The NIST Cybersecurity Framework, mapped to the FINOS AI Governance Framework

• Law No. 25/2024, On Cybersecurity, Albania
• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Security Standards for Smart Devices, Australia
• Cybersicherheitszertifizierungs-Gesetz (CSZG), Supervision of European Cybersecurity Certification, Austria
• DORA-Vollzugsgesetz (DORA-VG), Competent Authority, Scope Extension and ICT Risk Penalties, Austria
• Netz- und Informationssystemsicherheits-Verordnung (NISV 2026), Risk-Management Requirements and Significant-Incident Criteria, Austria
• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Law of 17 February 2022 (Electronic Communications Act Article 105), Ministerial Authorization for 5G Network Elements and Location of 5G Infrastructure, Belgium
• Loi n°2010/012 du 21 décembre 2010 relative à la cybersécurité et à la cybercriminalité au Cameroun, articles 6, 7, 13-14, 24, 26-30, 32, 61(3) (mesures de sécurité et audit de sécurité obligatoire par l'ANTIC), Cameroon
• OSFI Guideline B-10, Third-Party Risk Management, Canada

and 61 more, every one in the free file.

• Law No. 25/2024, On Cybersecurity, Albania
• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Security Standards for Smart Devices, Australia
• Cybersicherheitszertifizierungs-Gesetz (CSZG), Supervision of European Cybersecurity Certification, Austria
• DORA-Vollzugsgesetz (DORA-VG), Competent Authority, Scope Extension and ICT Risk Penalties, Austria
• Netz- und Informationssystemsicherheits-Verordnung (NISV 2026), Risk-Management Requirements and Significant-Incident Criteria, Austria
• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Law of 17 February 2022 (Electronic Communications Act Article 105), Ministerial Authorization for 5G Network Elements and Location of 5G Infrastructure, Belgium
• Loi n°2010/012 du 21 décembre 2010 relative à la cybersécurité et à la cybercriminalité au Cameroun, articles 6, 7, 13-14, 24, 26-30, 32, 61(3) (mesures de sécurité et audit de sécurité obligatoire par l'ANTIC), Cameroon
• OSFI Guideline B-10, Third-Party Risk Management, Canada

and 61 more, every one in the free file.

• Law No. 25/2024, On Cybersecurity, Albania
• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Security Standards for Smart Devices, Australia
• Cybersicherheitszertifizierungs-Gesetz (CSZG), Supervision of European Cybersecurity Certification, Austria
• DORA-Vollzugsgesetz (DORA-VG), Competent Authority, Scope Extension and ICT Risk Penalties, Austria
• Netz- und Informationssystemsicherheits-Verordnung (NISV 2026), Risk-Management Requirements and Significant-Incident Criteria, Austria
• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Law of 17 February 2022 (Electronic Communications Act Article 105), Ministerial Authorization for 5G Network Elements and Location of 5G Infrastructure, Belgium
• Loi n°2010/012 du 21 décembre 2010 relative à la cybersécurité et à la cybercriminalité au Cameroun, articles 6, 7, 13-14, 24, 26-30, 32, 61(3) (mesures de sécurité et audit de sécurité obligatoire par l'ANTIC), Cameroon
• OSFI Guideline B-10, Third-Party Risk Management, Canada

and 51 more, every one in the free file.

• Law No. 25/2024, On Cybersecurity, Albania
• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Security Standards for Smart Devices, Australia
• Cybersicherheitszertifizierungs-Gesetz (CSZG), Supervision of European Cybersecurity Certification, Austria
• DORA-Vollzugsgesetz (DORA-VG), Competent Authority, Scope Extension and ICT Risk Penalties, Austria
• Netz- und Informationssystemsicherheits-Verordnung (NISV 2026), Risk-Management Requirements and Significant-Incident Criteria, Austria
• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Law of 17 February 2022 (Electronic Communications Act Article 105), Ministerial Authorization for 5G Network Elements and Location of 5G Infrastructure, Belgium
• Loi n°2010/012 du 21 décembre 2010 relative à la cybersécurité et à la cybercriminalité au Cameroun, articles 6, 7, 13-14, 24, 26-30, 32, 61(3) (mesures de sécurité et audit de sécurité obligatoire par l'ANTIC), Cameroon
• OSFI Guideline B-10, Third-Party Risk Management, Canada

and 51 more, every one in the free file.

• Law No. 25/2024, On Cybersecurity, Albania
• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Security Standards for Smart Devices, Australia
• Cybersicherheitszertifizierungs-Gesetz (CSZG), Supervision of European Cybersecurity Certification, Austria
• DORA-Vollzugsgesetz (DORA-VG), Competent Authority, Scope Extension and ICT Risk Penalties, Austria
• Netz- und Informationssystemsicherheits-Verordnung (NISV 2026), Risk-Management Requirements and Significant-Incident Criteria, Austria
• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Law of 17 February 2022 (Electronic Communications Act Article 105), Ministerial Authorization for 5G Network Elements and Location of 5G Infrastructure, Belgium
• Loi n°2010/012 du 21 décembre 2010 relative à la cybersécurité et à la cybercriminalité au Cameroun, articles 6, 7, 13-14, 24, 26-30, 32, 61(3) (mesures de sécurité et audit de sécurité obligatoire par l'ANTIC), Cameroon
• OSFI Guideline B-10, Third-Party Risk Management, Canada

and 51 more, every one in the free file.

• Law No. 25/2024, On Cybersecurity, Albania
• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Security Standards for Smart Devices, Australia
• Cybersicherheitszertifizierungs-Gesetz (CSZG), Supervision of European Cybersecurity Certification, Austria
• DORA-Vollzugsgesetz (DORA-VG), Competent Authority, Scope Extension and ICT Risk Penalties, Austria
• Netz- und Informationssystemsicherheits-Verordnung (NISV 2026), Risk-Management Requirements and Significant-Incident Criteria, Austria
• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Law of 17 February 2022 (Electronic Communications Act Article 105), Ministerial Authorization for 5G Network Elements and Location of 5G Infrastructure, Belgium
• Loi n°2010/012 du 21 décembre 2010 relative à la cybersécurité et à la cybercriminalité au Cameroun, articles 6, 7, 13-14, 24, 26-30, 32, 61(3) (mesures de sécurité et audit de sécurité obligatoire par l'ANTIC), Cameroon
• OSFI Guideline B-10, Third-Party Risk Management, Canada

and 51 more, every one in the free file.

• Cybersecurity Law, Network Product and Service Security Duties, China
• Decreto No. 360/2019 and its Reglamento de Seguridad de las TIC (Resolución 128/2019), TIC Security System duty, Cuba
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Cybersecurity Law, Network Product and Service Security Duties, China
• Decreto No. 360/2019 and its Reglamento de Seguridad de las TIC (Resolución 128/2019), TIC Security System duty, Cuba
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Cybersecurity Law, Network Product and Service Security Duties, China
• Decreto No. 360/2019 and its Reglamento de Seguridad de las TIC (Resolución 128/2019), TIC Security System duty, Cuba
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Cybersecurity Law, Network Product and Service Security Duties, China
• Decreto No. 360/2019 and its Reglamento de Seguridad de las TIC (Resolución 128/2019), TIC Security System duty, Cuba
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Cybersecurity Law, Network Product and Service Security Duties, China
• Decreto No. 360/2019 and its Reglamento de Seguridad de las TIC (Resolución 128/2019), TIC Security System duty, Cuba
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Cybersecurity Law, Network Product and Service Security Duties, China
• Decreto No. 360/2019 and its Reglamento de Seguridad de las TIC (Resolución 128/2019), TIC Security System duty, Cuba
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Cybersecurity Law, Network Product and Service Security Duties, China
• Decreto No. 360/2019 and its Reglamento de Seguridad de las TIC (Resolución 128/2019), TIC Security System duty, Cuba
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Loi du 26 avril 2024, Cybersecurity Risk-Management Measures and Governance, Belgium
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic
• Act on Security and Preparedness in the Telecoms Sector (Lov om sikkerhed og beredskab i telesektoren), Security Risk Management Measures, Denmark
• NIS 2-loven, Cybersecurity Risk-Management Measures and Registration, Denmark
• Küberturvalisuse seadus (KüTS), System Security Measures and Management-Body Duties, Estonia

and 21 more, every one in the free file.

• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Loi du 26 avril 2024, Cybersecurity Risk-Management Measures and Governance, Belgium
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic
• Act on Security and Preparedness in the Telecoms Sector (Lov om sikkerhed og beredskab i telesektoren), Security Risk Management Measures, Denmark
• NIS 2-loven, Cybersecurity Risk-Management Measures and Registration, Denmark
• Küberturvalisuse seadus (KüTS), System Security Measures and Management-Body Duties, Estonia

and 21 more, every one in the free file.

• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Loi du 26 avril 2024, Cybersecurity Risk-Management Measures and Governance, Belgium
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic
• Act on Security and Preparedness in the Telecoms Sector (Lov om sikkerhed og beredskab i telesektoren), Security Risk Management Measures, Denmark
• NIS 2-loven, Cybersecurity Risk-Management Measures and Registration, Denmark
• Küberturvalisuse seadus (KüTS), System Security Measures and Management-Body Duties, Estonia

and 21 more, every one in the free file.

• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Loi du 26 avril 2024, Cybersecurity Risk-Management Measures and Governance, Belgium
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic
• Act on Security and Preparedness in the Telecoms Sector (Lov om sikkerhed og beredskab i telesektoren), Security Risk Management Measures, Denmark
• NIS 2-loven, Cybersecurity Risk-Management Measures and Registration, Denmark
• Küberturvalisuse seadus (KüTS), System Security Measures and Management-Body Duties, Estonia

and 21 more, every one in the free file.

• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Loi du 26 avril 2024, Cybersecurity Risk-Management Measures and Governance, Belgium
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic
• Act on Security and Preparedness in the Telecoms Sector (Lov om sikkerhed og beredskab i telesektoren), Security Risk Management Measures, Denmark
• NIS 2-loven, Cybersecurity Risk-Management Measures and Registration, Denmark
• Küberturvalisuse seadus (KüTS), System Security Measures and Management-Body Duties, Estonia

and 21 more, every one in the free file.

• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Loi du 26 avril 2024, Cybersecurity Risk-Management Measures and Governance, Belgium
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic
• Act on Security and Preparedness in the Telecoms Sector (Lov om sikkerhed og beredskab i telesektoren), Security Risk Management Measures, Denmark
• NIS 2-loven, Cybersecurity Risk-Management Measures and Registration, Denmark
• Küberturvalisuse seadus (KüTS), System Security Measures and Management-Body Duties, Estonia

and 21 more, every one in the free file.

• Law No. 25/2024, On Cybersecurity, Albania
• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Data Security Law, Data Security Protection Obligations, China
• Commission Delegated Regulation (EU) 2022/1645, Information Security Management System for Design, Production and Aerodrome Organizations (Part-IS.D.OR), European Union
• Commission Implementing Regulation (EU) 2023/203, Information Security Management System for Aviation Organizations (Part-IS.I.OR), European Union
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• Law 4961/2022 (Ν. 4961/2022), Chapter Γ' of Part B, Cybersecurity of Internet of Things Devices, Greece
• Law 5160/2024, Cybersecurity Risk-Management Measures and Governance, Greece
• BRH Circulaire 126, Information Security Rules for Financial Institutions, Haiti

and 15 more, every one in the free file.

• Law No. 25/2024, On Cybersecurity, Albania
• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Data Security Law, Data Security Protection Obligations, China
• Commission Delegated Regulation (EU) 2022/1645, Information Security Management System for Design, Production and Aerodrome Organizations (Part-IS.D.OR), European Union
• Commission Implementing Regulation (EU) 2023/203, Information Security Management System for Aviation Organizations (Part-IS.I.OR), European Union
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• Law 4961/2022 (Ν. 4961/2022), Chapter Γ' of Part B, Cybersecurity of Internet of Things Devices, Greece
• Law 5160/2024, Cybersecurity Risk-Management Measures and Governance, Greece
• BRH Circulaire 126, Information Security Rules for Financial Institutions, Haiti

and 15 more, every one in the free file.

• Law No. 25/2024, On Cybersecurity, Albania
• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Data Security Law, Data Security Protection Obligations, China
• Commission Delegated Regulation (EU) 2022/1645, Information Security Management System for Design, Production and Aerodrome Organizations (Part-IS.D.OR), European Union
• Commission Implementing Regulation (EU) 2023/203, Information Security Management System for Aviation Organizations (Part-IS.I.OR), European Union
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• Law 4961/2022 (Ν. 4961/2022), Chapter Γ' of Part B, Cybersecurity of Internet of Things Devices, Greece
• Law 5160/2024, Cybersecurity Risk-Management Measures and Governance, Greece
• BRH Circulaire 126, Information Security Rules for Financial Institutions, Haiti

and 15 more, every one in the free file.

• Law No. 25/2024, On Cybersecurity, Albania
• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Data Security Law, Data Security Protection Obligations, China
• Commission Delegated Regulation (EU) 2022/1645, Information Security Management System for Design, Production and Aerodrome Organizations (Part-IS.D.OR), European Union
• Commission Implementing Regulation (EU) 2023/203, Information Security Management System for Aviation Organizations (Part-IS.I.OR), European Union
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• Law 4961/2022 (Ν. 4961/2022), Chapter Γ' of Part B, Cybersecurity of Internet of Things Devices, Greece
• Law 5160/2024, Cybersecurity Risk-Management Measures and Governance, Greece
• BRH Circulaire 126, Information Security Rules for Financial Institutions, Haiti

and 15 more, every one in the free file.

• Law No. 25/2024, On Cybersecurity, Albania
• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Data Security Law, Data Security Protection Obligations, China
• Commission Delegated Regulation (EU) 2022/1645, Information Security Management System for Design, Production and Aerodrome Organizations (Part-IS.D.OR), European Union
• Commission Implementing Regulation (EU) 2023/203, Information Security Management System for Aviation Organizations (Part-IS.I.OR), European Union
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• Law 4961/2022 (Ν. 4961/2022), Chapter Γ' of Part B, Cybersecurity of Internet of Things Devices, Greece
• Law 5160/2024, Cybersecurity Risk-Management Measures and Governance, Greece
• BRH Circulaire 126, Information Security Rules for Financial Institutions, Haiti

and 15 more, every one in the free file.

