98 on file · 53 became law · 43 still moving · 6 moved in 30 days
United KingdomA bill to Make provision, including provision amending the Network and Information Systems Regulations 2018, about the security and resilience of network and information systems used or relied on in connection with the carrying on of essential activities.
New YorkThe law requires safety features on baby monitors and bans unsafe artificial intelligence chatbots targeted at minors.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the Committee on Science, Space, and Technology, and in addition to the Committee on Oversight and Government Reform, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
European UnionThe Council of the European Union agreed on its negotiating position regarding updates to data protection, cookie, data sharing, and incident reporting rules.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the House Committee on Science, Space, and Technology.
United States (federal)A House bill in Congress, now in committee. Latest step: Placed on the Union Calendar, Calendar No. 748.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the Committee on the Judiciary, and in addition to the Committees on Homeland Security, and Foreign Affairs, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the House Committee on Homeland Security.
United States (federal)A Senate bill in Congress, introduced. Latest step: Held at the desk.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the House Committee on Homeland Security.
United States (federal)A Senate bill in Congress, now in committee. Latest step: Committee on Energy and Natural Resources. Ordered to be reported without amendment favorably.
United NationsA global treaty requiring parties to criminalize certain offences committed through information and communications technology systems and to cooperate on sharing electronic evidence of serious crimes, which enters into force 90 days after the 40th ratification.
United States (federal)A Senate bill in Congress, passed by one chamber. Latest step: Message on Senate action sent to the House.
United States (federal)A Senate bill in Congress, now in committee. Latest step: Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
United States (federal)A Senate bill in Congress, now in committee. Latest step: Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
United States (federal)A Senate bill in Congress, now in committee. Latest step: Read twice and referred to the Committee on Commerce, Science, and Transportation.
United States (federal)A Senate bill in Congress, now in committee. Latest step: Read twice and referred to the Committee on Commerce, Science, and Transportation.
United States (federal)A Senate bill in Congress, now in committee. Latest step: Read twice and referred to the Committee on Armed Services.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the House Committee on Homeland Security.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the House Committee on Homeland Security.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the House Committee on Homeland Security.
European UnionProposed regulation that would replace the 2019 Cybersecurity Act, strengthening ENISA, simplifying the EU cybersecurity certification framework, and adding measures to reduce ICT supply chain risks from high-risk third-country suppliers.
United States (federal)A House bill in Congress, now in committee. Latest step: Ordered to be Reported (Amended) by Voice Vote.
European UnionSets mandatory cybersecurity requirements for hardware and software products with digital elements sold in the EU, including vulnerability handling and incident reporting duties for manufacturers.
South KoreaAmends PIPA after large data breaches to make company heads ultimately responsible for data protection, require notice of possible breaches, mandate privacy certification for large handlers, and allow fines of up to 10 percent of total revenue for repeated or massive violations.
United KingdomAmends the Network and Information Systems Regulations 2018 to bring managed service providers, data centres and large load controllers into scope, strengthen incident reporting, and expand regulators' enforcement powers.
United States (federal)Declares a national emergency over foreign threats to the bulk power system, citing electricity demand from data centers and AI.
European UnionProposed regulation that amends the GDPR, the ePrivacy Directive, NIS2 and the Data Act to simplify EU rules on cookie consent, incident reporting and data sharing, and folds several data laws, including the Data Governance Act, into the Data Act.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the Subcommittee on Cybersecurity and Infrastructure Protection.
United States (federal)A Senate bill in Congress, now in committee. Latest step: Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
European UnionSets cybersecurity risk management and incident reporting obligations for medium and large entities in critical sectors and requires member states to supervise and enforce them.
European UnionCommission action plan to promote safe use of advanced AI, including pre-market evaluation capacity for AI models under the AI Act, strengthen EU cyber resilience, and scale up AI capabilities for cybersecurity.
KenyaAmends Kenya's Computer Misuse and Cybercrimes Act of 2018, including new offences and powers for the National Computer and Cybercrimes Coordination Committee to act against unlawful websites and applications.
KenyaKenya's High Court partly upheld consolidated petitions against the Computer Misuse and Cybercrimes (Amendment) Act, 2025 and declared Sections 6(1)(ja) and 27(1)(b) unconstitutional.
VietnamCombines the 2018 Law on Cybersecurity and the 2015 Law on Cyberinformation Security into one law, with the Ministry of Public Security as the coordinating body for incident response and cybercrime investigations.
United States (federal)Directs federal agencies to migrate their information systems to NIST post quantum cryptography standards and to assist critical infrastructure operators.
United States (federal)OMB memo directing agencies on executing the migration of federal systems to post quantum cryptography.
CanadaEnacts a cyber security framework for critical cyber systems in federally regulated sectors and amends the Telecommunications Act to let the government secure the telecommunications system.
IsraelGovernment bill to set a permanent statutory framework for national cyber defense in Israel.
United States (federal)Directs agencies to harden federal and critical infrastructure systems with AI enabled cyber defenses, create an AI cybersecurity clearinghouse with industry and secure frontier AI models.
AustraliaSets security standards for smart devices, requires certain businesses to report ransomware payments, limits use of incident information shared with the government, and creates a Cyber Incident Review Board.
JapanCreates Japan's active cyber defense framework, requiring designated critical infrastructure operators to report incidents and letting the government acquire and analyze cross-border communications data under review by a new independent oversight commission.
GeorgiaWould have created the criminal offense of digital identity fraud.
United States (federal)Directs federal action against cybercrime, online fraud and predatory schemes targeting Americans.
AustraliaSets mandatory security standards under the Cyber Security Act 2024 for consumer internet-connected devices, including rules against universal default passwords.
IsraelTemporarily empowers authorized officials of the Shin Bet, the National Cyber Directorate or the defense ministry's security directorate to declare an attack on a hosting or digital service provider a severe cyber attack and to direct the provider's response.
TexasGovernor directive banning AI and social media apps affiliated with the People's Republic of China and the Chinese Communist Party, including DeepSeek, RedNote and Lemon8, from government-issued devices and adding them to the state prohibited technologies list.
TexasGovernor directive adding Chinese-affiliated AI companies, hardware and software to the state prohibited technologies list for state employees and devices and naming the Texas Cyber Command lead agency for identifying such threats.
CaliforniaRegulations that give consumers rights to access and opt out of businesses' use of automated decisionmaking technology and require certain businesses to conduct risk assessments and annual cybersecurity audits.
ChinaAmends the Cybersecurity Law to add a provision supporting AI research, infrastructure, ethics and risk monitoring, raise fines for network security violations, and align liability with the Data Security Law and Personal Information Protection Law.
Legislationsby Glyph