Industrial Policy & Trade Monitor· 2665 actions· ✨ 90 recent

Premier Li Qiang signed State Council Order No. 839 on 20 May 2026, promulgating the "Regulations for the Implementation of the Mineral Resources Law of the People's Republic of China" (8 chapters, 79 articles), effective 15 June 2026. The Regulations are the primary implementing instrument for the revised Mineral Resources Law and establish a unified governance architecture across the entire mineral value chain — exploration, production, processing, stockpiling, and emergency supply mobilisation — with inter-agency coordination spanning MNR, NDRC, MIIT, the State Grain and Material Reserves Administration, NEA, and the State Administration of Mine Safety. The Regulations introduce a three-layer strategic reserve system (physical stockpiles, production-capacity reserves, and in-ground strategic areas), grant the state authority to directly organise mining and distribution during supply emergencies (Article 59), and explicitly authorise countermeasures against nations that restrict China's access to mineral supply chains (Article 76).

On 19 March 2026, USTR Ambassador Jamieson Greer and Japan's Ministry of Foreign Affairs, METI, and Ministry of Finance jointly released the "United States-Japan Action Plan for Critical Minerals Supply Chain Resilience" — the operational follow-on to the 27 October 2025 US-Japan Framework. The Action Plan formally commits both governments to develop a plurilateral trade initiative in critical minerals "supported by price floors or other measures", to consult on embedding "border-adjusted price floors" in a binding plurilateral agreement, and to identify specific mining/processing/manufacturing projects in the US, Japan, or third countries for prioritised joint financing. It is the first formal US/Japan trade-policy commitment to administered floor-pricing as an instrument of critical-minerals trade governance, and explicitly invites third countries to join the contemplated plurilateral.

Sultan Haitham bin Tariq issued Royal Decree 39/2026 on 1 March 2026, published in the Sultanate of Oman Official Gazette Issue 1638 on 8 March 2026 (effective the following day), enacting a new Statute of the Public Authority for Special Economic Zones and Free Zones (OPAZ) and consolidating the Public Establishment for Industrial Estates under the unified OPAZ regulatory umbrella. The Statute restructures OPAZ's institutional architecture for administering Oman's 23 special economic zones, free zones, and industrial cities, expands OPAZ's supervisory and oversight powers — including project registration, licensing, permits, approvals, certificates, regulation of municipal services within zones — and mandates a single-window platform consolidating the full suite of zone-related services for investors. The decree is the institutional-governance complement to the substantive SEZ/FZ framework established by Royal Decree 38/2025 and operationalises the Vision 2040 economic-diversification strategy at the binding regulatory-authority layer, covering RO 22.4 bn (~USD 58 bn) in cumulative committed investment across the OPAZ-administered zone network.

The Cook Islands and United States signed a non-binding Framework for Engagement and Cooperation on 4–5 February 2026, on the sidelines of the 2026 US Critical Minerals Ministerial in Washington DC, to strengthen supply chains for critical minerals, rare earths, and deep-sea minerals. The framework establishes a US–Cook Islands Working Group, promotes joint research, geological mapping and information sharing, encourages responsible investment aligned with high ESG standards, and supports development of secure, diversified and resilient critical minerals supply chains. Uniquely among the eleven bilaterals signed at the Ministerial, the Framework explicitly recognises the Cook Islands' leadership in ocean governance and reaffirms the Cook Islands' full sovereign control over its seabed minerals and decision-making — a sovereignty- preservation clause that distinguishes it from other Feb-2026 cohort instruments.

On 27 January 2026 President Gabriel Boric presented Chile's National Critical Minerals Strategy (Estrategia Nacional de Minerales Críticos, NCMS) — the country's first horizontal critical-minerals governance framework, identifying 14 minerals as priorities for development and establishing five strategic pillars: production and diversification of critical minerals; responsible mining; development opportunities based on critical minerals; enabling capacities; and strategic international positioning. The strategy was developed through a multi-year participatory process coordinated through Cochilco and Sernageomin, involving a 16-member high-level advisory committee, 120 specialists from 56 institutions, regional workshops and a public consultation. It materially broadens Chile's mineral policy beyond the 2023 lithium-specific National Lithium Strategy to a cross-cutting framework that underpins future bilateral critical-minerals MOUs and positions Chile as a strategic raw-materials partner for the US, EU and Japan under their respective IRA/CRMA/GX supply-chain frameworks.