• Law No. 25/2024, On Cybersecurity, Albania
• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Data Security Law, Data Security Protection Obligations, China
• Commission Delegated Regulation (EU) 2022/1645, Information Security Management System for Design, Production and Aerodrome Organizations (Part-IS.D.OR), European Union
• Commission Implementing Regulation (EU) 2023/203, Information Security Management System for Aviation Organizations (Part-IS.I.OR), European Union
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• Law 4961/2022 (Ν. 4961/2022), Chapter Γ' of Part B, Cybersecurity of Internet of Things Devices, Greece
• Law 5160/2024, Cybersecurity Risk-Management Measures and Governance, Greece
• BRH Circulaire 126, Information Security Rules for Financial Institutions, Haiti

and 15 more, every one in the free file.

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Bank and Financial Holding Company Internal Control Rules, Dedicated Information Security Unit, Taiwan

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Bank and Financial Holding Company Internal Control Rules, Dedicated Information Security Unit, Taiwan

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Bank and Financial Holding Company Internal Control Rules, Dedicated Information Security Unit, Taiwan

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Bank and Financial Holding Company Internal Control Rules, Dedicated Information Security Unit, Taiwan

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Bank and Financial Holding Company Internal Control Rules, Dedicated Information Security Unit, Taiwan

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Bank and Financial Holding Company Internal Control Rules, Dedicated Information Security Unit, Taiwan

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Bank and Financial Holding Company Internal Control Rules, Dedicated Information Security Unit, Taiwan

• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Loi du 26 avril 2024, Cybersecurity Risk-Management Measures and Governance, Belgium
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• Prudential supervision of banks: the Office's objects and the Superintendent's directions to a bank, Canada
• Data Security Law, Data Security Protection Obligations, China
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Cybersecurity Act (Zákon o kybernetické bezpečnosti), Risk-Management Security Measures, Czech Republic
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic

and 50 more, every one in the free file.

• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Loi du 26 avril 2024, Cybersecurity Risk-Management Measures and Governance, Belgium
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• Prudential supervision of banks: the Office's objects and the Superintendent's directions to a bank, Canada
• Data Security Law, Data Security Protection Obligations, China
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Cybersecurity Act (Zákon o kybernetické bezpečnosti), Risk-Management Security Measures, Czech Republic
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic

and 50 more, every one in the free file.

• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Loi du 26 avril 2024, Cybersecurity Risk-Management Measures and Governance, Belgium
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• Prudential supervision of banks: the Office's objects and the Superintendent's directions to a bank, Canada
• Data Security Law, Data Security Protection Obligations, China
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Cybersecurity Act (Zákon o kybernetické bezpečnosti), Risk-Management Security Measures, Czech Republic
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic

and 50 more, every one in the free file.

• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Loi du 26 avril 2024, Cybersecurity Risk-Management Measures and Governance, Belgium
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• Prudential supervision of banks: the Office's objects and the Superintendent's directions to a bank, Canada
• Data Security Law, Data Security Protection Obligations, China
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Cybersecurity Act (Zákon o kybernetické bezpečnosti), Risk-Management Security Measures, Czech Republic
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic

and 50 more, every one in the free file.

• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Loi du 26 avril 2024, Cybersecurity Risk-Management Measures and Governance, Belgium
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• Prudential supervision of banks: the Office's objects and the Superintendent's directions to a bank, Canada
• Data Security Law, Data Security Protection Obligations, China
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Cybersecurity Act (Zákon o kybernetické bezpečnosti), Risk-Management Security Measures, Czech Republic
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic

and 50 more, every one in the free file.

• Llei 22/2022, Cybersecurity Risk-Management Obligations, Andorra
• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Loi du 26 avril 2024, Cybersecurity Risk-Management Measures and Governance, Belgium
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• Prudential supervision of banks: the Office's objects and the Superintendent's directions to a bank, Canada
• Data Security Law, Data Security Protection Obligations, China
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Cybersecurity Act (Zákon o kybernetické bezpečnosti), Risk-Management Security Measures, Czech Republic
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic

and 50 more, every one in the free file.

• Law on the Protection of Personal Data, Angola
• Ley No. 172-13 sobre Protección Integral de los Datos Personales, Dominican Republic
• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• Identity Theft Protection Act of 2015, risk-based information security program, Rhode Island
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Law on the Protection of Personal Data, Angola
• Ley No. 172-13 sobre Protección Integral de los Datos Personales, Dominican Republic
• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• Identity Theft Protection Act of 2015, risk-based information security program, Rhode Island
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Law on the Protection of Personal Data, Angola
• Ley No. 172-13 sobre Protección Integral de los Datos Personales, Dominican Republic
• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• Identity Theft Protection Act of 2015, risk-based information security program, Rhode Island
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Law on the Protection of Personal Data, Angola
• Ley No. 172-13 sobre Protección Integral de los Datos Personales, Dominican Republic
• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• Identity Theft Protection Act of 2015, risk-based information security program, Rhode Island
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Law on the Protection of Personal Data, Angola
• Ley No. 172-13 sobre Protección Integral de los Datos Personales, Dominican Republic
• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• Identity Theft Protection Act of 2015, risk-based information security program, Rhode Island
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Law on the Protection of Personal Data, Angola
• Ley No. 172-13 sobre Protección Integral de los Datos Personales, Dominican Republic
• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• Identity Theft Protection Act of 2015, risk-based information security program, Rhode Island
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Law on the Protection of Personal Data, Angola
• Ley No. 172-13 sobre Protección Integral de los Datos Personales, Dominican Republic
• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• Identity Theft Protection Act of 2015, risk-based information security program, Rhode Island
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Ley para la Protección de Datos Personales, personal data breach notification, El Salvador
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DFS Guidance: How to Conduct and Use Risk Assessments Required by the DFS Cybersecurity Regulation, New York

• Ley para la Protección de Datos Personales, personal data breach notification, El Salvador
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DFS Guidance: How to Conduct and Use Risk Assessments Required by the DFS Cybersecurity Regulation, New York

• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DFS Guidance: How to Conduct and Use Risk Assessments Required by the DFS Cybersecurity Regulation, New York

• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DFS Guidance: How to Conduct and Use Risk Assessments Required by the DFS Cybersecurity Regulation, New York

• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DFS Guidance: How to Conduct and Use Risk Assessments Required by the DFS Cybersecurity Regulation, New York

• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DFS Guidance: How to Conduct and Use Risk Assessments Required by the DFS Cybersecurity Regulation, New York

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Loi n° 18-07 relative à la protection des personnes physiques dans le traitement des données à caractère personnel, modifiée et complétée par la loi n° 25-11, Algeria
• Data Protection Act, 2013, Antigua and Barbuda
• Personal Data Protection Law, cross-border transfer of personal data, Burkina Faso
• Law No. 133/V/2001 on the Protection of Personal Data, Cabo Verde
• Data Protection Act, 2022 (Act No. 5 of 2022), Eswatini
• Data Protection Act, Ghana
• Data Protection Act, No. 1 of 2023, Grenada from a date not yet set
• Data Protection Act, 2011 (Act No. 5 of 2012), Lesotho
• Loi n° 2013-015, protection des données à caractère personnel, Mali

and 4 more, every one in the free file.

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Loi n° 18-07 relative à la protection des personnes physiques dans le traitement des données à caractère personnel, modifiée et complétée par la loi n° 25-11, Algeria
• Data Protection Act, 2013, Antigua and Barbuda
• Law No. 133/V/2001 on the Protection of Personal Data, Cabo Verde
• Data Protection Act, 2022 (Act No. 5 of 2022), Eswatini
• Data Protection Act, Ghana
• Data Protection Act, No. 1 of 2023, Grenada from a date not yet set
• Data Protection Act, 2011 (Act No. 5 of 2012), Lesotho
• Loi n° 2013-015, protection des données à caractère personnel, Mali
• Data Protection Act, 2018, Saint Kitts and Nevis from a date not yet set

and 1 more, every one in the free file.

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Loi n° 18-07 relative à la protection des personnes physiques dans le traitement des données à caractère personnel, modifiée et complétée par la loi n° 25-11, Algeria
• Data Protection Act, 2013, Antigua and Barbuda
• Law No. 133/V/2001 on the Protection of Personal Data, Cabo Verde
• Data Protection Act, 2022 (Act No. 5 of 2022), Eswatini
• Data Protection Act, Ghana
• Data Protection Act, No. 1 of 2023, Grenada from a date not yet set
• Data Protection Act, 2011 (Act No. 5 of 2012), Lesotho
• Loi n° 2013-015, protection des données à caractère personnel, Mali
• Data Protection Act, 2018, Saint Kitts and Nevis from a date not yet set

and 1 more, every one in the free file.

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Loi n° 18-07 relative à la protection des personnes physiques dans le traitement des données à caractère personnel, modifiée et complétée par la loi n° 25-11, Algeria
• Data Protection Act, 2013, Antigua and Barbuda
• Law No. 133/V/2001 on the Protection of Personal Data, Cabo Verde
• Data Protection Act, 2022 (Act No. 5 of 2022), Eswatini
• Data Protection Act, Ghana
• Data Protection Act, No. 1 of 2023, Grenada from a date not yet set
• Data Protection Act, 2011 (Act No. 5 of 2012), Lesotho
• Loi n° 2013-015, protection des données à caractère personnel, Mali
• Data Protection Act, 2018, Saint Kitts and Nevis from a date not yet set

and 1 more, every one in the free file.

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Loi n° 18-07 relative à la protection des personnes physiques dans le traitement des données à caractère personnel, modifiée et complétée par la loi n° 25-11, Algeria
• Data Protection Act, 2013, Antigua and Barbuda
• Law No. 133/V/2001 on the Protection of Personal Data, Cabo Verde
• Data Protection Act, 2022 (Act No. 5 of 2022), Eswatini
• Data Protection Act, Ghana
• Data Protection Act, No. 1 of 2023, Grenada from a date not yet set
• Data Protection Act, 2011 (Act No. 5 of 2012), Lesotho
• Loi n° 2013-015, protection des données à caractère personnel, Mali
• Data Protection Act, 2018, Saint Kitts and Nevis from a date not yet set

and 1 more, every one in the free file.

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Loi n° 18-07 relative à la protection des personnes physiques dans le traitement des données à caractère personnel, modifiée et complétée par la loi n° 25-11, Algeria
• Data Protection Act, 2013, Antigua and Barbuda
• Law No. 133/V/2001 on the Protection of Personal Data, Cabo Verde
• Data Protection Act, 2022 (Act No. 5 of 2022), Eswatini
• Data Protection Act, Ghana
• Data Protection Act, No. 1 of 2023, Grenada from a date not yet set
• Data Protection Act, 2011 (Act No. 5 of 2012), Lesotho
• Loi n° 2013-015, protection des données à caractère personnel, Mali
• Data Protection Act, 2018, Saint Kitts and Nevis from a date not yet set

and 1 more, every one in the free file.

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Loi n° 18-07 relative à la protection des personnes physiques dans le traitement des données à caractère personnel, modifiée et complétée par la loi n° 25-11, Algeria
• Data Protection Act, 2013, Antigua and Barbuda
• Law No. 133/V/2001 on the Protection of Personal Data, Cabo Verde
• Data Protection Act, 2022 (Act No. 5 of 2022), Eswatini
• Data Protection Act, Ghana
• Data Protection Act, No. 1 of 2023, Grenada from a date not yet set
• Data Protection Act, 2011 (Act No. 5 of 2012), Lesotho
• Loi n° 2013-015, protection des données à caractère personnel, Mali
• Data Protection Act, 2018, Saint Kitts and Nevis from a date not yet set

and 1 more, every one in the free file.

• AB 1159 (2026), student personal information (KOPIPA, ELPIPA and the Higher Education Student Information Protection Act), California from 1 Jan 2027, in 2 months
• Latvijas Bankas noteikumi Nr. 409, ICT Resilience Requirements Outside DORA, Latvia

• AB 1159 (2026), student personal information (KOPIPA, ELPIPA and the Higher Education Student Information Protection Act), California from 1 Jan 2027, in 2 months
• Latvijas Bankas noteikumi Nr. 409, ICT Resilience Requirements Outside DORA, Latvia

• Law 5160/2024, Cybersecurity Risk-Management Measures and Governance, Greece
• Cybersecurity Act, Risk-Management Measures, Hungary
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York

• Law 5160/2024, Cybersecurity Risk-Management Measures and Governance, Greece
• Cybersecurity Act, Risk-Management Measures, Hungary
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York

• Law 5160/2024, Cybersecurity Risk-Management Measures and Governance, Greece
• Cybersecurity Act, Risk-Management Measures, Hungary
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York

• Law 5160/2024, Cybersecurity Risk-Management Measures and Governance, Greece
• Cybersecurity Act, Risk-Management Measures, Hungary
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York

• Law 5160/2024, Cybersecurity Risk-Management Measures and Governance, Greece
• Cybersecurity Act, Risk-Management Measures, Hungary
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York

• Law 5160/2024, Cybersecurity Risk-Management Measures and Governance, Greece
• Cybersecurity Act, Risk-Management Measures, Hungary
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York

• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Cybersecurity Act, Risk-Management Measures, Hungary
• Cyber Security Management Act, Specific Non-Government Agency Cyber Security Management, Taiwan

• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Cybersecurity Act, Risk-Management Measures, Hungary
• Cyber Security Management Act, Specific Non-Government Agency Cyber Security Management, Taiwan

• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Cybersecurity Act, Risk-Management Measures, Hungary
• Cyber Security Management Act, Specific Non-Government Agency Cyber Security Management, Taiwan

• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Cybersecurity Act, Risk-Management Measures, Hungary
• Cyber Security Management Act, Specific Non-Government Agency Cyber Security Management, Taiwan

• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Cybersecurity Act, Risk-Management Measures, Hungary
• Cyber Security Management Act, Specific Non-Government Agency Cyber Security Management, Taiwan

• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Cybersecurity Act, Risk-Management Measures, Hungary
• Cyber Security Management Act, Specific Non-Government Agency Cyber Security Management, Taiwan

