Legislationsby Glyph
JapanJapanLawAct No. 42 of 2025
Active Cyber Defense Act (Act on Preventing Damage from Unauthorized Acts Against Critical Computers)
Creates Japan's active cyber defense framework, requiring designated critical infrastructure operators to report incidents and letting the government acquire and analyze cross-border communications data under review by a new independent oversight commission.
Further provisions enter into forceApr 1 7 months ago
- Body
- National Diet of Japan
- Session
- 217th Diet (ordinary session)
- Introduced
- Feb 7, 2025
- In effect since
- May 23, 20251 year ago
Timeline
Nov 22, 2027 in 1 year
Remaining provisions scheduled to apply on a date set by cabinet order, no later than this date
Oct 1 5 weeks ago
Incident reporting provisions for designated critical infrastructure operators scheduled to apply
Apr 1 7 months ago
Jul 1, 2025 1 year ago
May 23, 2025 1 year ago
Promulgated as Act No. 42 of 2025, with initial provisions taking effect
Feb 7, 2025 1 year ago
Related
United KingdomCyber Security and Resilience (Network and Information Systems) Bill
A bill to Make provision, including provision amending the Network and Information Systems Regulations 2018, about the security and resilience of network and information systems used or relied on in connection with the carrying on of essential activities.
United States (federal)Health Care Cybersecurity and Resiliency Act of 2026
A Senate bill in Congress, introduced. Latest step: Held at the desk.
United NationsUN Convention against Cybercrime
A global treaty requiring parties to criminalize certain offences committed through information and communications technology systems and to cooperate on sharing electronic evidence of serious crimes, which enters into force 90 days after the 40th ratification.
United States (federal)Satellite Cybersecurity Act of 2025
A Senate bill in Congress, passed by one chamber. Latest step: Message on Senate action sent to the House.
European UnionCybersecurity Act 2 (revision of the Cybersecurity Act)
Proposed regulation that would replace the 2019 Cybersecurity Act, strengthening ENISA, simplifying the EU cybersecurity certification framework, and adding measures to reduce ICT supply chain risks from high-risk third-country suppliers.
European UnionCyber Resilience Act
Sets mandatory cybersecurity requirements for hardware and software products with digital elements sold in the EU, including vulnerability handling and incident reporting duties for manufacturers.
Change log
- AddedAdded to the list. Set by hand from the official record.Sep 27
Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.