Saudi Arabia's SDAIA is consulting on PDPL amendments that would make in-Kingdom data storage the default and add a 72-hour breach-notification rule. Comments close 5 Nov. #compliance #privacy cybereyeq.com/?utm_source=x&…

CISA's final CIRCIA rule (RIN 1670-AA04) has sat at White House OIRA review since 1 Oct — nothing binds until it publishes. Pre-stage 72-hour incident and 24-hour ransom-payment reporting. #compliance #cybersecurity cybereyeq.com/?utm_source=x&…

Türkiye's under-15 social-media ban and mandatory e-Devlet age token take effect Saturday 1 Nov. Platforms must verify age via a state-issued token — new accounts gated first, existing accounts have until 31 Mar 2027. cybereyeq.com/?utm_source=x&… #compliance #onlinesafety

Two CFTC enforcement wins in one October week: a federal court ordered over $288M in a commodity-pool Ponzi case (Rel 9311-26, 19 Oct) and over $9M in a forex-fraud action (Rel 9313-26, 21 Oct). cybereyeq.com/?utm_source=x&… #compliance #enforcement

Ofcom's skilled-persons age-assurance market questionnaire is due this Wednesday, 29 Oct (2 days) under the UK Online Safety Act 2023. Its separate women-and-girls call for evidence runs to 4 Nov. cybereyeq.com/?utm_source=x&… #compliance #onlinesafety

Italy's NIS2 basic security measures become mandatory this Saturday, 31 Oct — the first hard compliance obligation for in-scope entities on Italy's ACN register (D.Lgs. 138/2024). cybereyeq.com/?utm_source=x&… #compliance #cybersecurity

China is adding 23 AI technologies — large models, agents, compute clusters — to its export-control catalogue. An interim rule already requires pre-registration before any transfer abroad. Comments close Nov 15. cybereyeq.com/?utm_source=x&… #compliance #AIgovernance

A New Mexico court ordered Meta to pay $25B in civil penalties — the largest privacy penalty on record — after a jury found 43,899,725 Unfair Practices Act violations tied to Cambridge Analytica. cybereyeq.com/?utm_source=x&… #privacy #compliance

Treasury's outbound-investment NPRM (91 FR 67396), published today, would reclassify "AI systems" as "super intelligence" and bar US persons from developing any SI system. Comments close Dec 7. cybereyeq.com/?utm_source=x&… #AIgovernance #compliance

Two TC260 draft standards close for comment 25 Oct (2 days): China's AI Security Capability Maturity Assessment (ASMM) and a revised Data Security Capability Maturity Model (DSMM). Review controls now. #compliance #AIgovernance cybereyeq.com/?utm_source=x&…

EU Council agreed its Digital Omnibus negotiating position on 21 Oct — the step that kept failing. It keeps the GDPR consent rule but exempts more cookie purposes (audience measurement, device security). Not law yet. #compliance #GDPR cybereyeq.com/?utm_source=x&…

Greece enacted its under-15 social-media law today: minimum age 15 from 1 Jan 2027, the 2nd EU state after France. Every account must verify age; breaches risk DSA fines up to 6% of global turnover. #compliance #ageverification cybereyeq.com/?utm_source=x&…

Italy's NIS2 baseline bites 31 Oct: essential and important entities registered with the ACN must have basic security measures in place by then (Legislative Decree 138/2024). #GRC #NIS2 cybereyeq.com/?utm_source=x&…

DHS has ordered DeepSeek products out of US federal civilian IT. A FASCSA order (20 Oct) bars DeepSeek from civilian procurement and requires removal, including third-party products built on its models. #compliance #AIgovernance cybereyeq.com/?utm_source=x&…

The OCC finalised its GENIUS Act rule on 21 Oct: reserve, redemption and risk standards for payment stablecoin issuers and custodians. Effective 18 Jan 2027; AML and sanctions rules follow separately. #compliance #stablecoins cybereyeq.com/?utm_source=x&…

Australia's communications minister said on 20 Oct the government expects to take Meta, TikTok, Snap and YouTube to Federal Court over the under-16 social media ban. eSafety is preparing the case; no filing yet. #compliance #onlinesafety cybereyeq.com/?utm_source=x&…

HITCON CISO Summit | Special Sponsor Spotlight | CyberEyeQ

If a market matters to your business, so do its rules.
@CyberEyeQ is proud to sponsor #HITCON CISO Summit 2026 (21 Oct, Taipei Marriott Hotel).

• Taiwan: Cyber Security Management Act, up to NT$10M for unreported Resilience Act, exploited vulns reported within 24h
• US: DOJ Data Security Program, bulk US data off-limits to China-linked parties

Subscribe to our free newsletter: cybereyeq.com/subscribe?utm_…

Customized offers: info@cybereyeq.com

#CISO #RegTech #HITCONCISOSummit #CISOSummit #CISOSummit2026

Norway's Datatilsynet fined Xandr (Microsoft) ~€8.6M — its largest ever — for relaying Grindr users' data into real-time bidding with no valid Article 9 basis. "Assumed consent" defence rejected; Xandr named a joint controller. #compliance #privacy cybereyeq.com/?utm_source=x&…

SEC's proposed Regulation Crypto Assets (Release 33-11434) closes for comment tomorrow, 20 Oct — setting when certain crypto assets fall outside securities treatment. A last US window before the GENIUS Act takes effect 18 Jan 2027. #compliance #crypto cybereyeq.com/?utm_source=x&…

CISA added an actively exploited BeyondTrust Remote Support flaw (CVE-2026-102764) to the KEV catalog on 16 Oct, starting a BOD 26-04 remediation clock for federal agencies. Inventory and patch now. #compliance #cybersecurity cybereyeq.com/?utm_source=x&…