• Loi n°2017-20 portant Code du Numérique en République du Bénin, Livre V (protection des données à caractère personnel), Benin
• Loi n°2024/017 du 23 décembre 2024 relative à la protection des données à caractère personnel au Cameroun, Cameroon
• General Data Protection Regulation, Records of Processing Activities (Article 30), European Union
• Data Classification Policy, Kuwait
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• Draft Law on the Protection of Privacy and Personal Data (Ontwerpwet Bescherming Privacy en Persoonsgegevens), Suriname proposed
• General Regulation on the Protection of Personal Data for Vatican City State, Vatican City

• Loi n°2017-20 portant Code du Numérique en République du Bénin, Livre V (protection des données à caractère personnel), Benin
• Loi n°2024/017 du 23 décembre 2024 relative à la protection des données à caractère personnel au Cameroun, Cameroon
• General Data Protection Regulation, Records of Processing Activities (Article 30), European Union
• Data Classification Policy, Kuwait
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• Draft Law on the Protection of Privacy and Personal Data (Ontwerpwet Bescherming Privacy en Persoonsgegevens), Suriname proposed
• General Regulation on the Protection of Personal Data for Vatican City State, Vatican City

• Loi n°2017-20 portant Code du Numérique en République du Bénin, Livre V (protection des données à caractère personnel), Benin
• Loi n°2024/017 du 23 décembre 2024 relative à la protection des données à caractère personnel au Cameroun, Cameroon
• General Data Protection Regulation, Records of Processing Activities (Article 30), European Union
• Data Classification Policy, Kuwait
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• Draft Law on the Protection of Privacy and Personal Data (Ontwerpwet Bescherming Privacy en Persoonsgegevens), Suriname proposed
• General Regulation on the Protection of Personal Data for Vatican City State, Vatican City

• Loi n°2017-20 portant Code du Numérique en République du Bénin, Livre V (protection des données à caractère personnel), Benin
• Loi n°2024/017 du 23 décembre 2024 relative à la protection des données à caractère personnel au Cameroun, Cameroon
• General Data Protection Regulation, Records of Processing Activities (Article 30), European Union
• Data Classification Policy, Kuwait
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• Draft Law on the Protection of Privacy and Personal Data (Ontwerpwet Bescherming Privacy en Persoonsgegevens), Suriname proposed
• General Regulation on the Protection of Personal Data for Vatican City State, Vatican City

• Loi n°2017-20 portant Code du Numérique en République du Bénin, Livre V (protection des données à caractère personnel), Benin
• Loi n°2024/017 du 23 décembre 2024 relative à la protection des données à caractère personnel au Cameroun, Cameroon
• General Data Protection Regulation, Records of Processing Activities (Article 30), European Union
• Data Classification Policy, Kuwait
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• Draft Law on the Protection of Privacy and Personal Data (Ontwerpwet Bescherming Privacy en Persoonsgegevens), Suriname proposed
• General Regulation on the Protection of Personal Data for Vatican City State, Vatican City

• Loi n°2017-20 portant Code du Numérique en République du Bénin, Livre V (protection des données à caractère personnel), Benin
• Loi n°2024/017 du 23 décembre 2024 relative à la protection des données à caractère personnel au Cameroun, Cameroon
• General Data Protection Regulation, Records of Processing Activities (Article 30), European Union
• Data Classification Policy, Kuwait
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• Draft Law on the Protection of Privacy and Personal Data (Ontwerpwet Bescherming Privacy en Persoonsgegevens), Suriname proposed
• General Regulation on the Protection of Personal Data for Vatican City State, Vatican City

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Ley 25.326, Ley de Protección de los Datos Personales, Argentina
• HB2112, internet pornography, minors, age verification, Arizona
• Law No. 133/V/2001 on the Protection of Personal Data, enforcement and supervision, Cabo Verde
• AB 1159 (2026), student personal information (KOPIPA, ELPIPA and the Higher Education Student Information Protection Act), California from 1 Jan 2027, in 2 months
• Loi n°2010/012 du 21 décembre 2010 relative à la cybersécurité et à la cybercriminalité au Cameroun, article 74 (atteinte à la vie privée et traitement illicite des données à caractère personnel), Cameroon
• Data Protection Act, 2022 (Act No. 5 of 2022), Eswatini
• Personal Data Protection Proclamation, Ethiopia
• Act on the Protection of Privacy in Working Life, Sections 15 to 17, Genetic Testing and Camera Surveillance of Employees, Finland
• Florida Information Protection Act, data security and disposal duty, Florida

and 27 more, every one in the free file.

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Ley 25.326, Ley de Protección de los Datos Personales, Argentina
• HB2112, internet pornography, minors, age verification, Arizona
• Law No. 133/V/2001 on the Protection of Personal Data, enforcement and supervision, Cabo Verde
• AB 1159 (2026), student personal information (KOPIPA, ELPIPA and the Higher Education Student Information Protection Act), California from 1 Jan 2027, in 2 months
• Loi n°2010/012 du 21 décembre 2010 relative à la cybersécurité et à la cybercriminalité au Cameroun, article 74 (atteinte à la vie privée et traitement illicite des données à caractère personnel), Cameroon
• Data Protection Act, 2022 (Act No. 5 of 2022), Eswatini
• Personal Data Protection Proclamation, Ethiopia
• Act on the Protection of Privacy in Working Life, Sections 15 to 17, Genetic Testing and Camera Surveillance of Employees, Finland
• Florida Information Protection Act, data security and disposal duty, Florida

and 27 more, every one in the free file.

• Law No. 133/V/2001 on the Protection of Personal Data, enforcement and supervision, Cabo Verde
• AB 1159 (2026), student personal information (KOPIPA, ELPIPA and the Higher Education Student Information Protection Act), California from 1 Jan 2027, in 2 months
• Personal Health Information Protection Act, 2004, offences and damages for breach of privacy, Ontario
• Ley 29733, Ley de Protección de Datos Personales, Peru

• Ley 25.326, Ley de Protección de los Datos Personales, Argentina
• Protection of Social Security Numbers and Personal Information Act, safeguarding and destruction duty, Connecticut
• Financial Data Protection and Consumer Notification of Data Security Breach Act, security procedures and practices duty, Nebraska
• Oregon Consumer Information Protection Act, requirement to develop safeguards for personal information, Oregon

• Law No. 133/V/2001 on the Protection of Personal Data, enforcement and supervision, Cabo Verde
• Loi n°2010/012 du 21 décembre 2010 relative à la cybersécurité et à la cybercriminalité au Cameroun, article 74 (atteinte à la vie privée et traitement illicite des données à caractère personnel), Cameroon
• Ley 29733, Ley de Protección de Datos Personales, Peru

• Protection of Social Security Numbers and Personal Information Act, safeguarding and destruction duty, Connecticut
• Financial Data Protection and Consumer Notification of Data Security Breach Act, security procedures and practices duty, Nebraska
• Oregon Consumer Information Protection Act, requirement to develop safeguards for personal information, Oregon

• Protection of Social Security Numbers and Personal Information Act, safeguarding and destruction duty, Connecticut
• Financial Data Protection and Consumer Notification of Data Security Breach Act, security procedures and practices duty, Nebraska
• Oregon Consumer Information Protection Act, requirement to develop safeguards for personal information, Oregon

• Protection of Social Security Numbers and Personal Information Act, safeguarding and destruction duty, Connecticut
• Financial Data Protection and Consumer Notification of Data Security Breach Act, security procedures and practices duty, Nebraska
• Oregon Consumer Information Protection Act, requirement to develop safeguards for personal information, Oregon

• Protection of Social Security Numbers and Personal Information Act, safeguarding and destruction duty, Connecticut
• Financial Data Protection and Consumer Notification of Data Security Breach Act, security procedures and practices duty, Nebraska
• Oregon Consumer Information Protection Act, requirement to develop safeguards for personal information, Oregon

• Protection of Social Security Numbers and Personal Information Act, safeguarding and destruction duty, Connecticut
• Financial Data Protection and Consumer Notification of Data Security Breach Act, security procedures and practices duty, Nebraska
• Oregon Consumer Information Protection Act, requirement to develop safeguards for personal information, Oregon

• Protection of Social Security Numbers and Personal Information Act, safeguarding and destruction duty, Connecticut
• Financial Data Protection and Consumer Notification of Data Security Breach Act, security procedures and practices duty, Nebraska
• Oregon Consumer Information Protection Act, requirement to develop safeguards for personal information, Oregon

• Law No. 133/V/2001 on the Protection of Personal Data, enforcement and supervision, Cabo Verde
• Ley 29733, Ley de Protección de Datos Personales, Peru

• Law No. 133/V/2001 on the Protection of Personal Data, enforcement and supervision, Cabo Verde
• Ley 29733, Ley de Protección de Datos Personales, Peru

• Loi n°2017-20 portant Code du Numérique en République du Bénin, Livre VI (cybersécurité), sécurité des réseaux et essai de vulnérabilité des produits, Benin
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 24-27 (Digital Operational Resilience Testing and Threat-Led Penetration Testing), European Union
• EUCC Certification Scheme, Vulnerability Management by the Holder of a Certificate, European Union
• DFS Advisory: Heightened Cybersecurity Risks Associated with Frontier AI Models, New York

• Loi n°2017-20 portant Code du Numérique en République du Bénin, Livre VI (cybersécurité), sécurité des réseaux et essai de vulnérabilité des produits, Benin
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 24-27 (Digital Operational Resilience Testing and Threat-Led Penetration Testing), European Union
• EUCC Certification Scheme, Vulnerability Management by the Holder of a Certificate, European Union
• DFS Advisory: Heightened Cybersecurity Risks Associated with Frontier AI Models, New York

• Loi n°2017-20 portant Code du Numérique en République du Bénin, Livre VI (cybersécurité), sécurité des réseaux et essai de vulnérabilité des produits, Benin
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 24-27 (Digital Operational Resilience Testing and Threat-Led Penetration Testing), European Union
• EUCC Certification Scheme, Vulnerability Management by the Holder of a Certificate, European Union
• DFS Advisory: Heightened Cybersecurity Risks Associated with Frontier AI Models, New York

• Loi n°2017-20 portant Code du Numérique en République du Bénin, Livre VI (cybersécurité), sécurité des réseaux et essai de vulnérabilité des produits, Benin
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 24-27 (Digital Operational Resilience Testing and Threat-Led Penetration Testing), European Union
• EUCC Certification Scheme, Vulnerability Management by the Holder of a Certificate, European Union
• DFS Advisory: Heightened Cybersecurity Risks Associated with Frontier AI Models, New York

• Loi n°2017-20 portant Code du Numérique en République du Bénin, Livre VI (cybersécurité), sécurité des réseaux et essai de vulnérabilité des produits, Benin
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 24-27 (Digital Operational Resilience Testing and Threat-Led Penetration Testing), European Union
• EUCC Certification Scheme, Vulnerability Management by the Holder of a Certificate, European Union
• DFS Advisory: Heightened Cybersecurity Risks Associated with Frontier AI Models, New York

• Loi n°2017-20 portant Code du Numérique en République du Bénin, Livre VI (cybersécurité), sécurité des réseaux et essai de vulnérabilité des produits, Benin
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 24-27 (Digital Operational Resilience Testing and Threat-Led Penetration Testing), European Union
• EUCC Certification Scheme, Vulnerability Management by the Holder of a Certificate, European Union
• DFS Advisory: Heightened Cybersecurity Risks Associated with Frontier AI Models, New York

• Loi n°2017-20 portant Code du Numérique en République du Bénin, Livre VI (cybersécurité), sécurité des réseaux et essai de vulnérabilité des produits, Benin
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 24-27 (Digital Operational Resilience Testing and Threat-Led Penetration Testing), European Union
• EUCC Certification Scheme, Vulnerability Management by the Holder of a Certificate, European Union
• DFS Advisory: Heightened Cybersecurity Risks Associated with Frontier AI Models, New York

• Minimum Risk-Management and Preparedness Requirements for Critical Infrastructure, Iceland
• Cybersecurity Act 2026, Critical Infrastructure Operator Obligations, Kiribati from a date not yet set
• Cybersecurity Act 2025, Cybersecurity of Critical Information Infrastructure, Marshall Islands
• DFS Guidance: How to Conduct and Use Risk Assessments Required by the DFS Cybersecurity Regulation, New York
• Vyhláška NBÚ č. 227/2025 Z. z., Security Measures and Security Documentation, Slovakia

• Minimum Risk-Management and Preparedness Requirements for Critical Infrastructure, Iceland
• Cybersecurity Act 2026, Critical Infrastructure Operator Obligations, Kiribati from a date not yet set
• Cybersecurity Act 2025, Cybersecurity of Critical Information Infrastructure, Marshall Islands
• DFS Guidance: How to Conduct and Use Risk Assessments Required by the DFS Cybersecurity Regulation, New York
• Vyhláška NBÚ č. 227/2025 Z. z., Security Measures and Security Documentation, Slovakia

• Minimum Risk-Management and Preparedness Requirements for Critical Infrastructure, Iceland
• Cybersecurity Act 2026, Critical Infrastructure Operator Obligations, Kiribati from a date not yet set
• Cybersecurity Act 2025, Cybersecurity of Critical Information Infrastructure, Marshall Islands
• DFS Guidance: How to Conduct and Use Risk Assessments Required by the DFS Cybersecurity Regulation, New York
• Vyhláška NBÚ č. 227/2025 Z. z., Security Measures and Security Documentation, Slovakia

• Minimum Risk-Management and Preparedness Requirements for Critical Infrastructure, Iceland
• Cybersecurity Act 2026, Critical Infrastructure Operator Obligations, Kiribati from a date not yet set
• Cybersecurity Act 2025, Cybersecurity of Critical Information Infrastructure, Marshall Islands
• DFS Guidance: How to Conduct and Use Risk Assessments Required by the DFS Cybersecurity Regulation, New York
• Vyhláška NBÚ č. 227/2025 Z. z., Security Measures and Security Documentation, Slovakia

