Live threats

HighClaude Dispatch Flaw Enables Browser Extension RCE on Host OS BreachBrenner Base Tunnel SE Confirms Data Breach; Extortion Group Claims 812 GB Stolen Rule changeOPM proposes to modify OPM/Central-21 system of records and rename employee survey DeadlineFrench court orders DNS resolver Quad9 to block sites, prompting its withdrawal from France CriticalCritical OpenSSH Auth Bypass Flaw Lets Long Passwords Circumvent Authentication on Alpine Linux BreachDigiCert Migration Misconfiguration Exposes Customer Identity Documents FineCommission preliminarily finds TikTok’s ‘For You’ feed breaches DSA over harmful ‘rabbit hole’ effect CriticalPatched Zyxel GS1900 Switches Remain Exploitable (CVE‑2026‑107441)

HighClaude Dispatch Flaw Enables Browser Extension RCE on Host OS BreachBrenner Base Tunnel SE Confirms Data Breach; Extortion Group Claims 812 GB Stolen Rule changeOPM proposes to modify OPM/Central-21 system of records and rename employee survey DeadlineFrench court orders DNS resolver Quad9 to block sites, prompting its withdrawal from France CriticalCritical OpenSSH Auth Bypass Flaw Lets Long Passwords Circumvent Authentication on Alpine Linux BreachDigiCert Migration Misconfiguration Exposes Customer Identity Documents FineCommission preliminarily finds TikTok’s ‘For You’ feed breaches DSA over harmful ‘rabbit hole’ effect CriticalPatched Zyxel GS1900 Switches Remain Exploitable (CVE‑2026‑107441) HighClaude Dispatch Flaw Enables Browser Extension RCE on Host OS BreachBrenner Base Tunnel SE Confirms Data Breach; Extortion Group Claims 812 GB Stolen Rule changeOPM proposes to modify OPM/Central-21 system of records and rename employee survey DeadlineFrench court orders DNS resolver Quad9 to block sites, prompting its withdrawal from France CriticalCritical OpenSSH Auth Bypass Flaw Lets Long Passwords Circumvent Authentication on Alpine Linux BreachDigiCert Migration Misconfiguration Exposes Customer Identity Documents FineCommission preliminarily finds TikTok’s ‘For You’ feed breaches DSA over harmful ‘rabbit hole’ effect CriticalPatched Zyxel GS1900 Switches Remain Exploitable (CVE‑2026‑107441)

Updated 07:45 UTC All intelligence →

Digital Trust PractitionersAssociation of Digital Trust Practitioners · TrustPractitioners.org

EN

The laws, and what they mean in practice

Privacy, AI and cybersecurity laws that shape digital trust work, from the GDPR to every US state privacy law. Each entry says who it applies to, who enforces it and when, in plain words, with the sources. Free for everyone.

Regulations library Regulatory Watch US state map Compare laws

102laws explained

24US states with a privacy law

5coming into force

94in force today

Topic Privacy AI Health Children Biometrics Cybersecurity Breach notification Data brokers Marketing Financial International transfers

Status In force Coming into force Challenged or stayed Clear filters

US federal 2

CAN-SPAM

Honest headers and subject lines, a postal address, and an opt-out honored within ten business days. No consent is required to send.

Since Jan 1, 2004 Guide in progress

TCPA

Consent rules for automated and prerecorded calls and texts, the National Do Not Call Registry, and statutory damages per call.

Since Dec 20, 1991 Guide in progress

This library explains laws for practitioners. It is not legal advice, and laws change: check the sources on each page and take advice from counsel before acting.