Privacy & Information Security Law Blog

On December 16, 2025, the Federal Trade Commission announced an enforcement action against Illusory Systems Inc., a Utah-based company doing business as Nomad, following a major data breach in which hackers stole $186 million from consumers.

On November 12, 2025, the UK government introduced the draft Cyber Security and Resilience (Network and Information Systems) Bill to the UK Parliament.

On October 28, 2025, the Cyberspace Administration of China issued important amendments to the Chinese Cybersecurity Law, which will take effect on January 1, 2026.  

On Oct 14, 2025, the Cyberspace Administration of China and the State Administration for Market Regulation issued Measures for the Certification for Outbound Cross-Border Transfer of Personal Information, effective Jan 1, 2026.