• Minimum Risk-Management and Preparedness Requirements for Critical Infrastructure, Iceland
• Cybersecurity Act 2026, Critical Infrastructure Operator Obligations, Kiribati from a date not yet set
• Cybersecurity Act 2025, Cybersecurity of Critical Information Infrastructure, Marshall Islands
• DFS Guidance: How to Conduct and Use Risk Assessments Required by the DFS Cybersecurity Regulation, New York
• Vyhláška NBÚ č. 227/2025 Z. z., Security Measures and Security Documentation, Slovakia

• Minimum Risk-Management and Preparedness Requirements for Critical Infrastructure, Iceland
• Cybersecurity Act 2026, Critical Infrastructure Operator Obligations, Kiribati from a date not yet set
• Cybersecurity Act 2025, Cybersecurity of Critical Information Infrastructure, Marshall Islands
• DFS Guidance: How to Conduct and Use Risk Assessments Required by the DFS Cybersecurity Regulation, New York
• Vyhláška NBÚ č. 227/2025 Z. z., Security Measures and Security Documentation, Slovakia

• Digital Code, Book II: Electronic Communications Network and Service Security, Djibouti
• Projet de loi Résilience des Infrastructures Critiques et Cybersécurité, Cybersecurity Risk-Management Measures (NIS2), France proposed
• National Cyber Security Bill, Cybersecurity Risk-Management Measures, Ireland proposed
• Determinazione ACN n. 164179 del 14 aprile 2025, Basic NIS Security Measures and Incident Notification, Italy
• Cybersäkerhetslag, Cybersecurity Risk-Management Measures, Sweden

• Digital Code, Book II: Electronic Communications Network and Service Security, Djibouti
• Projet de loi Résilience des Infrastructures Critiques et Cybersécurité, Cybersecurity Risk-Management Measures (NIS2), France proposed
• National Cyber Security Bill, Cybersecurity Risk-Management Measures, Ireland proposed
• Determinazione ACN n. 164179 del 14 aprile 2025, Basic NIS Security Measures and Incident Notification, Italy
• Cybersäkerhetslag, Cybersecurity Risk-Management Measures, Sweden

• Projet de loi Résilience des Infrastructures Critiques et Cybersécurité, Cybersecurity Risk-Management Measures (NIS2), France proposed
• National Cyber Security Bill, Cybersecurity Risk-Management Measures, Ireland proposed
• DFS Guidance: How to Conduct and Use Risk Assessments Required by the DFS Cybersecurity Regulation, New York
• Cybersäkerhetslag, Cybersecurity Risk-Management Measures, Sweden

• Projet de loi Résilience des Infrastructures Critiques et Cybersécurité, Cybersecurity Risk-Management Measures (NIS2), France proposed
• National Cyber Security Bill, Cybersecurity Risk-Management Measures, Ireland proposed
• Cybersäkerhetslag, Cybersecurity Risk-Management Measures, Sweden

• Projet de loi Résilience des Infrastructures Critiques et Cybersécurité, Cybersecurity Risk-Management Measures (NIS2), France proposed
• National Cyber Security Bill, Cybersecurity Risk-Management Measures, Ireland proposed
• Cybersäkerhetslag, Cybersecurity Risk-Management Measures, Sweden

• Projet de loi Résilience des Infrastructures Critiques et Cybersécurité, Cybersecurity Risk-Management Measures (NIS2), France proposed
• National Cyber Security Bill, Cybersecurity Risk-Management Measures, Ireland proposed
• Cybersäkerhetslag, Cybersecurity Risk-Management Measures, Sweden

• Data Security Law, Risk Monitoring and Incident Reporting Duty, China
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union

• Data Security Law, Risk Monitoring and Incident Reporting Duty, China
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union

• Data Security Law, Risk Monitoring and Incident Reporting Duty, China
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union

• Data Security Law, Risk Monitoring and Incident Reporting Duty, China
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union

• Data Security Law, Risk Monitoring and Incident Reporting Duty, China
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union

• Data Security Law, Risk Monitoring and Incident Reporting Duty, China
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union

• Data Security Law, Risk Monitoring and Incident Reporting Duty, China
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union

• Security Standards for Smart Devices, Australia
• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• Cyber Resilience Act, Essential Requirements and Manufacturer Obligations, European Union from 11 Dec 2027, in 14 months
• EUCC Certification Scheme, Vulnerability Management by the Holder of a Certificate, European Union
• Law 4961/2022 (Ν. 4961/2022), Chapter Γ' of Part B, Cybersecurity of Internet of Things Devices, Greece
• Legge 28 giugno 2024, n. 90, Incident Notification and Vulnerability Remediation Duties, Italy
• Nacionālās kiberdrošības likums, Coordinated Vulnerability Disclosure and Remediation, Latvia
• Product Security Requirements for Connectable Products, United Kingdom

• Security Standards for Smart Devices, Australia
• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• Cyber Resilience Act, Essential Requirements and Manufacturer Obligations, European Union from 11 Dec 2027, in 14 months
• EUCC Certification Scheme, Vulnerability Management by the Holder of a Certificate, European Union
• Law 4961/2022 (Ν. 4961/2022), Chapter Γ' of Part B, Cybersecurity of Internet of Things Devices, Greece
• Legge 28 giugno 2024, n. 90, Incident Notification and Vulnerability Remediation Duties, Italy
• Nacionālās kiberdrošības likums, Coordinated Vulnerability Disclosure and Remediation, Latvia
• Product Security Requirements for Connectable Products, United Kingdom

• Security Standards for Smart Devices, Australia
• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• Cyber Resilience Act, Essential Requirements and Manufacturer Obligations, European Union from 11 Dec 2027, in 14 months
• EUCC Certification Scheme, Vulnerability Management by the Holder of a Certificate, European Union
• Law 4961/2022 (Ν. 4961/2022), Chapter Γ' of Part B, Cybersecurity of Internet of Things Devices, Greece
• Legge 28 giugno 2024, n. 90, Incident Notification and Vulnerability Remediation Duties, Italy
• Nacionālās kiberdrošības likums, Coordinated Vulnerability Disclosure and Remediation, Latvia
• Product Security Requirements for Connectable Products, United Kingdom

• Security Standards for Smart Devices, Australia
• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• Cyber Resilience Act, Essential Requirements and Manufacturer Obligations, European Union from 11 Dec 2027, in 14 months
• EUCC Certification Scheme, Vulnerability Management by the Holder of a Certificate, European Union
• Law 4961/2022 (Ν. 4961/2022), Chapter Γ' of Part B, Cybersecurity of Internet of Things Devices, Greece
• Legge 28 giugno 2024, n. 90, Incident Notification and Vulnerability Remediation Duties, Italy
• Nacionālās kiberdrošības likums, Coordinated Vulnerability Disclosure and Remediation, Latvia
• Product Security Requirements for Connectable Products, United Kingdom

• Security Standards for Smart Devices, Australia
• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• Cyber Resilience Act, Essential Requirements and Manufacturer Obligations, European Union from 11 Dec 2027, in 14 months
• EUCC Certification Scheme, Vulnerability Management by the Holder of a Certificate, European Union
• Law 4961/2022 (Ν. 4961/2022), Chapter Γ' of Part B, Cybersecurity of Internet of Things Devices, Greece
• Legge 28 giugno 2024, n. 90, Incident Notification and Vulnerability Remediation Duties, Italy
• Nacionālās kiberdrošības likums, Coordinated Vulnerability Disclosure and Remediation, Latvia
• Product Security Requirements for Connectable Products, United Kingdom

• Security Standards for Smart Devices, Australia
• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• Cyber Resilience Act, Essential Requirements and Manufacturer Obligations, European Union from 11 Dec 2027, in 14 months
• EUCC Certification Scheme, Vulnerability Management by the Holder of a Certificate, European Union
• Law 4961/2022 (Ν. 4961/2022), Chapter Γ' of Part B, Cybersecurity of Internet of Things Devices, Greece
• Legge 28 giugno 2024, n. 90, Incident Notification and Vulnerability Remediation Duties, Italy
• Nacionālās kiberdrošības likums, Coordinated Vulnerability Disclosure and Remediation, Latvia
• Product Security Requirements for Connectable Products, United Kingdom

• Security Standards for Smart Devices, Australia
• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• Cyber Resilience Act, Essential Requirements and Manufacturer Obligations, European Union from 11 Dec 2027, in 14 months
• EUCC Certification Scheme, Vulnerability Management by the Holder of a Certificate, European Union
• Law 4961/2022 (Ν. 4961/2022), Chapter Γ' of Part B, Cybersecurity of Internet of Things Devices, Greece
• Legge 28 giugno 2024, n. 90, Incident Notification and Vulnerability Remediation Duties, Italy
• Nacionālās kiberdrošības likums, Coordinated Vulnerability Disclosure and Remediation, Latvia
• Product Security Requirements for Connectable Products, United Kingdom

• Commission Implementing Regulation (EU) 2025/2392, Technical Description of Important and Critical Products with Digital Elements, European Union
• Laki sosiaali- ja terveydenhuollon asiakastietojen käsittelystä, Essential Requirements and Certification of Health and Social Care Information Systems, Finland
• Law on Information Security, Essential and Important Entities, Montenegro
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia
• Cybersecurity Act 2025, Critical Infrastructure Operator Obligations, Tonga from a date not yet set

• Digital Code, Book II: Electronic Communications Network and Service Security, Djibouti
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia
• Cybersecurity Act 2025, Critical Infrastructure Operator Obligations, Tonga from a date not yet set

• Digital Code, Book II: Electronic Communications Network and Service Security, Djibouti
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia
• Cybersecurity Act 2025, Critical Infrastructure Operator Obligations, Tonga from a date not yet set

• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia
• Cybersecurity Act 2025, Critical Infrastructure Operator Obligations, Tonga from a date not yet set

• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia
• Cybersecurity Act 2025, Critical Infrastructure Operator Obligations, Tonga from a date not yet set

• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia
• Cybersecurity Act 2025, Critical Infrastructure Operator Obligations, Tonga from a date not yet set

• DFS Advisory: Heightened Cybersecurity Risks Associated with Frontier AI Models, New York
• Lag (2024:1278), DORA Supplementary Provisions, Sweden

• DFS Advisory: Heightened Cybersecurity Risks Associated with Frontier AI Models, New York
• Lag (2024:1278), DORA Supplementary Provisions, Sweden

• DFS Advisory: Heightened Cybersecurity Risks Associated with Frontier AI Models, New York
• Lag (2024:1278), DORA Supplementary Provisions, Sweden

• DFS Advisory: Heightened Cybersecurity Risks Associated with Frontier AI Models, New York
• Lag (2024:1278), DORA Supplementary Provisions, Sweden

• DFS Advisory: Heightened Cybersecurity Risks Associated with Frontier AI Models, New York
• Lag (2024:1278), DORA Supplementary Provisions, Sweden

• DFS Advisory: Heightened Cybersecurity Risks Associated with Frontier AI Models, New York
• Lag (2024:1278), DORA Supplementary Provisions, Sweden

• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union

• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union

• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union

• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union

• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union

• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union

• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union

• Lei de Protecção das Redes e Sistemas Informáticos, Incident-Management Planning, Alert Dissemination and CERT Coordination Duties, Angola
• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Act No. 32/2025 Coll. (Digitalisation of the Financial Market), DORA Provisions for Banks and Savings and Credit Co-operatives, Czech Republic
• Digital Code, Livre II: Trust Service Provider Security Risk-Management Duty, Democratic Republic of the Congo
• Act Amending the Financial Supervision Authority Act and Other Acts (DORA Implementation), Credit Institution ICT Risk and Incident Notification, Estonia
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Article 17 (ICT-Related Incident Management Process and Recording of Incidents), European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union

and 16 more, every one in the free file.

• Lei de Protecção das Redes e Sistemas Informáticos, Incident-Management Planning, Alert Dissemination and CERT Coordination Duties, Angola
• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Act No. 32/2025 Coll. (Digitalisation of the Financial Market), DORA Provisions for Banks and Savings and Credit Co-operatives, Czech Republic
• Digital Code, Livre II: Trust Service Provider Security Risk-Management Duty, Democratic Republic of the Congo
• Act Amending the Financial Supervision Authority Act and Other Acts (DORA Implementation), Credit Institution ICT Risk and Incident Notification, Estonia
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Article 17 (ICT-Related Incident Management Process and Recording of Incidents), European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union

and 15 more, every one in the free file.

• Lei de Protecção das Redes e Sistemas Informáticos, Incident-Management Planning, Alert Dissemination and CERT Coordination Duties, Angola
• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Act No. 32/2025 Coll. (Digitalisation of the Financial Market), DORA Provisions for Banks and Savings and Credit Co-operatives, Czech Republic
• Digital Code, Livre II: Trust Service Provider Security Risk-Management Duty, Democratic Republic of the Congo
• Act Amending the Financial Supervision Authority Act and Other Acts (DORA Implementation), Credit Institution ICT Risk and Incident Notification, Estonia
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Article 17 (ICT-Related Incident Management Process and Recording of Incidents), European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union

and 15 more, every one in the free file.

• Lei de Protecção das Redes e Sistemas Informáticos, Incident-Management Planning, Alert Dissemination and CERT Coordination Duties, Angola
• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Act No. 32/2025 Coll. (Digitalisation of the Financial Market), DORA Provisions for Banks and Savings and Credit Co-operatives, Czech Republic
• Digital Code, Livre II: Trust Service Provider Security Risk-Management Duty, Democratic Republic of the Congo
• Act Amending the Financial Supervision Authority Act and Other Acts (DORA Implementation), Credit Institution ICT Risk and Incident Notification, Estonia
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Article 17 (ICT-Related Incident Management Process and Recording of Incidents), European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union

and 15 more, every one in the free file.

• Lei de Protecção das Redes e Sistemas Informáticos, Incident-Management Planning, Alert Dissemination and CERT Coordination Duties, Angola
• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Act No. 32/2025 Coll. (Digitalisation of the Financial Market), DORA Provisions for Banks and Savings and Credit Co-operatives, Czech Republic
• Digital Code, Livre II: Trust Service Provider Security Risk-Management Duty, Democratic Republic of the Congo
• Act Amending the Financial Supervision Authority Act and Other Acts (DORA Implementation), Credit Institution ICT Risk and Incident Notification, Estonia
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Article 17 (ICT-Related Incident Management Process and Recording of Incidents), European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union

and 15 more, every one in the free file.

