In brief
- We are currently less than one month away from the expiration of the grace period provided under the provisions of the Personal Data Protection Law No. 151 of 2020 (PDPL). By 31 October 2026, all data users subject
Latest from Connect on Tech
Thought for the week: AI agents raise new cybersecurity and liability questions
The future of the ICO – governance changes and draft corporate strategy signal key regulatory priorities
The transition from the office of the Information Commissioner to the new Information Commission under the Data (Use and Access) Act 2025 (“DUAA”) is due to take effect from 30 September 2026. In addition, the ICO outlined its priorities for
Switzerland: Federal Council Proposes New Cybersecurity Act
On 25 September 2026, the Swiss Federal Council has announced plans to develop a new standalone Cybersecurity Act aimed at strengthening Switzerland’s cyber resilience and creating a more coherent legal framework for cybersecurity. The proposed legislation will consolidate several ongoing
Thought for the week: Why runaway AI development does not serve China’s interests
This article was originally published by IAPP linked here.
Both China and the U.S. have reasons to pursue stronger AI governance measures that balance innovation, national security and risk prevention.
China’s Minister of State Security Chen Yixin last week
New EU Reporting Obligation for Software Vulnerabilities
A new EU regulation requires all companies that provide software, as of 11 September 2026, to report actively exploited vulnerabilities and other security incidents to a designated governmental authority and to users. Breaches of this reporting obligation may result in
Colombia: SIC Opens Consultation on Identity Verification Systems
On 8 September 2026, the Superintendence of Industry and Commerce (SIC) announced a public consultation to receive technical and legal input for the construction of guidelines, recommendations, and protocols on identity verification mechanisms and the processing of personal data in
ICO updates data protection complaints framework
On 19 June 2026, Section 103 of the Data (Use and Access) Act 2025 (“DUAA“) came into force, inserting the new statutory “right to complain” into Section 164A and 164B of the Data Protection Act 2018.
This new right requires
Thought for the week: How Pope Leo’s encyclical letter could influence emerging global AI regulation
This article was originally published by IAPP linked here.
Pope Leo XIV’s encyclical letter may influence global AI governance by reinforcing calls for stronger privacy, labor, transparency and international cooperation safeguards.
With the Labor Day weekend just behind us,
Thought for the week: AI-enhanced nation state cyber threats may be systemic
This article was originally published by IAPP linked here.
As AI-enhanced threats grow, organizations should continue shifting the balance toward stronger security and monitoring controls.
To begin your week, I recommend reading this recent Cybersecurity and Infrastructure Security Agency