Updates
What's New
Everything published or changed here, newest first. Framework changes, regulatory briefings and new articles, each dated and linked to the page that explains it.
November 2026 1 entry
-
Briefing
DPDP Rules: Consent Manager Provisions Commence in November 2026
The DPDP Rules, 2025 were published on 13 November 2025 and commence in three phases.
October 2026 6 entries
-
Standards, Frameworks and Laws: Reading AI Governance Requirements Correctly
The EU AI Act creates legal obligations. ISO/IEC 42001 and the NIST AI RMF are voluntary.
-
Breach Notification Clocks Compared: GDPR, India's DPDP Rules and HIPAA
GDPR: notify the supervisory authority within 72 hours where feasible, unless the breach is unlikely to result in a risk.
-
Penetration Test Scoping and Rules of Engagement: What a Good Test Plan Covers
A penetration test without written authorisation and agreed scope is not a test. It is a liability.
-
SOC 2 vs ISO/IEC 27001: What Each One Actually Proves
ISO/IEC 27001 certifies that a management system meets a standard. SOC 2 gives a CPA's opinion on controls against criteria.
-
Briefing
EDPB Publishes a Statement on the Data Protection Risks of Smart Glasses
The European Data Protection Board published a preliminary, non-binding statement on the data protection challenges of smart glasses on 13 October 2026, alongside a commissioned report, The Connected Gaze.
-
Briefing
Dutch DPA Fines Uber EUR 824,990,000 Over Automated Driver Deactivations
The Dutch data protection authority fined Uber EUR 824,990,000 under the GDPR, as reported by the European Data Protection Board on 8 October 2026.
September 2026 1 entry
-
Briefing
EDPB Adopts Guidelines 04/2026 on When to Impose GDPR Fines
The European Data Protection Board adopted Guidelines 04/2026 on using the power to impose administrative fines alongside other corrective powers under the GDPR.
July 2026 2 entries
-
Briefing
EU Adopts the Digital Omnibus on AI: High-Risk Deadlines Move to 2027 and 2028
Regulation (EU) 2026/1744 was published in the Official Journal on 24 July 2026 and entered into force shortly afterwards.
-
Briefing
CMMC Phase 2 Suspended Pending Programme Review
Phase 2, due on 10 November 2026, would have required Level 2 certification by a C3PAO at contract award for applicable contracts.
May 2026 1 entry
-
Briefing
PCI SPoC and CPoC Stop Accepting New Submissions After 31 October 2026
PCI SSC announced on 1 May 2026 that the PCI SPoC and PCI CPoC standards entered a formal sunset period.
April 2026 1 entry
-
Briefing
FedRAMP 20x Moves Past Its Pilots; New Rev5 Submissions to Close in 2027
After a Low pilot in 2025 and a Moderate pilot ending in March 2026, FedRAMP declared 20x its go-forward model in Phase 3.
Framework guides are not listed here. They are living reference pages rather than dated posts, and the Compliance Academy shows when each one was last reviewed. Everything above is checked against its official source before it is published; MajorCyber™ is educational and independent of the bodies whose rules it covers.