• Lei de Protecção das Redes e Sistemas Informáticos, Incident-Management Planning, Alert Dissemination and CERT Coordination Duties, Angola
• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Act No. 32/2025 Coll. (Digitalisation of the Financial Market), DORA Provisions for Banks and Savings and Credit Co-operatives, Czech Republic
• Digital Code, Livre II: Trust Service Provider Security Risk-Management Duty, Democratic Republic of the Congo
• Act Amending the Financial Supervision Authority Act and Other Acts (DORA Implementation), Credit Institution ICT Risk and Incident Notification, Estonia
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Article 17 (ICT-Related Incident Management Process and Recording of Incidents), European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union

and 15 more, every one in the free file.

• Lei de Protecção das Redes e Sistemas Informáticos, Incident-Management Planning, Alert Dissemination and CERT Coordination Duties, Angola
• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Act No. 32/2025 Coll. (Digitalisation of the Financial Market), DORA Provisions for Banks and Savings and Credit Co-operatives, Czech Republic
• Digital Code, Livre II: Trust Service Provider Security Risk-Management Duty, Democratic Republic of the Congo
• Act Amending the Financial Supervision Authority Act and Other Acts (DORA Implementation), Credit Institution ICT Risk and Incident Notification, Estonia
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Article 17 (ICT-Related Incident Management Process and Recording of Incidents), European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union

and 15 more, every one in the free file.

• Lei de Protecção das Redes e Sistemas Informáticos, Incident-Management Planning, Alert Dissemination and CERT Coordination Duties, Angola
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• Bank and Financial Holding Company Internal Control Rules, Dedicated Information Security Unit, Taiwan
• Cyber Security Management Act, Cyber Security Incident Reporting, Taiwan
• Cybersecurity Act 2025, Critical Infrastructure Operator Obligations, Tonga from a date not yet set
• Cybersecurity Incident Reporting and Emergency Response, Tunisia
• Cybersecurity Law, Incident Response and Reporting Duties, Vietnam
• Cyber and Data Protection Regulations 2024, security breach notification, Zimbabwe

• Lei de Protecção das Redes e Sistemas Informáticos, Incident-Management Planning, Alert Dissemination and CERT Coordination Duties, Angola
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• Bank and Financial Holding Company Internal Control Rules, Dedicated Information Security Unit, Taiwan
• Cyber Security Management Act, Cyber Security Incident Reporting, Taiwan
• Cybersecurity Act 2025, Critical Infrastructure Operator Obligations, Tonga from a date not yet set
• Cybersecurity Incident Reporting and Emergency Response, Tunisia
• Cybersecurity Law, Incident Response and Reporting Duties, Vietnam
• Cyber and Data Protection Regulations 2024, security breach notification, Zimbabwe

• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• Bank and Financial Holding Company Internal Control Rules, Dedicated Information Security Unit, Taiwan

• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• Bank and Financial Holding Company Internal Control Rules, Dedicated Information Security Unit, Taiwan

• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• Bank and Financial Holding Company Internal Control Rules, Dedicated Information Security Unit, Taiwan

• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia
• Bank and Financial Holding Company Internal Control Rules, Dedicated Information Security Unit, Taiwan

• Banque du Liban Basic Circular No. 144 (Prevention of Electronic Criminal Acts), Lebanon
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment, New York
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia

• Banque du Liban Basic Circular No. 144 (Prevention of Electronic Criminal Acts), Lebanon
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment, New York
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia

• Banque du Liban Basic Circular No. 144 (Prevention of Electronic Criminal Acts), Lebanon
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment, New York
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia

• Banque du Liban Basic Circular No. 144 (Prevention of Electronic Criminal Acts), Lebanon
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment, New York
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia

• Banque du Liban Basic Circular No. 144 (Prevention of Electronic Criminal Acts), Lebanon
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment, New York
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia

• Banque du Liban Basic Circular No. 144 (Prevention of Electronic Criminal Acts), Lebanon
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment, New York
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia

• Banque du Liban Basic Circular No. 144 (Prevention of Electronic Criminal Acts), Lebanon
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment, New York
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia

• Law of 17 February 2022 (Electronic Communications Act Article 105), Ministerial Authorization for 5G Network Elements and Location of 5G Infrastructure, Belgium
• Digital Code, Title III: Personal Data Protection, Democratic Republic of the Congo
• Data Act, Essential Requirements for Smart Contracts That Execute Data Sharing Agreements, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• Personal Data Protection Act 2025, government personal-data protection principles, Marshall Islands
• Standards for the Protection of Personal Information of Residents of the Commonwealth, Massachusetts
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment, New York
• New York Department of Financial Services Cybersecurity Regulation, Access Privileges and Management, New York

and 3 more, every one in the free file.

• Law of 17 February 2022 (Electronic Communications Act Article 105), Ministerial Authorization for 5G Network Elements and Location of 5G Infrastructure, Belgium
• Digital Code, Title III: Personal Data Protection, Democratic Republic of the Congo
• Data Act, Essential Requirements for Smart Contracts That Execute Data Sharing Agreements, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• Personal Data Protection Act 2025, government personal-data protection principles, Marshall Islands
• Standards for the Protection of Personal Information of Residents of the Commonwealth, Massachusetts
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment, New York
• New York Department of Financial Services Cybersecurity Regulation, Access Privileges and Management, New York

and 3 more, every one in the free file.

• Law of 17 February 2022 (Electronic Communications Act Article 105), Ministerial Authorization for 5G Network Elements and Location of 5G Infrastructure, Belgium
• Digital Code, Title III: Personal Data Protection, Democratic Republic of the Congo
• Data Act, Essential Requirements for Smart Contracts That Execute Data Sharing Agreements, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• Personal Data Protection Act 2025, government personal-data protection principles, Marshall Islands
• Standards for the Protection of Personal Information of Residents of the Commonwealth, Massachusetts
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment, New York
• New York Department of Financial Services Cybersecurity Regulation, Access Privileges and Management, New York

and 3 more, every one in the free file.

• Law of 17 February 2022 (Electronic Communications Act Article 105), Ministerial Authorization for 5G Network Elements and Location of 5G Infrastructure, Belgium
• Digital Code, Title III: Personal Data Protection, Democratic Republic of the Congo
• Data Act, Essential Requirements for Smart Contracts That Execute Data Sharing Agreements, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• Personal Data Protection Act 2025, government personal-data protection principles, Marshall Islands
• Standards for the Protection of Personal Information of Residents of the Commonwealth, Massachusetts
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment, New York
• New York Department of Financial Services Cybersecurity Regulation, Access Privileges and Management, New York

and 3 more, every one in the free file.

• Law of 17 February 2022 (Electronic Communications Act Article 105), Ministerial Authorization for 5G Network Elements and Location of 5G Infrastructure, Belgium
• Digital Code, Title III: Personal Data Protection, Democratic Republic of the Congo
• Data Act, Essential Requirements for Smart Contracts That Execute Data Sharing Agreements, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• Personal Data Protection Act 2025, government personal-data protection principles, Marshall Islands
• Standards for the Protection of Personal Information of Residents of the Commonwealth, Massachusetts
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment, New York
• New York Department of Financial Services Cybersecurity Regulation, Access Privileges and Management, New York

and 3 more, every one in the free file.

• Law of 17 February 2022 (Electronic Communications Act Article 105), Ministerial Authorization for 5G Network Elements and Location of 5G Infrastructure, Belgium
• Digital Code, Title III: Personal Data Protection, Democratic Republic of the Congo
• Data Act, Essential Requirements for Smart Contracts That Execute Data Sharing Agreements, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• Personal Data Protection Act 2025, government personal-data protection principles, Marshall Islands
• Standards for the Protection of Personal Information of Residents of the Commonwealth, Massachusetts
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment, New York
• New York Department of Financial Services Cybersecurity Regulation, Access Privileges and Management, New York

and 3 more, every one in the free file.

• Law of 17 February 2022 (Electronic Communications Act Article 105), Ministerial Authorization for 5G Network Elements and Location of 5G Infrastructure, Belgium
• Digital Code, Title III: Personal Data Protection, Democratic Republic of the Congo
• Data Act, Essential Requirements for Smart Contracts That Execute Data Sharing Agreements, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• Personal Data Protection Act 2025, government personal-data protection principles, Marshall Islands
• Standards for the Protection of Personal Information of Residents of the Commonwealth, Massachusetts
• DFS Guidance: Cybersecurity Risks Arising from Artificial Intelligence and Strategies to Combat Related Risks, New York
• DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment, New York
• New York Department of Financial Services Cybersecurity Regulation, Access Privileges and Management, New York

and 3 more, every one in the free file.

• Data Security Law, Data Security Protection Obligations, China
• Cyberbeveiligingsbesluit, Security Measures and Incident Notification Details, Netherlands

• Data Security Law, Data Security Protection Obligations, China
• Cyberbeveiligingsbesluit, Security Measures and Incident Notification Details, Netherlands

• Nacionālās kiberdrošības likums, Cybersecurity Risk-Management Measures, Latvia
• Data Protection Act, Saint Lucia

• Nacionālās kiberdrošības likums, Cybersecurity Risk-Management Measures, Latvia
• Data Protection Act, Saint Lucia

• Nacionālās kiberdrošības likums, Cybersecurity Risk-Management Measures, Latvia
• Data Protection Act, Saint Lucia

• Nacionālās kiberdrošības likums, Cybersecurity Risk-Management Measures, Latvia
• Data Protection Act, Saint Lucia

• Nacionālās kiberdrošības likums, Cybersecurity Risk-Management Measures, Latvia
• Data Protection Act, Saint Lucia

• Nacionālās kiberdrošības likums, Cybersecurity Risk-Management Measures, Latvia
• Data Protection Act, Saint Lucia

• Data Security Law, Data Security Protection Obligations, China
• Cyberbeveiligingsbesluit, Security Measures and Incident Notification Details, Netherlands

• Nacionālās kiberdrošības likums, Cybersecurity Risk-Management Measures, Latvia
• Data Protection Act, Saint Lucia

• Data Security Law, Data Security Protection Obligations, China
• Cyberbeveiligingsbesluit, Security Measures and Incident Notification Details, Netherlands

• Data Security Law, Data Security Protection Obligations, China
• Cyberbeveiligingsbesluit, Security Measures and Incident Notification Details, Netherlands

• Data Security Law, Data Security Protection Obligations, China
• Cyberbeveiligingsbesluit, Security Measures and Incident Notification Details, Netherlands

• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic
• Act on Security and Preparedness in the Telecoms Sector (Lov om sikkerhed og beredskab i telesektoren), Security Risk Management Measures, Denmark
• NIS 2-loven, Cybersecurity Risk-Management Measures and Registration, Denmark
• Küberturvalisuse seadus (KüTS), System Security Measures and Management-Body Duties, Estonia
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• NIS2 Directive, Cybersecurity Risk-Management Measures, European Union

and 14 more, every one in the free file.

• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic
• Act on Security and Preparedness in the Telecoms Sector (Lov om sikkerhed og beredskab i telesektoren), Security Risk Management Measures, Denmark
• NIS 2-loven, Cybersecurity Risk-Management Measures and Registration, Denmark
• Küberturvalisuse seadus (KüTS), System Security Measures and Management-Body Duties, Estonia
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• NIS2 Directive, Cybersecurity Risk-Management Measures, European Union

and 14 more, every one in the free file.

• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic
• Act on Security and Preparedness in the Telecoms Sector (Lov om sikkerhed og beredskab i telesektoren), Security Risk Management Measures, Denmark
• NIS 2-loven, Cybersecurity Risk-Management Measures and Registration, Denmark
• Küberturvalisuse seadus (KüTS), System Security Measures and Management-Body Duties, Estonia
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• NIS2 Directive, Cybersecurity Risk-Management Measures, European Union

and 14 more, every one in the free file.

• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic
• Act on Security and Preparedness in the Telecoms Sector (Lov om sikkerhed og beredskab i telesektoren), Security Risk Management Measures, Denmark
• NIS 2-loven, Cybersecurity Risk-Management Measures and Registration, Denmark
• Küberturvalisuse seadus (KüTS), System Security Measures and Management-Body Duties, Estonia
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• NIS2 Directive, Cybersecurity Risk-Management Measures, European Union

and 14 more, every one in the free file.

• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic
• Act on Security and Preparedness in the Telecoms Sector (Lov om sikkerhed og beredskab i telesektoren), Security Risk Management Measures, Denmark
• NIS 2-loven, Cybersecurity Risk-Management Measures and Registration, Denmark
• Küberturvalisuse seadus (KüTS), System Security Measures and Management-Body Duties, Estonia
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• NIS2 Directive, Cybersecurity Risk-Management Measures, European Union

and 14 more, every one in the free file.

• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Cybersecurity Risk-Management Measures, Austria
• Cybersecurity Act, Risk-Management Measures and Governance (Zakon za kibersigurnost, ZKS), Bulgaria
• Zakon o kibernetičkoj sigurnosti, Risk-Management Measures and Governance, Croatia
• Security of Networks and Information Systems Law, Cybersecurity Risk-Management Measures and Governance, Cyprus
• Decree on the Security Measures of a Provider of a Regulated Service in the Higher-Obligations Regime (Vyhláška č. 409/2025 Sb.), Czech Republic
• Act on Security and Preparedness in the Telecoms Sector (Lov om sikkerhed og beredskab i telesektoren), Security Risk Management Measures, Denmark
• NIS 2-loven, Cybersecurity Risk-Management Measures and Registration, Denmark
• Küberturvalisuse seadus (KüTS), System Security Measures and Management-Body Duties, Estonia
• DORA, Articles 5-16 (ICT Risk Management Framework), European Union
• NIS2 Directive, Cybersecurity Risk-Management Measures, European Union

and 14 more, every one in the free file.

