Compliance & Regulatory Watch
Track changes to security standards and regulations: ISO 27001, NIS2, GDPR, NZISM, PSR, Essential Eight and more. Subscribe to frameworks to be notified when they change.
| Framework | Change | Type | Published | Source | |
|---|---|---|---|---|---|
| NIS2 |
NIS2 Directive โ national implementation deadlines
EU member states continue transposing NIS2; in-scope organisations must comply with new incident reporting and risk management duties.
|
UPDATE | 2026-08-16 | European Commission / DG CONNECT | Follow |
| NZISM |
New Zealand Information Security Manual update
Updated NZISM guidance on cloud security and protective security requirements for NZ government agencies.
|
UPDATE | 2026-08-15 | NZ NCSC | Follow |
| Essential Eight |
ASD Essential Eight maturity model refreshed
ASD updated the Essential Eight maturity model with clarified application-control and patching guidance for Australian entities.
|
UPDATE | 2026-08-14 | ASD / ACSC | Follow |
| ISO 27001 |
ISO/IEC 27001:2022 transition period ends
Organisations should complete migration from ISO/IEC 27001:2013 to the 2022 revision and updated control set (Annex A 93 controls).
|
UPDATE | 2026-08-13 | ISO | Follow |
| GDPR |
EDPB guidance on data breach notification
EDPB adopted new guidance on breach notification procedures for EU organisations, clarifying 72-hour notification expectations.
|
GUIDANCE | 2026-08-11 | EDPB | Follow |
| PSR |
Protective Security Requirements review
NZ government security policy (PSR) refreshed with updated personnel security and information security expectations.
|
GUIDANCE | 2026-08-09 | NZ Government / DIA | Follow |
