LexLint

Know the law your code answers to.

Law / Changes

Software Law Tracker

Every change to software law in the last 30 days: laws enacted, laws pulled back, and obligations that start to apply, each sourced to the official record.

Updated This update is overdue, so the page may be out of date.

Showing 5 changes in 3 jurisdictions

This week to

No sourced changes in these dates.

Last week to

No sourced changes in these dates.

Two weeks ago to

Now in force Cybersecurity #

Cyber Resilience Act, Manufacturer Reporting Obligations

Regulation (EU) 2024/2847, Art. 14

Article 14 requires a manufacturer to notify any actively exploited vulnerability or severe incident affecting a product with digital elements to the CSIRT designated as coordinator for its main establishment and simultaneously to ENISA, through the single reporting platform established under Article 16. For a vulnerability, the manufacturer submits an early warning within 24 hours of becoming aware, a fuller vulnerability notification within 72 hours, and a final report no later than 14 days after a corrective or mitigating measure becomes available. For a severe incident, the same 24-hour early warning and 72-hour incident notification apply, followed by a final report within one month of the incident notification. After becoming aware of either, the manufacturer must inform the affected users of the product, and where appropriate all users, of the vulnerability or incident and of any risk mitigation or corrective measures they can take. Article 65 makes Directive (EU) 2020/1828 on representative actions apply to an infringement of this Regulation that harms, or may harm, the collective interests of consumers, letting a qualified consumer-protection entity, not an individual consumer, bring that action.

Applies from

Source Official Journal text, EUR-Lex, Regulation (EU) 2024/2847

LexLint law page
Now in force Cybersecurity #

Cyber Resilience Regulations, MDIA Designation under the Cyber Resilience Act

S.L. 591.6, Cyber Resilience Regulations, made under Chapter 591 (Malta Digital Innovation Authority Act)

The Malta Digital Innovation Authority (MDIA) describes itself as the prospective Notifying Authority and Market Surveillance Authority pursuant to the Cyber Resilience Act (Regulation (EU) 2024/2847). Malta's legislation portal carries this designation under a consolidated record, Subsidiary Legislation 591.6, Cyber Resilience Regulations, made under Chapter 591, the Malta Digital Innovation Authority Act, with a recorded point in time of . The Cyber Resilience Act's own essential requirements and market-placement duties for a manufacturer, applicable from , and its vulnerability and incident reporting duties, applicable since , are the Regulation's own and are documented at the European Union jurisdiction level rather than restated here. The MDIA's own published complaints procedure states that the corresponding provisions under the Cyber Resilience Act are still to come into application, so whether the MDIA's Notifying Authority and Market Surveillance Authority role under this Regulation is yet fully operative is not established in the primary text read here.

Applies from

Source Malta Digital Innovation Authority, official Cybersecurity services page and Legislation page; legislation.mt, consolidated record for S.L. 591.6

LexLint law page

No changes in these dates match the filters.

Three weeks ago to

No sourced changes in these dates.

Start of window to

Now in force Age gating #

HB 1839 (HCS HBs 1839, 2921 and 3015), Age Verification on Adult Websites

Section 407.3405, RSMo, as created by 2026 Mo. Laws, HCS HBs 1839, 2921 & 3015

Codifies the age verification requirement for commercial websites where at least one third of published material is harmful to minors into statute, requiring reasonable age verification, a bar on retaining identifying information, and mandated warning notices about mental health resources, enforced by the Attorney General. Signed by the governor on ; effective .

Applies from

Source Official Missouri House of Representatives enrolled bill text (Truly Agreed To and Finally Passed, HCS HBs 1839, 2921 & 3015)

LexLint law page
Now in force AI #

Disclosure of an intimate digital depiction

Mo. Rev. Stat. Sec. 573.570

A person commits disclosure of an intimate digital depiction by disclosing, or threatening to disclose, a realistic depiction of an identifiable individual created or altered through digital manipulation that shows uncovered genitals or similar intimate anatomy, the transfer of bodily sexual fluids, or the individual engaging in sexually explicit conduct, where the person intends to harass, threaten, or harm the depicted individual, or knows or recklessly disregards that the disclosure will cause them harm. Disclosure is a class D felony and a threat to disclose is a class E felony, each rising to a class C felony on a second or subsequent violation, or where the depiction could reasonably be expected to affect a government or election proceeding or facilitate violence. A disclaimer stating the depiction is unauthorized or fabricated is not a defense. An interactive computer service provider is not liable under this section for good-faith efforts to restrict access to such depictions or for giving others the technical means to do so.

Applies from

Source official Missouri statute text, Revised Statutes of Missouri section 573.570

LexLint law page
Now in force AI #

Child sexual abuse material offenses, computer-generated and AI-indistinguishable images included

Mo. Rev. Stat. Secs. 573.010, 573.023 to 573.037

Missouri's definition of child sexual abuse material, amended in 2026, includes a digital image, computer image, or computer-generated image that is, or is indistinguishable from, that of a minor engaging in sexually explicit conduct, where an ordinary person viewing it would conclude it depicts an actual minor, regardless of whether the minor was actually engaged in that conduct. Promoting such material in the first degree, meaning possessing it with intent to promote or promoting it, where the depicted or apparent child is under fourteen, is a class B felony, rising to a class A felony if knowingly promoted to a minor, with three years of parole and probation ineligibility. Promoting the same material where the depicted or apparent child is under eighteen is the lesser offense of promoting in the second degree, a class D felony rising to a class B felony if knowingly promoted to a minor. Possessing such material is a class D felony for a single still image, rising to a class B felony for more than twenty images, for one video, or on a repeat offense, with separate punishment for each item possessed. The statute does not require a provider of electronic communication or remote computing services to monitor users or their communications.

Applies from

Source official Missouri statute text, Revised Statutes of Missouri sections 573.010 and 573.025

LexLint law page

No changes in these dates match the filters.

What counts as a change

Enacted
A law, an amendment, a regulation or court guidance was passed, signed or adopted. Dated by signature or adoption.
Now in force
Obligations started to apply. Dated by the application date the law itself states.
Pulled back
Repealed, superseded, struck down or enjoined. The repealing act or the court's order is the source and gives the date.
Proposed
A bill introduced or a draft published, or one that died before it passed. It binds nobody unless it passes.

Sources

Every change on this page is sourced to an official record: the law as published, the legislature's record, the official journal, the court's docket or a government announcement. News coverage is listed for context and is never the source. Changes reported only in the news are on News until they are sourced. This page reports changes in the law. It is not legal advice.