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Law No. 124/2024 On the Protection of Personal Data, Albania
• Loi n° 18-07 relative à la protection des personnes physiques dans le traitement des données à caractère personnel, modifiée et complétée par la loi n° 25-11, Algeria
• LQPD, Llei 29/2021 del 28 d'octubre, Andorra
• Law on the Protection of Personal Data, Angola
• Law on the Protection of Personal Data, sensitive data categories, Angola
• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Data Protection Act, 2013, Antigua and Barbuda
• Ley 25.326, Ley de Protección de los Datos Personales, Argentina
• Act 952 of 2025 (HB1717), Arkansas Children and Teens' Online Privacy Protection Act, Arkansas

and 103 more, every one in the free file.

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Law No. 124/2024 On the Protection of Personal Data, Albania
• Loi n° 18-07 relative à la protection des personnes physiques dans le traitement des données à caractère personnel, modifiée et complétée par la loi n° 25-11, Algeria
• LQPD, Llei 29/2021 del 28 d'octubre, Andorra
• Law on the Protection of Personal Data, Angola
• Law on the Protection of Personal Data, sensitive data categories, Angola
• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Data Protection Act, 2013, Antigua and Barbuda
• Ley 25.326, Ley de Protección de los Datos Personales, Argentina
• Act 952 of 2025 (HB1717), Arkansas Children and Teens' Online Privacy Protection Act, Arkansas

and 102 more, every one in the free file.

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Law No. 124/2024 On the Protection of Personal Data, Albania
• Loi n° 18-07 relative à la protection des personnes physiques dans le traitement des données à caractère personnel, modifiée et complétée par la loi n° 25-11, Algeria
• LQPD, Llei 29/2021 del 28 d'octubre, Andorra
• Law on the Protection of Personal Data, Angola
• Law on the Protection of Personal Data, sensitive data categories, Angola
• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Data Protection Act, 2013, Antigua and Barbuda
• Ley 25.326, Ley de Protección de los Datos Personales, Argentina
• Act 952 of 2025 (HB1717), Arkansas Children and Teens' Online Privacy Protection Act, Arkansas

and 102 more, every one in the free file.

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Law No. 124/2024 On the Protection of Personal Data, Albania
• Loi n° 18-07 relative à la protection des personnes physiques dans le traitement des données à caractère personnel, modifiée et complétée par la loi n° 25-11, Algeria
• LQPD, Llei 29/2021 del 28 d'octubre, Andorra
• Law on the Protection of Personal Data, Angola
• Law on the Protection of Personal Data, sensitive data categories, Angola
• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Data Protection Act, 2013, Antigua and Barbuda
• Ley 25.326, Ley de Protección de los Datos Personales, Argentina
• Act 952 of 2025 (HB1717), Arkansas Children and Teens' Online Privacy Protection Act, Arkansas

and 102 more, every one in the free file.

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Law No. 124/2024 On the Protection of Personal Data, Albania
• Loi n° 18-07 relative à la protection des personnes physiques dans le traitement des données à caractère personnel, modifiée et complétée par la loi n° 25-11, Algeria
• LQPD, Llei 29/2021 del 28 d'octubre, Andorra
• Law on the Protection of Personal Data, Angola
• Law on the Protection of Personal Data, sensitive data categories, Angola
• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Data Protection Act, 2013, Antigua and Barbuda
• Ley 25.326, Ley de Protección de los Datos Personales, Argentina
• Act 952 of 2025 (HB1717), Arkansas Children and Teens' Online Privacy Protection Act, Arkansas

and 102 more, every one in the free file.

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Law No. 124/2024 On the Protection of Personal Data, Albania
• Loi n° 18-07 relative à la protection des personnes physiques dans le traitement des données à caractère personnel, modifiée et complétée par la loi n° 25-11, Algeria
• LQPD, Llei 29/2021 del 28 d'octubre, Andorra
• Law on the Protection of Personal Data, Angola
• Law on the Protection of Personal Data, sensitive data categories, Angola
• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Data Protection Act, 2013, Antigua and Barbuda
• Ley 25.326, Ley de Protección de los Datos Personales, Argentina
• Act 952 of 2025 (HB1717), Arkansas Children and Teens' Online Privacy Protection Act, Arkansas

and 102 more, every one in the free file.

• Data Breach Notification Act, reasonable security measures and disposal of records, Alabama
• Law No. 124/2024 On the Protection of Personal Data, Albania
• Loi n° 18-07 relative à la protection des personnes physiques dans le traitement des données à caractère personnel, modifiée et complétée par la loi n° 25-11, Algeria
• LQPD, Llei 29/2021 del 28 d'octubre, Andorra
• Law on the Protection of Personal Data, Angola
• Law on the Protection of Personal Data, sensitive data categories, Angola
• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Data Protection Act, 2013, Antigua and Barbuda
• Ley 25.326, Ley de Protección de los Datos Personales, Argentina
• Act 952 of 2025 (HB1717), Arkansas Children and Teens' Online Privacy Protection Act, Arkansas

and 102 more, every one in the free file.

• Loi n°007/PR/2015, principes directeurs du traitement des données (consentement, licéité, finalité, conservation), Chad
• Protection of Children (Online Age Verification) Bill 2026, Ireland proposed
• Insurance Sector Law Article 181-3, Lawful Processing of Health Data by Insurers and Reinsurers, Luxembourg
• Ley No. 787, Ley de Protección de Datos Personales, Nicaragua
• Ley 81 de 2019, Sobre Protección de Datos Personales, Panama
• Ley N° 6534/2020, de Protección de Datos Personales Crediticios, Paraguay
• Law No. 12 of 2024 on Protection of Electronic Personal Data, Syria
• General Regulation on the Protection of Personal Data for Vatican City State, Vatican City
• Data Protection Act, 2021, personal data processing framework, Zambia

• Protection of Children (Online Age Verification) Bill 2026, Ireland proposed
• Insurance Sector Law Article 181-3, Lawful Processing of Health Data by Insurers and Reinsurers, Luxembourg
• Ley No. 787, Ley de Protección de Datos Personales, Nicaragua
• Ley 81 de 2019, Sobre Protección de Datos Personales, Panama
• Ley N° 6534/2020, de Protección de Datos Personales Crediticios, Paraguay
• Law No. 12 of 2024 on Protection of Electronic Personal Data, Syria
• General Regulation on the Protection of Personal Data for Vatican City State, Vatican City
• Data Protection Act, 2021, personal data processing framework, Zambia

• Law No. 133/V/2001 on the Protection of Personal Data, sensitive data categories, Cabo Verde
• Insurance Sector Law Article 181-3, Lawful Processing of Health Data by Insurers and Reinsurers, Luxembourg
• Ley No. 787, Ley de Protección de Datos Personales, Nicaragua
• Law No. 12 of 2024 on Protection of Electronic Personal Data, Syria
• General Regulation on the Protection of Personal Data for Vatican City State, Vatican City
• Data Protection Act, 2021, personal data processing framework, Zambia

• Insurance Sector Law Article 181-3, Lawful Processing of Health Data by Insurers and Reinsurers, Luxembourg
• Ley No. 787, Ley de Protección de Datos Personales, Nicaragua
• Law No. 12 of 2024 on Protection of Electronic Personal Data, Syria
• General Regulation on the Protection of Personal Data for Vatican City State, Vatican City
• Data Protection Act, 2021, personal data processing framework, Zambia

• Insurance Sector Law Article 181-3, Lawful Processing of Health Data by Insurers and Reinsurers, Luxembourg
• Ley No. 787, Ley de Protección de Datos Personales, Nicaragua
• Law No. 12 of 2024 on Protection of Electronic Personal Data, Syria
• General Regulation on the Protection of Personal Data for Vatican City State, Vatican City
• Data Protection Act, 2021, personal data processing framework, Zambia

• Insurance Sector Law Article 181-3, Lawful Processing of Health Data by Insurers and Reinsurers, Luxembourg
• Ley No. 787, Ley de Protección de Datos Personales, Nicaragua
• Law No. 12 of 2024 on Protection of Electronic Personal Data, Syria
• General Regulation on the Protection of Personal Data for Vatican City State, Vatican City
• Data Protection Act, 2021, personal data processing framework, Zambia

• Payment Services Technical Standards on Strong Customer Authentication, Personalized Security Credentials and Common and Secure Open Standards of Communication, European Union
• Telekommunikationsgesetz (TKG), Section 165 Technical and Organisational Protective Measures, Germany
• Wertpapierhandelsgesetz (WpHG), Section 80 ICT Systems and Security Mechanisms of Investment Services Firms, Germany
• Data Classification Policy, Kuwait
• Standards for the Protection of Personal Information of Residents of the Commonwealth, Massachusetts
• Security measures for a data collector accepting payment cards, encryption duty, and conditioned liability shield, Nevada
• New York Department of Financial Services Cybersecurity Regulation, Encryption of Nonpublic Information, New York
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia

• Payment Services Technical Standards on Strong Customer Authentication, Personalized Security Credentials and Common and Secure Open Standards of Communication, European Union
• Telekommunikationsgesetz (TKG), Section 165 Technical and Organisational Protective Measures, Germany
• Wertpapierhandelsgesetz (WpHG), Section 80 ICT Systems and Security Mechanisms of Investment Services Firms, Germany
• Data Classification Policy, Kuwait
• Standards for the Protection of Personal Information of Residents of the Commonwealth, Massachusetts
• Security measures for a data collector accepting payment cards, encryption duty, and conditioned liability shield, Nevada
• New York Department of Financial Services Cybersecurity Regulation, Encryption of Nonpublic Information, New York
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia

• Payment Services Technical Standards on Strong Customer Authentication, Personalized Security Credentials and Common and Secure Open Standards of Communication, European Union
• Telekommunikationsgesetz (TKG), Section 165 Technical and Organisational Protective Measures, Germany
• Wertpapierhandelsgesetz (WpHG), Section 80 ICT Systems and Security Mechanisms of Investment Services Firms, Germany
• Data Classification Policy, Kuwait
• Standards for the Protection of Personal Information of Residents of the Commonwealth, Massachusetts
• Security measures for a data collector accepting payment cards, encryption duty, and conditioned liability shield, Nevada
• New York Department of Financial Services Cybersecurity Regulation, Encryption of Nonpublic Information, New York
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia

• Payment Services Technical Standards on Strong Customer Authentication, Personalized Security Credentials and Common and Secure Open Standards of Communication, European Union
• Telekommunikationsgesetz (TKG), Section 165 Technical and Organisational Protective Measures, Germany
• Wertpapierhandelsgesetz (WpHG), Section 80 ICT Systems and Security Mechanisms of Investment Services Firms, Germany
• Data Classification Policy, Kuwait
• Standards for the Protection of Personal Information of Residents of the Commonwealth, Massachusetts
• Security measures for a data collector accepting payment cards, encryption duty, and conditioned liability shield, Nevada
• New York Department of Financial Services Cybersecurity Regulation, Encryption of Nonpublic Information, New York
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia

• Payment Services Technical Standards on Strong Customer Authentication, Personalized Security Credentials and Common and Secure Open Standards of Communication, European Union
• Telekommunikationsgesetz (TKG), Section 165 Technical and Organisational Protective Measures, Germany
• Wertpapierhandelsgesetz (WpHG), Section 80 ICT Systems and Security Mechanisms of Investment Services Firms, Germany
• Data Classification Policy, Kuwait
• Standards for the Protection of Personal Information of Residents of the Commonwealth, Massachusetts
• Security measures for a data collector accepting payment cards, encryption duty, and conditioned liability shield, Nevada
• New York Department of Financial Services Cybersecurity Regulation, Encryption of Nonpublic Information, New York
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia

• Payment Services Technical Standards on Strong Customer Authentication, Personalized Security Credentials and Common and Secure Open Standards of Communication, European Union
• Telekommunikationsgesetz (TKG), Section 165 Technical and Organisational Protective Measures, Germany
• Wertpapierhandelsgesetz (WpHG), Section 80 ICT Systems and Security Mechanisms of Investment Services Firms, Germany
• Data Classification Policy, Kuwait
• Standards for the Protection of Personal Information of Residents of the Commonwealth, Massachusetts
• Security measures for a data collector accepting payment cards, encryption duty, and conditioned liability shield, Nevada
• New York Department of Financial Services Cybersecurity Regulation, Encryption of Nonpublic Information, New York
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia

• Payment Services Technical Standards on Strong Customer Authentication, Personalized Security Credentials and Common and Secure Open Standards of Communication, European Union
• Telekommunikationsgesetz (TKG), Section 165 Technical and Organisational Protective Measures, Germany
• Wertpapierhandelsgesetz (WpHG), Section 80 ICT Systems and Security Mechanisms of Investment Services Firms, Germany
• Data Classification Policy, Kuwait
• Standards for the Protection of Personal Information of Residents of the Commonwealth, Massachusetts
• Security measures for a data collector accepting payment cards, encryption duty, and conditioned liability shield, Nevada
• New York Department of Financial Services Cybersecurity Regulation, Encryption of Nonpublic Information, New York
• Law on Information Security, ICT Systems of Special Importance and Security Measures, Serbia

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• BRH Circulaire 126, Information Security Rules for Financial Institutions, Haiti

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• BRH Circulaire 126, Information Security Rules for Financial Institutions, Haiti

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• BRH Circulaire 126, Information Security Rules for Financial Institutions, Haiti

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• BRH Circulaire 126, Information Security Rules for Financial Institutions, Haiti

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• BRH Circulaire 126, Information Security Rules for Financial Institutions, Haiti

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• BRH Circulaire 126, Information Security Rules for Financial Institutions, Haiti

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• BRH Circulaire 126, Information Security Rules for Financial Institutions, Haiti

• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Cyberbeveiligingsbesluit, Security Measures and Incident Notification Details, Netherlands

• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Cyberbeveiligingsbesluit, Security Measures and Incident Notification Details, Netherlands

• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Cyberbeveiligingsbesluit, Security Measures and Incident Notification Details, Netherlands

• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Cyberbeveiligingsbesluit, Security Measures and Incident Notification Details, Netherlands

• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Cyberbeveiligingsbesluit, Security Measures and Incident Notification Details, Netherlands

• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Cyberbeveiligingsbesluit, Security Measures and Incident Notification Details, Netherlands

• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Cyberbeveiligingsbesluit, Security Measures and Incident Notification Details, Netherlands

• Security Standards for Smart Devices, Australia
• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Cybersecurity Law, Network Product and Service Security Duties, China

• Security Standards for Smart Devices, Australia
• Cybersecurity Law, Network Product and Service Security Duties, China

• Cyber Resilience Act, Essential Requirements and Manufacturer Obligations, European Union from 11 Dec 2027, in 14 months
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union

• Cyber Resilience Act, Essential Requirements and Manufacturer Obligations, European Union from 11 Dec 2027, in 14 months
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union

• Cyber Resilience Act, Essential Requirements and Manufacturer Obligations, European Union from 11 Dec 2027, in 14 months
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union

• Cyber Resilience Act, Essential Requirements and Manufacturer Obligations, European Union from 11 Dec 2027, in 14 months
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union

• Cyber Resilience Act, Essential Requirements and Manufacturer Obligations, European Union from 11 Dec 2027, in 14 months
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union

• Cyber Resilience Act, Essential Requirements and Manufacturer Obligations, European Union from 11 Dec 2027, in 14 months
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union

• Cyber Resilience Act, Essential Requirements and Manufacturer Obligations, European Union from 11 Dec 2027, in 14 months
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union

• AI Act, Article 12 (record-keeping), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 19 (automatically generated logs), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 26(6) (deployer log-keeping), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 6(2) and Annex III, point 5(b) (creditworthiness and credit-scoring systems: provider duties), European Union from 2 Dec 2027, in 13 months
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• European Health Data Space Regulation, Essential Requirements for the Harmonised Software Components of EHR Systems, European Union from 26 Mar 2029, in 2.4 years
• Sécurité des systèmes d'information (dispositions communes), Gabon
• CERT-In Cyber Security Directions, Incident Reporting, Logging and Time Synchronisation, India
• Decreto Legislativo 160/2026, After-the-Fact Facial Recognition Integrated in Video Surveillance (Art. 10), Italy

and 7 more, every one in the free file.

