Data Privacy News

The Formiti Privacy News Blog delivers the latest insights, expert advice, and practical tips on global data protection laws and privacy trends. From GDPR to PDPA, we make complex regulations clear, helping you protect data, stay compliant, and build trust.


 

at a time


The UK Cyber Security and Resilience Bill: A Global Organisation's Guide

The UK's upcoming Cyber Security and Resilience Bill (CSRB) transforms cyber security from an IT best practice into a board-level legal obligation, significantly updating the 2018 ...  more  

Surge in US Data Privacy Enforcement

2025 has been a pivotal year for data privacy enforcement in the U.S. The period of preparation and grace periods has ended, and regulators are now actively enforcing these new la...  more  

A Comprehensive Guide to Maryland's MODPA for Global Organizations

MODPA imposes unique and absolute restrictions on how Sensitive Data can be handled. Sensitive Data is broadly defined to include: Racial/ethnic origin, religious beliefs, sex lif...  more  

A Global Organization's Guide to Washington's My Health My Data Act (MHMDA)

Washington's My Health My Data Act (MHMDA) is a stringent new privacy law with global reach, impacting any organization that targets Washington consumers. The article provides a st...  more  

The Tri-Region Playbook: A Comparative Guide to UAE, Saudi & Egyptian Data Laws

This article provides a strategic comparison of the data protection laws in the UAE, Saudi Arabia (KSA), and Egypt for global organizations. It highlights that the UAE's law is fle...  more  

Navigating the 2025 US State Privacy Law Landscape: A 2025 Progress Report and 2026

2025 marked a critical turning point for US data privacy, as new comprehensive laws in Delaware, New Jersey, Iowa, New Hampshire, and Nebraska took effect. This article from Formit...  more  

A Guide to US Data Protection Impact Assessments (DPIAs) for Global Organizations

The article guides global organizations through the complex "patchwork" of US state data privacy laws, which, unlike the EU's GDPR, lack a single federal standard. It focuses on th...  more  

Understanding the 9 APEC Privacy Framework Principles

This article provides a comprehensive guide for global organisations on the Asia-Pacific Economic Cooperation (APEC) Privacy Framework. It explains the crucial difference between t...  more  

A Guide to the APEC Privacy Framework: Enabling Cross-Border Data Flows

The article explains the APEC Privacy Framework, a critical, principles-based system for global organizations doing business in the Asia-Pacific region. Unlike the mandatory GDPR, ...  more  

The New Imperative: Why Robust Vendor Assessments Are Critical for Data Protection

This article explains why robust vendor assessments are critical for data protection, stating that a breach from a third party is a direct reflection—and liability—for your busines...  more