Hong KongHong KongLawCap. 653

Protection of Critical Infrastructures (Computer Systems) Ordinance

Imposes statutory cybersecurity obligations on designated critical infrastructure operators in Hong Kong, covering organizational measures, preventive security measures and incident reporting, overseen by a new Commissioner's Office.

Body

Legislative Council of Hong Kong

In effect since

Jan 110mo10 months ago

Topics

Cyber

Related

United Kingdom

United KingdomBill 4035

Cyber Security and Resilience (Network and Information Systems) Bill

A bill to Make provision, including provision amending the Network and Information Systems Regulations 2018, about the security and resilience of network and information systems used or relied on in connection with the carrying on of essential activities.

Passed bothNov 5

United States (federal)

United States (federal)S. 3315

Health Care Cybersecurity and Resiliency Act of 2026

A Senate bill in Congress, introduced. Latest step: Held at the desk.

IntroducedOct 5

United Nations

United NationsA/RES/79/243

UN Convention against Cybercrime

A global treaty requiring parties to criminalize certain offences committed through information and communications technology systems and to cooperate on sharing electronic evidence of serious crimes, which enters into force 90 days after the 40th ratification.

AdoptedSep 25

United States (federal)

United States (federal)S. 3404

Satellite Cybersecurity Act of 2025

A Senate bill in Congress, passed by one chamber. Latest step: Message on Senate action sent to the House.

Passed one chamberSep 24

European Union

European UnionCOM(2026) 11

Cybersecurity Act 2 (revision of the Cybersecurity Act)

Proposed regulation that would replace the 2019 Cybersecurity Act, strengthening ENISA, simplifying the EU cybersecurity certification framework, and adding measures to reduce ICT supply chain risks from high-risk third-country suppliers.

ProposedSep 18

European Union

European UnionRegulation (EU) 2024/2847

Cyber Resilience Act

Sets mandatory cybersecurity requirements for hardware and software products with digital elements sold in the EU, including vulnerability handling and incident reporting duties for manufacturers.

In forceSep 11

Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.