• AI Act, Article 12 (record-keeping), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 19 (automatically generated logs), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 26(6) (deployer log-keeping), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 6(2) and Annex III, point 5(b) (creditworthiness and credit-scoring systems: provider duties), European Union from 2 Dec 2027, in 13 months
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• European Health Data Space Regulation, Essential Requirements for the Harmonised Software Components of EHR Systems, European Union from 26 Mar 2029, in 2.4 years
• Sécurité des systèmes d'information (dispositions communes), Gabon
• CERT-In Cyber Security Directions, Incident Reporting, Logging and Time Synchronisation, India
• Decreto Legislativo 160/2026, After-the-Fact Facial Recognition Integrated in Video Surveillance (Art. 10), Italy

and 7 more, every one in the free file.

• AI Act, Article 12 (record-keeping), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 19 (automatically generated logs), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 26(6) (deployer log-keeping), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 6(2) and Annex III, point 5(b) (creditworthiness and credit-scoring systems: provider duties), European Union from 2 Dec 2027, in 13 months
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• European Health Data Space Regulation, Essential Requirements for the Harmonised Software Components of EHR Systems, European Union from 26 Mar 2029, in 2.4 years
• Sécurité des systèmes d'information (dispositions communes), Gabon
• Decreto Legislativo 160/2026, After-the-Fact Facial Recognition Integrated in Video Surveillance (Art. 10), Italy
• Decreto Legislativo 160/2026, Police Biometric AI: Dataset Labelling and Real-Time Remote Identification (Artt. 7-9, 13), Italy

and 5 more, every one in the free file.

• AI Act, Article 12 (record-keeping), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 19 (automatically generated logs), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 26(6) (deployer log-keeping), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 6(2) and Annex III, point 5(b) (creditworthiness and credit-scoring systems: provider duties), European Union from 2 Dec 2027, in 13 months
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• European Health Data Space Regulation, Essential Requirements for the Harmonised Software Components of EHR Systems, European Union from 26 Mar 2029, in 2.4 years
• Sécurité des systèmes d'information (dispositions communes), Gabon
• Decreto Legislativo 160/2026, After-the-Fact Facial Recognition Integrated in Video Surveillance (Art. 10), Italy
• Decreto Legislativo 160/2026, Police Biometric AI: Dataset Labelling and Real-Time Remote Identification (Artt. 7-9, 13), Italy

and 5 more, every one in the free file.

• AI Act, Article 12 (record-keeping), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 19 (automatically generated logs), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 26(6) (deployer log-keeping), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 6(2) and Annex III, point 5(b) (creditworthiness and credit-scoring systems: provider duties), European Union from 2 Dec 2027, in 13 months
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• European Health Data Space Regulation, Essential Requirements for the Harmonised Software Components of EHR Systems, European Union from 26 Mar 2029, in 2.4 years
• Sécurité des systèmes d'information (dispositions communes), Gabon
• Decreto Legislativo 160/2026, After-the-Fact Facial Recognition Integrated in Video Surveillance (Art. 10), Italy
• Decreto Legislativo 160/2026, Police Biometric AI: Dataset Labelling and Real-Time Remote Identification (Artt. 7-9, 13), Italy

and 5 more, every one in the free file.

• AI Act, Article 12 (record-keeping), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 19 (automatically generated logs), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 26(6) (deployer log-keeping), European Union from 2 Dec 2027, in 13 months
• AI Act, Article 6(2) and Annex III, point 5(b) (creditworthiness and credit-scoring systems: provider duties), European Union from 2 Dec 2027, in 13 months
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• DORA Technical Standards on ICT Risk Management Tools, Methods, Processes and Policies and the Simplified ICT Risk Management Framework, European Union
• European Health Data Space Regulation, Essential Requirements for the Harmonised Software Components of EHR Systems, European Union from 26 Mar 2029, in 2.4 years
• Sécurité des systèmes d'information (dispositions communes), Gabon
• Decreto Legislativo 160/2026, After-the-Fact Facial Recognition Integrated in Video Surveillance (Art. 10), Italy
• Decreto Legislativo 160/2026, Police Biometric AI: Dataset Labelling and Real-Time Remote Identification (Artt. 7-9, 13), Italy

and 5 more, every one in the free file.

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Security Standards for Smart Devices, Australia
• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Lei Geral de Proteção de Dados Pessoais (LGPD), Brazil
• Security of Connected Devices, California
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Cybersecurity Law, Network Product and Service Security Duties, China
• Decreto No. 360/2019 and its Reglamento de Seguridad de las TIC (Resolución 128/2019), TIC Security System duty, Cuba
• Security of Networks and Information Systems Law, Radio Equipment Cybersecurity Requirements, Cyprus
• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months

and 22 more, every one in the free file.

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Security Standards for Smart Devices, Australia
• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Lei Geral de Proteção de Dados Pessoais (LGPD), Brazil
• Security of Connected Devices, California
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Cybersecurity Law, Network Product and Service Security Duties, China
• Decreto No. 360/2019 and its Reglamento de Seguridad de las TIC (Resolución 128/2019), TIC Security System duty, Cuba
• Security of Networks and Information Systems Law, Radio Equipment Cybersecurity Requirements, Cyprus
• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months

and 22 more, every one in the free file.

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Security Standards for Smart Devices, Australia
• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Lei Geral de Proteção de Dados Pessoais (LGPD), Brazil
• Security of Connected Devices, California
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Cybersecurity Law, Network Product and Service Security Duties, China
• Decreto No. 360/2019 and its Reglamento de Seguridad de las TIC (Resolución 128/2019), TIC Security System duty, Cuba
• Security of Networks and Information Systems Law, Radio Equipment Cybersecurity Requirements, Cyprus
• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months

and 22 more, every one in the free file.

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Security Standards for Smart Devices, Australia
• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Lei Geral de Proteção de Dados Pessoais (LGPD), Brazil
• Security of Connected Devices, California
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Cybersecurity Law, Network Product and Service Security Duties, China
• Decreto No. 360/2019 and its Reglamento de Seguridad de las TIC (Resolución 128/2019), TIC Security System duty, Cuba
• Security of Networks and Information Systems Law, Radio Equipment Cybersecurity Requirements, Cyprus
• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months

and 22 more, every one in the free file.

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Security Standards for Smart Devices, Australia
• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Lei Geral de Proteção de Dados Pessoais (LGPD), Brazil
• Security of Connected Devices, California
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Cybersecurity Law, Network Product and Service Security Duties, China
• Decreto No. 360/2019 and its Reglamento de Seguridad de las TIC (Resolución 128/2019), TIC Security System duty, Cuba
• Security of Networks and Information Systems Law, Radio Equipment Cybersecurity Requirements, Cyprus
• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months

and 22 more, every one in the free file.

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Security Standards for Smart Devices, Australia
• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Lei Geral de Proteção de Dados Pessoais (LGPD), Brazil
• Security of Connected Devices, California
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Cybersecurity Law, Network Product and Service Security Duties, China
• Decreto No. 360/2019 and its Reglamento de Seguridad de las TIC (Resolución 128/2019), TIC Security System duty, Cuba
• Security of Networks and Information Systems Law, Radio Equipment Cybersecurity Requirements, Cyprus
• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months

and 22 more, every one in the free file.

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Security Standards for Smart Devices, Australia
• Anatel Cybersecurity Requirements for CPE (Customer Premises Equipment), Brazil
• Lei Geral de Proteção de Dados Pessoais (LGPD), Brazil
• Security of Connected Devices, California
• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Cybersecurity Law, Network Product and Service Security Duties, China
• Decreto No. 360/2019 and its Reglamento de Seguridad de las TIC (Resolución 128/2019), TIC Security System duty, Cuba
• Security of Networks and Information Systems Law, Radio Equipment Cybersecurity Requirements, Cyprus
• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months

and 22 more, every one in the free file.

• Sécurité des systèmes d'information (dispositions communes), Gabon
• ZEKom-2, Operator Security Measures (Articles 115 and 116), Slovenia

• Sécurité des systèmes d'information (dispositions communes), Gabon
• ZEKom-2, Operator Security Measures (Articles 115 and 116), Slovenia

• Sécurité des systèmes d'information (dispositions communes), Gabon
• ZEKom-2, Operator Security Measures (Articles 115 and 116), Slovenia

• Sécurité des systèmes d'information (dispositions communes), Gabon
• ZEKom-2, Operator Security Measures (Articles 115 and 116), Slovenia

• Sécurité des systèmes d'information (dispositions communes), Gabon
• ZEKom-2, Operator Security Measures (Articles 115 and 116), Slovenia

• Sécurité des systèmes d'information (dispositions communes), Gabon
• ZEKom-2, Operator Security Measures (Articles 115 and 116), Slovenia

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union

• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• MiFID II Algorithmic Trading Controls: Resilient Systems, Testing, Kill Functionality, Records and Notification (Article 17 and RTS 6), European Union

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Banque du Liban Basic Circular No. 144 (Prevention of Electronic Criminal Acts), Lebanon

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Banque du Liban Basic Circular No. 144 (Prevention of Electronic Criminal Acts), Lebanon

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Banque du Liban Basic Circular No. 144 (Prevention of Electronic Criminal Acts), Lebanon

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Banque du Liban Basic Circular No. 144 (Prevention of Electronic Criminal Acts), Lebanon

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Banque du Liban Basic Circular No. 144 (Prevention of Electronic Criminal Acts), Lebanon

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Banque du Liban Basic Circular No. 144 (Prevention of Electronic Criminal Acts), Lebanon

• Lei de Protecção das Redes e Sistemas Informáticos, Security Duties for Information-Society Systems, Computer Programs and Databases, Angola
• Banque du Liban Basic Circular No. 144 (Prevention of Electronic Criminal Acts), Lebanon

• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Data Security Law, Risk Monitoring and Incident Reporting Duty, China
• Digital Code, Livre IV: Digital Services Provider Security Obligations, Democratic Republic of the Congo
• Digital Code, Book VI: Critical Installation Protection and Operator Security Controls, Djibouti
• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• L-Category Vehicles, Protection Against Cyberattacks Under UN Regulation No 155 (Annex XVIII to Delegated Regulation (EU) No 44/2014), European Union from 11 Dec 2027, in 14 months
• Cybersecurity Act 2025, Cybersecurity Incident Reporting Obligations, Marshall Islands
• FSM Cybersecurity Act 2025 (Bill), Critical Information Infrastructure Incident Reporting Clock, Micronesia proposed

and 4 more, every one in the free file.

• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Data Security Law, Risk Monitoring and Incident Reporting Duty, China
• Digital Code, Livre IV: Digital Services Provider Security Obligations, Democratic Republic of the Congo
• Digital Code, Book VI: Critical Installation Protection and Operator Security Controls, Djibouti
• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• L-Category Vehicles, Protection Against Cyberattacks Under UN Regulation No 155 (Annex XVIII to Delegated Regulation (EU) No 44/2014), European Union from 11 Dec 2027, in 14 months
• Cybersecurity Act 2025, Cybersecurity Incident Reporting Obligations, Marshall Islands
• FSM Cybersecurity Act 2025 (Bill), Critical Information Infrastructure Incident Reporting Clock, Micronesia proposed

and 4 more, every one in the free file.

• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Data Security Law, Risk Monitoring and Incident Reporting Duty, China
• Digital Code, Livre IV: Digital Services Provider Security Obligations, Democratic Republic of the Congo
• Digital Code, Book VI: Critical Installation Protection and Operator Security Controls, Djibouti
• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• L-Category Vehicles, Protection Against Cyberattacks Under UN Regulation No 155 (Annex XVIII to Delegated Regulation (EU) No 44/2014), European Union from 11 Dec 2027, in 14 months
• Cybersecurity Act 2025, Cybersecurity Incident Reporting Obligations, Marshall Islands
• FSM Cybersecurity Act 2025 (Bill), Critical Information Infrastructure Incident Reporting Clock, Micronesia proposed

and 4 more, every one in the free file.

• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Data Security Law, Risk Monitoring and Incident Reporting Duty, China
• Digital Code, Livre IV: Digital Services Provider Security Obligations, Democratic Republic of the Congo
• Digital Code, Book VI: Critical Installation Protection and Operator Security Controls, Djibouti
• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• L-Category Vehicles, Protection Against Cyberattacks Under UN Regulation No 155 (Annex XVIII to Delegated Regulation (EU) No 44/2014), European Union from 11 Dec 2027, in 14 months
• Cybersecurity Act 2025, Cybersecurity Incident Reporting Obligations, Marshall Islands
• FSM Cybersecurity Act 2025 (Bill), Critical Information Infrastructure Incident Reporting Clock, Micronesia proposed

and 4 more, every one in the free file.

• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Data Security Law, Risk Monitoring and Incident Reporting Duty, China
• Digital Code, Livre IV: Digital Services Provider Security Obligations, Democratic Republic of the Congo
• Digital Code, Book VI: Critical Installation Protection and Operator Security Controls, Djibouti
• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• L-Category Vehicles, Protection Against Cyberattacks Under UN Regulation No 155 (Annex XVIII to Delegated Regulation (EU) No 44/2014), European Union from 11 Dec 2027, in 14 months
• Cybersecurity Act 2025, Cybersecurity Incident Reporting Obligations, Marshall Islands
• FSM Cybersecurity Act 2025 (Bill), Critical Information Infrastructure Incident Reporting Clock, Micronesia proposed

and 4 more, every one in the free file.

• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Data Security Law, Risk Monitoring and Incident Reporting Duty, China
• Digital Code, Livre IV: Digital Services Provider Security Obligations, Democratic Republic of the Congo
• Digital Code, Book VI: Critical Installation Protection and Operator Security Controls, Djibouti
• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• L-Category Vehicles, Protection Against Cyberattacks Under UN Regulation No 155 (Annex XVIII to Delegated Regulation (EU) No 44/2014), European Union from 11 Dec 2027, in 14 months
• Cybersecurity Act 2025, Cybersecurity Incident Reporting Obligations, Marshall Islands
• FSM Cybersecurity Act 2025 (Bill), Critical Information Infrastructure Incident Reporting Clock, Micronesia proposed

and 4 more, every one in the free file.

• OSFI Guideline B-13, Technology and Cyber Risk Management, Canada
• Data Security Law, Risk Monitoring and Incident Reporting Duty, China
• Digital Code, Livre IV: Digital Services Provider Security Obligations, Democratic Republic of the Congo
• Digital Code, Book VI: Critical Installation Protection and Operator Security Controls, Djibouti
• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• AI Act, Article 15 (accuracy, robustness and cybersecurity), European Union from 2 Dec 2027, in 13 months
• Commission Implementing Regulation (EU) 2024/2690, Technical and Methodological Requirements for NIS2 Risk-Management Measures, European Union
• L-Category Vehicles, Protection Against Cyberattacks Under UN Regulation No 155 (Annex XVIII to Delegated Regulation (EU) No 44/2014), European Union from 11 Dec 2027, in 14 months
• Cybersecurity Act 2025, Cybersecurity Incident Reporting Obligations, Marshall Islands
• FSM Cybersecurity Act 2025 (Bill), Critical Information Infrastructure Incident Reporting Clock, Micronesia proposed

and 4 more, every one in the free file.

• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Cybersecurity Law, Incident Response and Reporting Duties, Vietnam
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Cybersecurity Law, Incident Response and Reporting Duties, Vietnam
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Critical Infrastructure Cybersecurity Proclamation, Critical Infrastructure Owner Obligations, Ethiopia from 21 Jul 2027, in 9 months
• Cybersecurity Law, Information System Classification and Protection Measures, Vietnam

• Resolución 105/2021, Reglamento sobre el Modelo de Actuación Nacional para la Respuesta a Incidentes de Ciberseguridad, Cuba
• Commission Regulation on Personal Data Breach Notification by Electronic Communications Providers (Regulation (EU) No 611/2013), European Union
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia

• Resolución 105/2021, Reglamento sobre el Modelo de Actuación Nacional para la Respuesta a Incidentes de Ciberseguridad, Cuba
• Ministru kabineta noteikumi Nr. 397, Minimum Cybersecurity Requirements, Latvia

• Law No. 124/2024, notification of a personal data breach, Albania
• Loi n° 18-07 relative à la protection des personnes physiques, notification des violations de données, Algeria
• LQPD, personal data breach notification, Andorra
• Data Protection Act, 2019, personal data breach notification, Barbados
• Law on the Protection of Personal Data of Bosnia and Herzegovina, personal data breach notification, Bosnia and Herzegovina
• Electronic Communications Act Articles 261в to 261д, Personal Data Breach Notification by Providers of Public Electronic Communications Services, Bulgaria
• Law No. 133/V/2001 on the Protection of Personal Data, personal data breach notification, Cabo Verde
• Digital Code, Book I: personal-data breach notification, Djibouti
• Ley para la Protección de Datos Personales, personal data breach notification, El Salvador
• Personal Data Protection Proclamation, personal data breach notification, Ethiopia

and 18 more, every one in the free file.

• Law No. 124/2024, notification of a personal data breach, Albania
• Loi n° 18-07 relative à la protection des personnes physiques, notification des violations de données, Algeria
• LQPD, personal data breach notification, Andorra
• Data Protection Act, 2019, personal data breach notification, Barbados
• Law on the Protection of Personal Data of Bosnia and Herzegovina, personal data breach notification, Bosnia and Herzegovina
• Electronic Communications Act Articles 261в to 261д, Personal Data Breach Notification by Providers of Public Electronic Communications Services, Bulgaria
• Law No. 133/V/2001 on the Protection of Personal Data, personal data breach notification, Cabo Verde
• Digital Code, Book I: personal-data breach notification, Djibouti
• Ley para la Protección de Datos Personales, personal data breach notification, El Salvador
• Personal Data Protection Proclamation, personal data breach notification, Ethiopia

and 16 more, every one in the free file.

• Law No. 124/2024, notification of a personal data breach, Albania
• Loi n° 18-07 relative à la protection des personnes physiques, notification des violations de données, Algeria
• LQPD, personal data breach notification, Andorra
• Data Protection Act, 2019, personal data breach notification, Barbados
• Law on the Protection of Personal Data of Bosnia and Herzegovina, personal data breach notification, Bosnia and Herzegovina
• Law No. 133/V/2001 on the Protection of Personal Data, personal data breach notification, Cabo Verde
• Digital Code, Book I: personal-data breach notification, Djibouti
• Ley para la Protección de Datos Personales, personal data breach notification, El Salvador
• Personal Data Protection Proclamation, personal data breach notification, Ethiopia
• Law No. 025/2023, personal-data breach notification, Gabon

and 9 more, every one in the free file.

• Law No. 124/2024, notification of a personal data breach, Albania
• Law No. 25/2024, On Cybersecurity, Albania
• Loi n° 18-07 relative à la protection des personnes physiques, notification des violations de données, Algeria
• Llei 22/2022, Incident Handling and Notification Obligation, Andorra
• LQPD, personal data breach notification, Andorra
• Lei de Protecção das Redes e Sistemas Informáticos, Incident-Management Planning, Alert Dissemination and CERT Coordination Duties, Angola
• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Significant-Incident Reporting Obligations, Austria
• Cyber Security Act, Computer Emergency Response Team, Duty to Report a Cyber Incident, Bangladesh
• Data Protection Act, 2019, personal data breach notification, Barbados
• Law of the Republic of Belarus On Personal Data Protection, notification of personal data protection violations, Belarus

and 174 more, every one in the free file.

• Law No. 124/2024, notification of a personal data breach, Albania
• Law No. 25/2024, On Cybersecurity, Albania
• Loi n° 18-07 relative à la protection des personnes physiques, notification des violations de données, Algeria
• Llei 22/2022, Incident Handling and Notification Obligation, Andorra
• LQPD, personal data breach notification, Andorra
• Lei de Protecção das Redes e Sistemas Informáticos, Incident-Management Planning, Alert Dissemination and CERT Coordination Duties, Angola
• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Significant-Incident Reporting Obligations, Austria
• Cyber Security Act, Computer Emergency Response Team, Duty to Report a Cyber Incident, Bangladesh
• Data Protection Act, 2019, personal data breach notification, Barbados
• Law of the Republic of Belarus On Personal Data Protection, notification of personal data protection violations, Belarus

and 140 more, every one in the free file.

• Law No. 124/2024, notification of a personal data breach, Albania
• Loi n° 18-07 relative à la protection des personnes physiques, notification des violations de données, Algeria
• LQPD, personal data breach notification, Andorra
• Data Protection Act, 2019, personal data breach notification, Barbados
• Law of the Republic of Belarus On Personal Data Protection, notification of personal data protection violations, Belarus
• Data Protection Act 2021, personal data breach notification, Belize from a date not yet set
• Loi n°2017-20 portant Code du Numérique en République du Bénin, Livre V, notification des ruptures de sécurité, Benin
• Law on the Protection of Personal Data of Bosnia and Herzegovina, personal data breach notification, Bosnia and Herzegovina
• Data Protection Act, 2024, personal data breach notification, Botswana
• LGPD, security incident notification, Brazil

and 78 more, every one in the free file.

• Digital Code, Livre II: Trust Service Provider Security Risk-Management Duty, Democratic Republic of the Congo
• Payment Services Technical Standards on Strong Customer Authentication, Personalized Security Credentials and Common and Secure Open Standards of Communication, European Union
• Cybersecurity Law, Incident Response and Reporting Duties, Vietnam

• Digital Code, Livre II: Trust Service Provider Security Risk-Management Duty, Democratic Republic of the Congo
• Payment Services Technical Standards on Strong Customer Authentication, Personalized Security Credentials and Common and Secure Open Standards of Communication, European Union
• Cybersecurity Law, Incident Response and Reporting Duties, Vietnam

• Digital Code, Livre II: Trust Service Provider Security Risk-Management Duty, Democratic Republic of the Congo
• Payment Services Technical Standards on Strong Customer Authentication, Personalized Security Credentials and Common and Secure Open Standards of Communication, European Union
• Cybersecurity Law, Incident Response and Reporting Duties, Vietnam

• Digital Code, Livre II: Trust Service Provider Security Risk-Management Duty, Democratic Republic of the Congo
• Payment Services Technical Standards on Strong Customer Authentication, Personalized Security Credentials and Common and Secure Open Standards of Communication, European Union
• Cybersecurity Law, Incident Response and Reporting Duties, Vietnam

• Digital Code, Livre II: Trust Service Provider Security Risk-Management Duty, Democratic Republic of the Congo
• Payment Services Technical Standards on Strong Customer Authentication, Personalized Security Credentials and Common and Secure Open Standards of Communication, European Union
• Cybersecurity Law, Incident Response and Reporting Duties, Vietnam

• Digital Code, Livre II: Trust Service Provider Security Risk-Management Duty, Democratic Republic of the Congo
• Payment Services Technical Standards on Strong Customer Authentication, Personalized Security Credentials and Common and Secure Open Standards of Communication, European Union
• Cybersecurity Law, Incident Response and Reporting Duties, Vietnam

• Law No. 25/2024, On Cybersecurity, Albania
• Llei 22/2022, Incident Handling and Notification Obligation, Andorra
• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Significant-Incident Reporting Obligations, Austria
• Loi du 26 avril 2024, Significant-Incident Notification Obligations, Belgium
• Zakon o kibernetičkoj sigurnosti and Uredba o kibernetičkoj sigurnosti, Incident and Cyber-Threat Reporting Obligations, Croatia
• Security of Networks and Information Systems Law, Incident Notification Obligations, Cyprus
• Cybersecurity Act (Zákon o kybernetické bezpečnosti), Incident Notification, Czech Republic
• Digital Code, Livre IV: General Cyberattack Cooperation and Incident-Reporting Duty, Democratic Republic of the Congo
• NIS 2-loven, Significant-Incident Reporting and Recipient-Notice Duties, Denmark
• Küberturvalisuse seadus (KüTS), Duty to Notify of a Cyber Incident, Estonia

and 42 more, every one in the free file.

• Law No. 25/2024, On Cybersecurity, Albania
• Llei 22/2022, Incident Handling and Notification Obligation, Andorra
• Netz- und Informationssystemsicherheitsgesetz 2026 (NISG 2026), Significant-Incident Reporting Obligations, Austria
• Loi du 26 avril 2024, Significant-Incident Notification Obligations, Belgium
• Zakon o kibernetičkoj sigurnosti and Uredba o kibernetičkoj sigurnosti, Incident and Cyber-Threat Reporting Obligations, Croatia
• Security of Networks and Information Systems Law, Incident Notification Obligations, Cyprus
• Cybersecurity Act (Zákon o kybernetické bezpečnosti), Incident Notification, Czech Republic
• Digital Code, Livre IV: General Cyberattack Cooperation and Incident-Reporting Duty, Democratic Republic of the Congo
• NIS 2-loven, Significant-Incident Reporting and Recipient-Notice Duties, Denmark
• Küberturvalisuse seadus (KüTS), Duty to Notify of a Cyber Incident, Estonia

and 40 more, every one in the free file.

• Personal Information Protection Act, data breach notification, Illinois
• Law 506/2004 Article 3, Personal Data Breach Notification by Electronic Communications Providers, Romania

• Data Security Law, Risk Monitoring and Incident Reporting Duty, China
• Critical Infrastructure Cybersecurity Proclamation, Cyber Incident Reporting to National CERT, Ethiopia from 21 Jul 2027, in 9 months
• Cybersecurity Act 2026, Duty to Report a Cybersecurity Incident, Kiribati from a date not yet set
• Nacionālās kiberdrošības likums, Incident Notification, Latvia
• Cybersecurity Incident Reporting and Emergency Response, Tunisia

• Data Security Law, Risk Monitoring and Incident Reporting Duty, China
• Critical Infrastructure Cybersecurity Proclamation, Cyber Incident Reporting to National CERT, Ethiopia from 21 Jul 2027, in 9 months
• Cybersecurity Act 2026, Duty to Report a Cybersecurity Incident, Kiribati from a date not yet set
• Nacionālās kiberdrošības likums, Incident Notification, Latvia
• Cybersecurity Incident Reporting and Emergency Response, Tunisia

• Loi du 26 avril 2024, Significant-Incident Notification Obligations, Belgium
• National Cybersecurity Incident Reporting Measures, China
• Cyber Security Management Act, Cyber Security Incident Reporting, Taiwan

• Loi du 26 avril 2024, Significant-Incident Notification Obligations, Belgium
• National Cybersecurity Incident Reporting Measures, China
• Cyber Security Management Act, Cyber Security Incident Reporting, Taiwan