Privacy & Cybersecurity Law Blog

On February 19, 2026, the Organisation for Economic Co-operation and Development published new guidance on the implementation of its Guidelines for Multinational Enterprises and AI Principles.

Wotton Kearney reports that on September 23, 2025, the New Zealand Privacy Amendment Act 2025, which introduces new privacy notification requirements that will become effective May 1, 2026, received royal assent.

On April 1, 2025, the UK government published the Cyber Security and Resilience Policy Statement, which details the UK government’s legislative proposals for the Cyber Security and Resilience Bill.

On August 24, 2023, 12 data protection authorities published a joint statement calling for the protection of personal data from unlawful data scraping. The statement was issued by the authorities of Argentina, Australia, Canada, Colombia, Hong Kong, Jersey, Mexico, Morocco, New Zealand, Norway, Switzerland and the UK. The joint statement reminds organizations that personal data that is publicly accessible is still subject to data protection and privacy laws in most jurisdictions, and highlights the risks facing such data, including increased risk of social engineering or phishing attacks, identify fraud, and unwanted direct marketing or spam.