Intelligence desk

Regulatory

A permanent file of Security.io’s selected briefings tagged to this executive theme. It reflects the publication’s curated coverage, not a census of all global activity.

2026-10-30Florida financial-aid breach may affect 4.9 million peopleData Protection

2026-10-30iRhythm breach count raises the third-party assurance thresholdThird-Party Risk

2026-10-27Frontline begins breach notifications covering government, Medicaid and student identifiersData Protection

2026-10-26OCC proposes cyber disconnection and evidence-based reconnectionRegulatory

2026-10-21DHS DeepSeek order reaches third-party AI products and servicesAI Security

2026-10-16Legal Aid Agency scope expansion tests long-term breach governanceData Protection

2026-10-14Xandr fine makes consent verification an intermediary obligationData Protection

2026-10-13Norway’s Xandr decision makes inherited consent an enterprise control failureRegulatory

2026-10-08DSG Retail case closes with security duty intactRegulatory

2026-10-05CIRCIA final rule enters White House reviewRegulatory

2026-10-02California subpoenas OpenAI over AI model security incidentsAI Security

2026-10-01FTC frontier-AI inquiry raises the standard for enterprise agent assuranceRegulatory

2026-09-30OpenAI disclosure makes agent boundaries and notification clocks a board issueAI Security

2026-09-29DC health-data exposure puts publication controls under reviewData Protection

2026-09-29Facebook privacy verdict raises the price of unsupported assuranceRegulatory

2026-09-24Astrana Health discloses material cyber incident after phone spoofingRegulatory

2026-09-23Miljödata ruling raises the evidence bar for supplier securityThird-Party Risk

2026-09-22Google location-data ruling turns privacy evidence into a board deadlineRegulatory

2026-09-17CenterPoint breach shifts focus to external customer systemsData Protection

2026-09-14Revolut released customer records after fraudulent government requestsData Protection

2026-09-14The CRA reporting clock is running — and the weekend exposed an operational caveatRegulatory

2026-09-11EU product-security reporting clock starts todayRegulatory

2026-09-11Xinbi disruption changes sanctions and fraud-control prioritiesThreat Intelligence

2026-09-10EU product-security reporting clocks start tomorrowRegulatory

2026-09-07Berlin’s second leak package adds credential containmentRansomware

2026-09-04C-Track breach exposes the limits of court-vendor assuranceThird-Party Risk

2026-09-04CNIL fine makes healthcare access and monitoring evidence mandatoryRegulatory

2026-09-03UK bill puts vendor removal and procurement restrictions on the tableRegulatory

2026-09-02Aesto breach count exposes healthcare vendor concentrationThird-Party Risk

2026-08-28ATF major incident exposes assurance gap around standalone systemsIncident Response

2026-08-28US grid order forces inventory of foreign equipment and remote accessRegulatory

2026-08-27ATF major-incident disclosure tests assurance for standalone sensitive systemsIncident Response

2026-08-25TikTok settlement turns children’s-data controls into a board assurance testRegulatory

2026-08-24U.S. Bank claim exposes the assurance gap beyond direct providersThird-Party Risk

2026-08-21Canvas findings reset the evidence standard for SaaS assuranceRegulatory

2026-08-18France escalates tax-data breach response after containment missed extractionSecurity Leadership

2026-08-17Dutch cyber and critical-entity laws enter into forceRegulatory

2026-08-14US sets framework for supervised private-sector cyber operationsRegulatory

2026-08-13White House creates a federally controlled private cyber operations programmeRegulatory

2026-08-04Liechtenstein ownership-register theft creates downstream identity riskData Protection

2026-08-03EU AI Act transparency enforcement begins, shifting AI inventory from programme work to evidence obligationRegulatory

2026-07-31KT penalty exposes telecom control and evidence failuresRegulatory

2026-07-23US post-quantum programme moves from policy to named ownershipPolicy, Architecture and Cryptography

2026-07-17LegacyHive reopens the coordinated-disclosure argumentVulnerability research

2026-07-16Fraud disruption reveals the infrastructure behind the scamLaw enforcement

2026-07-15An AI-backed vulnerability clearinghouse will not solve enterprise prioritisationPublic policy

2026-07-14Sanctions turn anonymous infrastructure into a supplier-risk questionCybercrime policy

2026-07-14The CMMC pause does not pause defence-contractor riskPolicy & regulation