Regulatory history
New regulations and status / date changes across the tracker.
Today
- new draftPDPL Implementation Plan DecisionVietnam
- new draftTH PDPC Security Measures Standard for SME-EXEMPT Controllers (s.4(3) class exemption) 2566Thailand
- new draftTH SME RoPA Exemption (PROCESSORS, s.40) 2567 — NEW INSTRUMENTThailand
- new draftTH SME RoPA Exemption (Controllers, s.39) 2567 — supersedes 2565Thailand
- new draftTH PDPC Administrative-Fines Procedure 2568 — supersedes 2565 + 2567 (No 2)Thailand
- new draftTH Research / Statistics / Archival Data Notification (s.24(1) + s.26(5)(g)) 2566Thailand
- new draftPDPA Enforcement Rules (TW)Taiwan
- new draftCCoP 2.0Singapore
- new draftMAS FSM-N05 / N06 / N13 / N25Singapore
- new draftNPC Circular 16-03Philippines
- new draftNPC Advisory 2017-01Philippines
- new draftPrivacy Amendment Act 2025 (NZ)New Zealand
- new draftPrivacy Regulations 2020 (NZ)New Zealand
- new draftPrivacy Act (Schedule 2) Order 2022 (NZ)New Zealand
- new draftPDPA (Amendment) Act 2024 — Act A1727Malaysia
- new draftJPDP DBN + DPO Guidelines 2025Malaysia
- new draftChina TMT: Bi-monthly Update – May and June 2025 IssueChina
- new draftChina Cybersecurity and Data Protection: Monthly Update – March 2025China
- new draftChina TMT: Bi-monthly Update - March and April 2025 IssueChina
- new draftChina Cybersecurity and Data Protection: Monthly Update - February 2025China
- new draftChina TMT: Bi-monthly Update - January and February 2025 IssueChina
- new draftChina Cybersecurity and Data Protection: Monthly Update - January 2025China
- new draftChina TMT: Bi-monthly Update - November and December 2024 IssueChina
- new draftChina Cybersecurity and Data Protection Monthly Update - November 2024China
- new draftChina TMT: Bi-monthly Update - September & October 2024 IssueChina
- new draftRegulating AI Under UncertaintyGlobal
- new draftSpeech by Executive Vice-President Fitto at the 171st plenary session of the European Committee of the RegionsEU
- new draftSECURE Data ActUS
- new draftEuropean Commission Daily News 07/05/2026EU
- new draftTaking stock: The Impact of the India AI Impact Summit 2026India
- new draftSpeech by Commissioner McGrath at the High-Level Event on Combatting Strategic Lawsuits Against Public Participation (SLAPPs)EU
- new draftCSBS 2025/2026UK
- new draftApproval decision of the Administrative Agreement between Abschlussprüferaufsichtsstelle and the US Public Company Accounting Oversight Board (PCAOB) concerning the transfer of personal dataEU
- new draftEDPB Opinion 10/2026EU
- new draftCorrespondence: AI cyber threats: open letter to business leadersUK
- new draftMarking 10 years of the GDPR: the evolution of the European data protection landscapeEU
- new draftCyber Resilience PledgeUK
- new draftUK backs company building breakthrough AI that can discover new knowledgeUK
- new draftCoordinated supervisory action on minors under 15 years old processed by Europol as suspects or potential criminalsEU
- new draftEDPB Opinion 12/2026EU
- new draftGDS Responsible AI Advisory Panel: meeting summariesUK
- new draftOpinion 9/2026EU
- new draftInternational cyber agencies share fresh advice to defend against China-linked covert networksUK
- new draftPDPD (former — Decree 13/2023, superseded)Vietnam
- new draftTH SME RoPA Exemption Notification 2022Thailand
- new draftTH Research / Statistical / Archival Data Notification 2023Thailand
- new draftTH Deletion / Destruction / Anonymisation Notification 2024Thailand
- new draftTH Criminal Record Data Notification 2024Thailand
- new draftOCHA (SG)Singapore
- new draftAI Verify (SG)Singapore
- new draftMeitY GenAI Advisory (15 March 2024)India
- new draftPDPLVietnam
- new draftDecree No. 356/2025/ND-CP detailing certain articles and implementation measures of the Law on Personal Data ProtectionVietnam
- new draftPersonal Data Protection Act, B.E. 2562 (2019)Thailand
- new draftTH PDPC subordinate regulations gapsThailand
- new draftNotification of the Personal Data Protection Committee Re: Security Measures of the Data Controller B.E. 2565 (2022)Thailand
- new draftNotification of the Personal Data Protection Committee Re: Records of Processing of Data Controllers (Records of Processing Notification) B.E. 2565 (2022)Thailand
