standing Committee Decision of 28 October 2025)

Measures for the Security Assessment of Outbound Data Transfers

Data Security Law of the People's Republic of China

Measures for Network Data Security Risk Assessment

Regulations on Network Data Security Management (State Council Order No. 790)

Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) and proposed implementing rule (6 CFR Part 226)

Proposal for a Regulation amending Regulations (EU) 2016/679, 2018/1724, 2018/1725, 2023/2854 and Directives 2002/58/EC, 2022/2555 and 2022/2557 as regards the simplification of the digital legislative framework (Digital Omnibus)

Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons (28 CFR Part 202) - DOJ Data Security Program

Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (Digital Operational Resilience Act)

Regulation (EU) 2019/881 on ENISA and on information and communications technology cybersecurity certification (Cybersecurity Act)

FCC Data Breach Reporting Requirements for telecommunications carriers, interconnected VoIP and TRS providers (47 CFR 64.2011, 64.5111)

FTC Standards for Safeguarding Customer Information (Safeguards Rule), 16 CFR Part 314, under the Gramm-Leach-Bliley Act

HIPAA Privacy, Security and Breach Notification Rules (45 CFR Parts 160 and 164)

HIPAA Security Rule To Strengthen the Cybersecurity of Electronic Protected Health Information (proposed rule)

Protection of Critical Infrastructures (Computer Systems) Ordinance (Cap. 653)

Directions under section 70B(6) of the Information Technology Act, 2000 relating to information security practices, procedure, prevention, response and reporting of cyber incidents for Safe and Trusted Internet

Computer Misuse and Cybercrimes Act, 2018

Cyber Security Act 2024 (Act 854)

New York DFS Cybersecurity Requirements for Financial Services Companies (23 NYCRR Part 500), Second Amendment

Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024

Prevention of Electronic Crimes Act, 2016 (as amended by the Prevention of Electronic Crimes (Amendment) Act, 2025)

SEC Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure (Release No. 33-11216)

Regulation S-P: Privacy of Consumer Financial Information and Safeguarding Customer Information (2024 amendments)

Cybersecurity Act 2018

Cybercrimes Act 19 of 2020

Cybersecurity Act B.E. 2562 (2019)

Investigatory Powers (Amendment) Act 2024

Product Security and Telecommunications Infrastructure Act 2022 and the Product Security Regulations 2023

Telecommunications (Security) Act 2021 and the Electronic Communications (Security Measures) Regulations 2022

Law on Data (Law No. 60/2024/QH15)