Two TC260 draft standards close for comment 25 Oct (2 days): China's AI Security Capability Maturity Assessment (ASMM) and a revised Data Security Capability Maturity Model (DSMM). Review controls now. #compliance #AIgovernance cybereyeq.com/?utm_source=x&…
1
EU Council agreed its Digital Omnibus negotiating position on 21 Oct — the step that kept failing. It keeps the GDPR consent rule but exempts more cookie purposes (audience measurement, device security). Not law yet. #compliance #GDPR cybereyeq.com/?utm_source=x&…
2
Greece enacted its under-15 social-media law today: minimum age 15 from 1 Jan 2027, the 2nd EU state after France. Every account must verify age; breaches risk DSA fines up to 6% of global turnover. #compliance #ageverification cybereyeq.com/?utm_source=x&…
2
Italy's NIS2 baseline bites 31 Oct: essential and important entities registered with the ACN must have basic security measures in place by then (Legislative Decree 138/2024). #GRC #NIS2 cybereyeq.com/?utm_source=x&…
3
DHS has ordered DeepSeek products out of US federal civilian IT. A FASCSA order (20 Oct) bars DeepSeek from civilian procurement and requires removal, including third-party products built on its models. #compliance #AIgovernance cybereyeq.com/?utm_source=x&…
2
The OCC finalised its GENIUS Act rule on 21 Oct: reserve, redemption and risk standards for payment stablecoin issuers and custodians. Effective 18 Jan 2027; AML and sanctions rules follow separately. #compliance #stablecoins cybereyeq.com/?utm_source=x&…
2
Australia's communications minister said on 20 Oct the government expects to take Meta, TikTok, Snap and YouTube to Federal Court over the under-16 social media ban. eSafety is preparing the case; no filing yet. #compliance #onlinesafety cybereyeq.com/?utm_source=x&…
CyberEyeQ retweeted
HITCON CISO Summit | Special Sponsor Spotlight | CyberEyeQ
If a market matters to your business, so do its rules.
@CyberEyeQ is proud to sponsor #HITCON CISO Summit 2026 (21 Oct, Taipei Marriott Hotel).
• Taiwan: Cyber Security Management Act, up to NT$10M for unreported incidents
• EU: Cyber Resilience Act, exploited vulns reported within 24h
• US: DOJ Data Security Program, bulk US data off-limits to China-linked parties
Subscribe to our free newsletter: cybereyeq.com/subscribe?utm_…
Customized offers: info@cybereyeq.com
#CISO #RegTech #HITCONCISOSummit #CISOSummit #CISOSummit2026
1
213
Norway's Datatilsynet fined Xandr (Microsoft) ~€8.6M — its largest ever — for relaying Grindr users' data into real-time bidding with no valid Article 9 basis. "Assumed consent" defence rejected; Xandr named a joint controller. #compliance #privacy cybereyeq.com/?utm_source=x&…
4
SEC's proposed Regulation Crypto Assets (Release 33-11434) closes for comment tomorrow, 20 Oct — setting when certain crypto assets fall outside securities treatment. A last US window before the GENIUS Act takes effect 18 Jan 2027. #compliance #crypto cybereyeq.com/?utm_source=x&…
2
CISA added an actively exploited BeyondTrust Remote Support flaw (CVE-2026-102764) to the KEV catalog on 16 Oct, starting a BOD 26-04 remediation clock for federal agencies. Inventory and patch now. #compliance #cybersecurity cybereyeq.com/?utm_source=x&…
11
The 11th Circuit vacated the injunction on Georgia's SB 351 (15 Oct, NetChoice v. Carr): the state can now enforce age verification and under-16 parental consent for social media. NetChoice's facial challenge failed. #compliance #GRC cybereyeq.com/?utm_source=x&…
5
EBA classified Circle's USDC as the first significant e-money token under MiCA (14 Oct). From 12 Nov the EBA directly supervises its reserves, own funds and liquidity; France's ACPR keeps conduct. #compliance #MiCA cybereyeq.com/?utm_source=x&…
2
FedRAMP opened RFC-0035 on 14 Oct: it would relax the Class D rule on CMVP-validated cryptographic modules from MUST to SHOULD, and allow post-quantum crypto at agency request. Comments due 17 Nov. #compliance #FedRAMP cybereyeq.com/?utm_source=x&…
5
A Cologne court barred Snapchat from using “My AI” chatbot data for ads without a legal basis, from pre-ticked consent boxes, and from pre-selecting alcohol/gambling ads for minors. #compliance #GDPR cybereyeq.com/?utm_source=x&…
5
UK scrapped the per-lender 15% cap on high loan-to-income mortgage lending. PRA and FCA published PS19/26 on 14 Oct; firms now set their own high-LTI strategy within risk appetite. In force 28 Oct. #compliance #bankingregulation cybereyeq.com/?utm_source=x&…
5
FDA finalized its guidance on postapproval manufacturing changes to biosimilar and interchangeable products (91 FR 64931, 13 Oct). It aligns with ICH Q5E and finalizes the July 2024 draft. Non-binding. #compliance #GRC cybereyeq.com/?utm_source=x&…
2
US Treasury agencies hit Bank of America with a $1.2B FinCEN penalty for willful Bank Secrecy Act/AML failures (13 Oct) — plus a $750M OCC fine, its largest ever, and an $11.6M OFAC sanctions settlement. #compliance #GRC cybereyeq.com/?utm_source=x&…
2
White House "Super Intelligence Force" says AI firms must report model security incidents "immediately" (9 Oct, per Axios). No statute, deadline or penalty named — a signalled expectation, not binding law. #AIgovernance #compliance cybereyeq.com/?utm_source=x&…
1
SEC proposes its biggest overhaul of fund cross-trading Rule 17a-7 in years — opening most fixed-income to affiliated cross trades under value-based pricing. Comment: 60 days post-FR. cybereyeq.com/?utm_source=x&… #compliance #SEC
2