A new EU regulation requires all companies that provide software, as of 11 September 2026, to report actively exploited vulnerabilities and other security incidents to a designated governmental authority and to users. Breaches of this reporting obligation may result in
Baker McKenzie Blogs
Latest from Baker McKenzie
Colombia: SIC Opens Consultation on Identity Verification Systems
On 8 September 2026, the Superintendence of Industry and Commerce (SIC) announced a public consultation to receive technical and legal input for the construction of guidelines, recommendations, and protocols on identity verification mechanisms and the processing of personal data in
Fraud has a price: when directors pay personally
In an earlier post, we discussed the trial decision in CHU de Québec-Université Laval v. Tree of Knowledge International. The Ontario Court of Appeal has now upheld that decision. The key takeaway is straightforward: corporate directors and officers
ICO updates data protection complaints framework
On 19 June 2026, Section 103 of the Data (Use and Access) Act 2025 (“DUAA“) came into force, inserting the new statutory “right to complain” into Section 164A and 164B of the Data Protection Act 2018.
This new right requires
California Reminds Employers: TPS Changes Do Not Alter Workplace Obligations
Recent developments affecting Temporary Protected Status (TPS)[1] beneficiaries have created uncertainty for employers managing work authorization and reverification obligations. In response, California Attorney General Rob Bonta has reminded employers that changes affecting TPS beneficiaries do not change employers’ existing
Argentina strengthens oversight of hydrocarbon activities related to the Falkland Islands
In brief
On September 4, 2026, the Argentine Executive Branch issued Executive Order No. 868/2026 (the “Executive Order”), introducing new measures to strengthen the enforcement of Law No. 26,659 regarding hydrocarbon activities on the Argentine Continental Shelf. This law not
OFAC Expands Iran Sanctions Under “Operation Economic Outcast”
On August 24, 2026, the US Department of the Treasury’s Office of Foreign Assets Control (“OFAC”) launched Operation Economic Outcast, a campaign that OFAC has characterized as an “economic D-Day” against Iran. The action follows OFAC’s earlier “Economic Fury” campaign
OFAC Removes the US Governing-Law Condition from the Venezuela General Licenses and Issues New Authorizations Related to Telecommunications and Coal
Since August 21, 2026, the US Department of the Treasury’s Office of Foreign Assets Control (“OFAC“) has made a series of changes to the Venezuela-related general licenses (“GLs“) issued under the Venezuela Sanctions Regulations, 31 CFR part 591 (“VSR“). OFAC
Crimea Arbitration Awards and the Complex Path to Enforcement in U.S. Courts
Russia’s 2014 annexation of Crimea produced not only a geopolitical crisis but also a substantial wave of investor–state arbitration claims from Ukrainian businesses whose assets were located on the peninsula when Russian authorities assumed control. These claims have been brought
US Government Issues Executive Order 14420 to Secure US Bulk-Power System
On August 26, 2026, President Trump issued Executive Order 14420, “Declaring a National Emergency to Secure the United States Bulk-Power System” (“EO 14420“), which aims to prevent certain foreign actors from creating or exploiting vulnerabilities in foreign-produced equipment used