On 26 December 2025 the President of Kazakhstan signed a law amending the Code "On Subsoil and Subsoil Use" with respect to the hydrocarbon and uranium sectors, followed on 30 December 2025 by a parallel set of amendments implementing presidential instructions on broader subsoil-use governance. Both packages take effect on 2 March 2026. The uranium amendments grant the National Atomic Company Kazatomprom (KAP) a statutory priority right to obtain exploration licences over prospective uranium areas listed in the State Subsoil Fund Management Programme, and to reserve blocks containing uranium mineralisation or deposits. Where uranium mineralisation is discovered on a solid-mineral block held by a third-party subsoil-user, an extension of that licence is conditional on the licensee surrendering the uranium-bearing block to the State; private subsoil-users no longer obtain priority production rights for uranium they discover. The amendments also raise the minimum direct or indirect Kazatomprom interest in any uranium mining project from 50% to 75%, and permit subsequent transfer to investors or joint-venture partners only subject to that 75% floor. The 30 December 2025 package establishes the National Geological Service as a non-privatisable national operator subordinate to the authorised subsoil-exploration agency and as the operator responsible for managing geological information; it also creates a Unified Subsoil Use Platform digital infrastructure (open geological-information database integrated with the Unified State System for Management of the Fuel and Energy Complex). The hydrocarbon track of the law shortens block-reservation periods and pushes unallocated plots into electronic-auction allocation to accelerate competitive exploration. The amendments accompany an announced USD 500m state geological-exploration programme.

Taiwan's Legislative Yuan passed the Artificial Intelligence Basic Act (人工智慧基本法) on third reading on 23 December 2025, and President Lai Ching-te promulgated the 20-article statute on 14 January 2026, bringing it into force immediately. The Act designates the National Science and Technology Council (NSTC) as the central AI-policy competent authority and codifies seven governance principles — sustainability and well-being, human autonomy, privacy protection and data governance, cybersecurity and safety, transparency and explainability, fairness and non-discrimination, and accountability — that apply to all public-sector AI procurement and high-risk sectoral applications. The statute establishes a statutory foundation for the Taiwan AI Action Plan 2.0, mandates an Executive Yuan National AI Strategy Committee, and provides authority for sector-specific implementing regulations by FSC, NCC, MOHW, and MOTC across finance, telecoms, medical, and autonomous-vehicle AI within a two-year window. As the first national AI governance statute in the Greater China region and the third globally after the EU AI Act and South Korea's AI Basic Act, it frames regulatory expectations for the companies at the heart of the global AI hardware supply chain — TSMC, NVIDIA ODM partners, and advanced-packaging incumbents — that are headquartered or operate substantially in Taiwan.

In the early hours of 11 December 2025 the Council of the EU and the European Parliament reached provisional political agreement in trilogue on the "EU Pharma Package" — the revised pharmaceutical Regulation (COM 2023/0131) and Directive (COM 2023/0132) — the most significant overhaul of EU pharmaceutical legislation in over two decades. The package replaces Directive 2001/83/EC (Community Code on medicinal products for human use) and Regulation (EC) 726/2004 (the EMA Regulation), and consolidates the orphan-medicine (Regulation 141/2000) and pediatric-medicine regulations into a single framework. Headline provisions: (i) a new "8+1(+1)(+1)" IP-incentive architecture — 8 years of regulatory data protection plus 1 year of market protection, with up to two additional 12-month extensions for products addressing unmet medical need or new active substances meeting comparative-trial conditions, capped at 11 years total; (ii) an EU-wide list of critical medicines under enhanced governance via the Medicines Shortages Steering Group (MSSG) and an EMA "list of critical shortages in the EU"; (iii) mandatory shortage-prevention plans on marketing-authorisation holders for prescription medicines and Commission-designated products; (iv) modernisation of clinical-trial requirements, environmental-risk assessment, antimicrobial stewardship, and a transferable-exclusivity-voucher (TEV) regime to incentivise novel antibiotic R&D. The COREPER I committee endorsed the compromise text on 6 March 2026 and final adoption by Parliament and Council is expected during summer 2026, with the regulatory framework becoming applicable in 2028.

On 20 November 2025 the White House and US Department of Commerce / Bureau of Industry and Security (BIS) authorised Abu Dhabi AI holding company G42 to import advanced computing chips — equivalent to approximately 35,000 Nvidia GB300 Blackwell processors — under the UAE-pioneered Regulated Technology Environment (RTE) compliance framework. The RTE is an Emirati-designed technology governance and audit architecture, developed by G42 and approved under BIS guidelines, with binding UAE-side controls to prevent onward diversion to foreign adversary nations. The authorisation accelerates the Stargate UAE project — a 1 GW AI compute cluster being built by G42 for OpenAI in partnership with Oracle, Cisco, NVIDIA, and SoftBank Group — and represents the first concluded major country-level advanced-compute authorisation following the May 2025 rescission of the Biden-era AI Diffusion Rule.

President Claudia Sheinbaum signed a comprehensive reform to Mexico's Customs Law (Ley Aduanera) published in the Diario Oficial de la Federación on 19 November 2025, entering into force 1 January 2026. The decree formally recognises the Agencia Nacional de Aduanas de México (ANAM) as the autonomous customs authority with expanded inspection and fiscalisation powers, creates a new inter-secretarial Consejo Aduanero with binding decisional authority over customs-agent licensing, and mandates real-time electronic traceability and video-surveillance at all recintos fiscales. The reform is Mexico's most comprehensive statutory overhaul of its customs-administration architecture in over a decade, directly conditioning USMCA-origin compliance infrastructure for approximately US$800 billion in annual MX-US trade and over 3,200 IMMEX-registered nearshoring operators.

