Live threats

HighMicrosoft FORGE Lab Discovers 33 New Linux Kernel CVEs, Including 8 Privilege‑Escalation Flaws BreachMaersk Confirms Legacy System Breach; Hackers Claim 100 GB Data Theft and $5 M Ransom Demand Rule changeTreasury publishes FY27 Social Impact Partnerships to Pay for Results Act Notice of Funding Opportunity DeadlineFrench court orders DNS resolver Quad9 to block sites, prompting its withdrawal from France HighMicrosoft Releases Patches for 1,259 Flaws, Including Outlook Exploit That Can Leak NTLMv2 Hashes RansomwareBYOD Ransomware Gang Claims to Encrypt Vanderbilt University Databases and Steal Over 1 Million Records FineAEPD initiates enforcement actions against TikTok for child sexual abuse content CriticalMicrosoft Patch Tuesday Unveils Actively Exploited Outlook Zero‑Day and Critical Exchange, SharePoint, LDAP Flaws

HighMicrosoft FORGE Lab Discovers 33 New Linux Kernel CVEs, Including 8 Privilege‑Escalation Flaws BreachMaersk Confirms Legacy System Breach; Hackers Claim 100 GB Data Theft and $5 M Ransom Demand Rule changeTreasury publishes FY27 Social Impact Partnerships to Pay for Results Act Notice of Funding Opportunity DeadlineFrench court orders DNS resolver Quad9 to block sites, prompting its withdrawal from France HighMicrosoft Releases Patches for 1,259 Flaws, Including Outlook Exploit That Can Leak NTLMv2 Hashes RansomwareBYOD Ransomware Gang Claims to Encrypt Vanderbilt University Databases and Steal Over 1 Million Records FineAEPD initiates enforcement actions against TikTok for child sexual abuse content CriticalMicrosoft Patch Tuesday Unveils Actively Exploited Outlook Zero‑Day and Critical Exchange, SharePoint, LDAP Flaws HighMicrosoft FORGE Lab Discovers 33 New Linux Kernel CVEs, Including 8 Privilege‑Escalation Flaws BreachMaersk Confirms Legacy System Breach; Hackers Claim 100 GB Data Theft and $5 M Ransom Demand Rule changeTreasury publishes FY27 Social Impact Partnerships to Pay for Results Act Notice of Funding Opportunity DeadlineFrench court orders DNS resolver Quad9 to block sites, prompting its withdrawal from France HighMicrosoft Releases Patches for 1,259 Flaws, Including Outlook Exploit That Can Leak NTLMv2 Hashes RansomwareBYOD Ransomware Gang Claims to Encrypt Vanderbilt University Databases and Steal Over 1 Million Records FineAEPD initiates enforcement actions against TikTok for child sexual abuse content CriticalMicrosoft Patch Tuesday Unveils Actively Exploited Outlook Zero‑Day and Critical Exchange, SharePoint, LDAP Flaws

Updated 07:51 UTC All intelligence →

Digital Trust PractitionersAssociation of Digital Trust Practitioners · TrustPractitioners.org

EN

The laws, and what they mean in practice

Privacy, AI and cybersecurity laws that shape digital trust work, from the GDPR to every US state privacy law. Each entry says who it applies to, who enforces it and when, in plain words, with the sources. Free for everyone.

Regulations library Regulatory Watch US state map Compare laws

102laws explained

24US states with a privacy law

5coming into force

94in force today

Topic Privacy AI Health Children Biometrics Cybersecurity Breach notification Data brokers Marketing Financial International transfers

Status In force Coming into force Challenged or stayed Clear filters

European Union 1

GDPR

The global reference point for privacy law: lawful bases, principles, rights, accountability, breach notice within 72 hours, transfer rules and fines up to 4 percent of worldwide turnover.

Since May 25, 2018 Guide in progress

US federal 2

HIPAA

Governs protected health information held by the health care system and its vendors: permitted uses and disclosures, patient rights, security safeguards for electronic records, and breach notice.

Since Apr 14, 2003 Guide in progress

FTC HBNR

Breach notice for health apps and similar services outside HIPAA, where unauthorized sharing counts as a breach.

Since Sep 24, 2009

US states 2

SHIELD Act

Broadened New York's breach notification law and requires reasonable administrative, technical and physical safeguards.

Since Mar 21, 2020

State breach laws

Every state requires notice to affected residents after a breach of personal information. Deadlines, regulator notices and what counts as personal information differ, so a multi-state breach means applying several laws at once.

This library explains laws for practitioners. It is not legal advice, and laws change: check the sources on each page and take advice from counsel before acting.