AI and data laws

311 moving · 704 enacted

United KingdomUnited KingdomLaw2022 c. 46

Product Security and Telecommunications Infrastructure Act 2022

Sets security requirements for consumer connectable products, including a ban on universal default passwords, a vulnerability disclosure policy and published minimum security update periods, and reforms telecoms infrastructure rules.

In forceIntroducedCommitteeFloorLawIn force

Product security regime and the 2023 Regulations come into forceApr 29, 2024 2 years ago

Body
UK Parliament
In effect since
Apr 29, 20242 years ago

Timeline

  1. Apr 29, 2024 2 years ago

    Product security regime and the 2023 Regulations come into force

  2. Sep 14, 2023 3 years ago

    Security Requirements for Relevant Connectable Products Regulations 2023 (SI 2023/1007) made

  3. Dec 6, 2022 3 years ago

    Royal Assent

United Nations
United NationsA/RES/79/243

UN Convention against Cybercrime

A global treaty requiring parties to criminalize certain offences committed through information and communications technology systems and to cooperate on sharing electronic evidence of serious crimes, which enters into force 90 days after the 40th ratification.

Adopted
European Union
European UnionCOM(2026) 11

Cybersecurity Act 2 (revision of the Cybersecurity Act)

Proposed regulation that would replace the 2019 Cybersecurity Act, strengthening ENISA, simplifying the EU cybersecurity certification framework, and adding measures to reduce ICT supply chain risks from high-risk third-country suppliers.

Proposed

Change log

  • AddedAdded to the list. Set by hand from the official record.Sep 27

Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.