98 on file · 53 became law · 43 still moving · 6 moved in 30 days
Hong KongImposes statutory cybersecurity obligations on designated critical infrastructure operators in Hong Kong, covering organizational measures, preventive security measures and incident reporting, overseen by a new Commissioner's Office.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the Committee on Armed Services, and in addition to the Committee on Education and Workforce, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the House Committee on Armed Services.
United States (federal)Would require the Department of Homeland Security to assess threats posed by terrorist use of generative AI.
TaiwanAmends Taiwan's Personal Data Protection Act to make the new Personal Data Protection Commission the competent authority, require breach notification and reporting, mandate data protection officers in public agencies and create an inspection regime for government bodies.
United States (federal)A Senate bill in Congress, now in committee. Latest step: Read twice and referred to the Committee on Agriculture, Nutrition, and Forestry.
TexasBars exemplary damages in data breach lawsuits against businesses with fewer than 250 employees that maintained a qualifying cybersecurity program.
ChinaSets the mandatory national technical standard for how explicit and implicit labels, including metadata, must be applied to AI-generated text, images, audio, video and virtual scenes under China's labeling measures.
TexasEstablishes the Texas Cyber Command, with a facility in San Antonio, to prevent and respond to cybersecurity incidents, and transfers state cybersecurity duties from the Department of Information Resources to it.
United States (federal)Would require DHS to publicly release its unclassified report on U.S. telecommunications network security threats.
OregonProhibits installing or using AI hardware, software or services developed or owned by a covered foreign vendor on state information technology assets.
United States (federal)Would create an Office of Policy Development and Cybersecurity within NTIA.
United States (federal)Would require NTIA to examine the cybersecurity of mobile networks and their exposure to attacks and surveillance by adversaries.
TexasApplies open meetings and public information law exceptions to government information about certain cybersecurity measures.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the House Committee on Agriculture.
United States (federal)Amends Executive Orders 13694 and 14144 to narrow and revise earlier federal cybersecurity directives.
AlabamaExpands the state Office of Information Technology's duties to include cybersecurity and functions of former finance department IT divisions.
ZambiaDefines cybercrime offences and investigation powers in Zambia, replacing the cybercrime provisions of the Cyber Security and Cyber Crimes Act, 2021.
ZambiaEstablishes the Zambia Cyber Security Agency and sets rules on cybersecurity and critical information infrastructure, repealing the Cyber Security and Cyber Crimes Act, 2021.
United States (federal)Would require NTIA to study national security risks posed by consumer routers and modems linked to foreign adversaries.
MississippiEstablishes a Cloud Center of Excellence in the Department of Information Technology Services to manage phased cloud adoption, security and governance across state agencies.
MontanaLimits government restrictions on private ownership and use of computational resources and requires deployers of critical AI systems controlling critical infrastructure to adopt a risk management policy and shutdown capability.
KansasProhibits the AI platform DeepSeek and other AI platforms controlled by a country of concern on state-owned devices and networks, and bars genetic sequencers or analysis software produced in a foreign adversary.
TurkeyEstablishes the Cybersecurity Directorate as the national authority for protecting cyberspace and critical infrastructure, with powers over audits, incident response, security standards and certification of cybersecurity products and professionals.
United States (federal)A Senate bill in Congress, now in committee. Latest step: Read twice and referred to the Committee on Agriculture, Nutrition, and Forestry.
United States (federal)A House resolution in Congress, now in committee. Latest step: Placed on the House Calendar, Calendar No. 6.
United States (federal)Would require certain federal contractors to adopt vulnerability disclosure policies for their information systems.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the House Committee on Energy and Commerce.
European UnionSets up a European Cybersecurity Alert System of cross-border Cyber Hubs, a Cybersecurity Emergency Mechanism with an EU Cybersecurity Reserve, and a review mechanism for significant incidents.
United States (federal)Set federal cybersecurity requirements for software vendors, agency systems and critical infrastructure, including uses of AI for cyber defense.
ChinaImplements the Cybersecurity Law, Data Security Law and Personal Information Protection Law with detailed rules on personal information handling, important data protection, cross-border data transfers and obligations of large online platforms.
European UnionReplaces the 1985 product liability rules and extends no-fault liability for defective products to software, including AI systems, digital manufacturing files and related digital services.
European UnionSets the technical and methodological cybersecurity risk management requirements under NIS2 for digital infrastructure and digital service providers, such as cloud, data centre and managed security providers, and defines when their incidents count as significant.
ZimbabweSets Zimbabwe's rules on personal data protection and cybercrime, with 2024 regulations on licensing data controllers and appointing data protection officers.
MalaysiaEstablishes a National Cyber Security Committee, sets duties for national critical information infrastructure entities including incident reporting, and licenses cyber security service providers.
Sets common rules for African Union member states on electronic transactions, personal data protection, cybersecurity and cybercrime.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the House Committee on Financial Services.
United KingdomSets security requirements for consumer connectable products, including a ban on universal default passwords, a vulnerability disclosure policy and published minimum security update periods, and reforms telecoms infrastructure rules.
ChileSets a national cybersecurity framework with duties for essential service providers and operators of vital importance and creates the National Cybersecurity Agency (ANCI).
IndianaCreates an artificial intelligence task force to study state agency use of AI and sets technology resource and cybersecurity policy requirements for public entities.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the Subcommittee on Conservation, Research, and Biotechnology.
United States (federal)A Senate bill in Congress, now in committee. Latest step: Read twice and referred to the Committee on Agriculture, Nutrition, and Forestry.
United States (federal)A House bill in Congress, now in committee. Latest step: Referred to the House Committee on Energy and Commerce.
TexasProhibits the use of TikTok and other covered social media applications on devices owned or leased by governmental entities.
United States (federal)Bars federal agencies from operational use of commercial spyware that poses national security or counterintelligence risks.
Protocol to the Budapest Convention on enhanced international cooperation and direct disclosure of electronic evidence, including requests to service providers for subscriber information.
GhanaEstablishes Ghana's Cyber Security Authority to regulate cybersecurity activities and promote the development of cybersecurity in the country.
Sets the African Union plan to build an integrated digital single market in Africa by 2030 through digital infrastructure, skills, regulation and cybersecurity.
Legislationsby Glyph