- new draftNotification of the Personal Data Protection Committee Re: Criteria and Method for Reporting Personal Data Breaches B.E. 2565 (2022)Thailand
- new draftTH PDPC Section 29 Notification (cross-border BCR)Thailand
- new draftTH PDPC Section 28 Notification (cross-border)Thailand
- new draftTH PDPC Appropriate Measures (Historical Archives) NotificationThailand
- new draftMAS Notice 644 / TRMSingapore
- new draftPersonal Data Protection (Notification of Data Breaches) Regulations 2021Singapore
- new draftPDPC Advisory Guidelines on Key Concepts in the PDPASingapore
- new draftGuidelines on Cybersecurity for the Financial SectorJapan
- new draftDigital Personal Data Protection Act, 2023 (No. 22 of 2023)India
- new draftRBI + SEBI CSCRFIndia
- new draftDirections under sub-section (6) of section 70B of the Information Technology Act, 2000 relating to information security practices, procedure, prevention, response and reporting of cyber incidents for Safe & Trusted InternetIndia
- new draftPCICSOHong Kong
- new draftPCPD Recommended Model Contractual Clauses for Cross-border Transfer of Personal DataHong Kong
- new draftPCPD Legal Assistance Scheme Leaflet — "Legal Assistance for Civil Claims under the Personal Data (Privacy) Ordinance"Hong Kong
- new draftPCPD Guidance on Data Breach Handling and the Giving of Breach NotificationsHong Kong
- new draftHKMA SPM SA-2Hong Kong
- new draftCyber Resilience Assessment Framework 2.0 (C-RAF 2.0)Hong Kong
- new draftCybersecurity Law of the People's Republic of China (as amended 28 October 2025, effective 1 January 2026)China
- new draftData Security Technology — Security Requirements for the Processing of Sensitive Personal InformationChina
- new draftGB/T 20986-2023 — Information security technology — Guidelines for category and classification of cybersecurity incidentsChina
- new draftPBoC Data Security Mgmt Measures (2025)China
- new draftNFRA Banking & Insurance Data Security Mgmt Measures (Dec 2024)China
- new draft人工智能拟人化互动服务管理暂行办法China
- new draft人脸识别技术应用安全管理办法China
- new draft数字虚拟人信息服务管理办法（征求意见稿）China
- new draftNational Cybersecurity Incident Reporting Management MeasuresChina
- new draft人工智能生成合成内容标识办法China
- new draft未成年人网络保护条例China
- new draft网络数据安全管理条例 (Regulations on Network Data Security Management — Chinese primary text)China
- new draftNDSRChina
- new draftAU NDB schemeAustralia
- new draftAU Cyber Security Act 2024 (ransomware reporting)Australia
- new draftAPRA CPS 234Australia
- new draftOSCO Cap. 455 s.25Hong Kong
- new draftCyber Security Act 2024Australia
This week
- new draftAI VerifySingapore
- new draftPDPD (former)Vietnam
- new draftDecree 356 (VN)Vietnam
- new draftPDPL (VN)Vietnam
- new draftDPA 2012 (PH)Philippines
- new draftTH DSAR Deletion Notification 2024Thailand
- new draftTH Criminal Record Notification 2024Thailand
- new draftTH Research Data Notification 2024Thailand
- new draftTH SME Exemption Notification 2022Thailand
- new draftTH Security Measures Notification 2022Thailand
- new draftTH RoPA Notification 2022Thailand
- new draftPDPA (TH)Thailand
- new draftPDPA (MY)Malaysia
- new draftIndonesia PDP LawIndonesia
- new draftMeitY GenAI AdvisoryIndia
- new draftCERT-In Directions 2022India
- new draftDPDP Rules 2025India
- new draftDPDP ActIndia
- new draftPDPA (TW)Taiwan
- new draftAI Labelling Measures (CN)China
- new draftGenAI Measures (CN)China
- new draftDeep Synthesis ProvisionsChina
- new draftNDSM RegulationsChina
- new draftPIPL Audit MeasuresChina
- new draftDSLChina
- new draftCSLChina
- new draftPIPLChina
- new draftAI Basic Act (KR)South Korea
- new draftPIPA (KR)South Korea
- new draftAPPIJapan
- new draftPrivacy Act (NZ)New Zealand
- new draftOSA (AU)Australia
- new draftPrivacy Act (AU)Australia
- new draftPCPD Breach NoteHong Kong
- new draftPDPOHong Kong
- new draftOSMA (SG)Singapore
- new draftCybersecurity Act (SG)Singapore
- new draftPDPA SingaporeSingapore
- new draftCAISI Signs Agreements Regarding Frontier AI National Security Testing With Google DeepMind, Microsoft and xAIUS
- new draftNCSC Advisory: Russian Military Intelligence Hijacking Vulnerable Routers for Cyber AttacksUK
- new draftGuidance: Regulatory Innovation Office: Front Door pilotUK
Last 30 days
No entries.