Bangladesh's Council of Advisers, chaired by Chief Adviser Prof. Muhammad Yunus, approved the National Logistics Policy 2025 on 6 November 2025 at its 47th meeting, replacing the annulled 2024 Awami League-era logistics policy. The framework spans 11 chapters and establishes a technology-driven, integrated, sustainable logistics ecosystem aimed at positioning Bangladesh as a leading regional trade and logistics hub by 2050. Two-tier governance architecture: a National Logistics Council (led by the Chief Adviser) for top-level coordination, and a National Logistics Development and Coordination Committee (led by the Chief Adviser's Principal Secretary) for implementation oversight across multimodal hubs, economic zones, international corridors, airports, river ports, sea ports, and land ports.

The Kachin Independence Organisation (KIO) formally introduced a Rare Earth Mining Management Regulation in October 2025, establishing permit procedures, investor obligations, environmental protection rules, chemical-use standards, labour provisions, and enforcement mechanisms for the heavy-rare-earth (HREE) mining industry it controls in Chipwi and Pangwa townships of Kachin State. The KIO assumed de facto territorial governance of Kachin Special Region No. 1 in October 2024 following KIA military operations, inheriting authority over hundreds of Chinese-operated extraction sites that collectively supply an estimated 60–70 % of China's heavy rare earth oxide imports (~41,700 t in 2023) — the proximate basis for China's ~95 % global market share in terbium, dysprosium, and holmium. The regulation formalises a permit-and-tax regime that includes an export levy of approximately 35,000 CNY/tonne (~USD 4,800), with export permission first reactivated by KIO on 27 March 2025 after a post-takeover suspension of all mining and export activity.

On 5 September 2025, President Gabriel Boric led the signing of the inaugural Contrato Especial de Operación de Litio (CEOL) between the Chilean government and state mining company ENAMI (Empresa Nacional de Minería) for the Salares Altoandinos basins in the Atacama region — the first CEOL ever issued under Chile's 2023 National Lithium Strategy. The contract runs until 31 December 2060 and covers exploration, evaluation, construction, and extraction phases; Rio Tinto holds a 51% operating stake with up to $425 million in cash and Direct Lithium Extraction (DLE) technology contributions, while ENAMI retains 49% with full corporate- governance rights over material decisions. Projected peak output is 75,000 tonnes per year of lithium carbonate equivalent (LCE), with production expected to commence between 2032 and 2034.

India and the UK signed the Comprehensive Economic and Trade Agreement (CETA) on 24 July 2025 in Chequers, with Prime Ministers Modi and Starmer presiding. The agreement grants duty-free access on 99% of Indian exports to the UK (textiles, apparel, footwear, auto components, engineering goods and chemicals), and reduces Indian tariffs on UK goods covering ~90% of tariff lines: Scotch whisky duties drop from 150% to 75% on day one and taper to 40% over ten years; high-end UK car tariffs fall from ~110% to 10% under a quota; UK MFN access on a wide industrial-goods envelope. A Double Contribution Convention exempts Indian secondees from UK National Insurance for three years. Bilateral trade currently ~£42 bn / USD 56 bn per year, with the parties targeting doubling by 2030. UK ratification under the Constitutional Reform and Governance Act 2010 (CRaG) ran from January 2026, with the 21-sitting-day scrutiny period concluding 5 March 2026. Entry into force was delayed from the originally targeted May 2026 date and is now confirmed for July 15, 2026 following a UK Prime Minister announcement at the G7 Évian summit sidelines on June 17, 2026. The confirmed EIF covers 64% of UK exports (£1.9bn) duty-free immediately, with an additional £25.5bn/year in projected additional bilateral trade.

On 14 July 2025, the Cabinet of Ministers of Ukraine adopted Resolution No. 845 "On the approval of the lists of minerals and components of strategic and critical importance, and the lists of subsoil areas (mineral deposits) of strategic and/or critical importance," establishing Ukraine's first national taxonomy for critical-minerals governance: 11 strategic minerals (incl. uranium, titanium, zirconium, copper, nickel, tantalum, strontium, niobium, beryllium, aluminium, fluorite) and 28 critical minerals (incl. lithium, rare earths, vanadium, gallium, indium, caesium, tin). The resolution simultaneously designates 60 subsoil-area blocks for electronic auction of special permits for subsoil use and 26 deposits for competitive tender under Production Sharing Agreements, operationalising Chapter 13 (Critical Raw Materials Management) of Ukraine's Plan under the Ukraine Facility (Resolution No. 244-p of 18 March 2024) and providing the domestic licensing scaffolding through which obligations under the 30 April 2025 US-Ukraine Mineral Resources Agreement and EU Critical Raw Materials Act strategic-partnership track will flow.

Indonesia's Ministry of Communications and Digital Affairs (Kemkomdigi) promulgated Permenkomdigi No. 5/2025 on 25 March 2025 as the implementing regulation under Government Regulation PP 71/2019 governing Public-Scope Electronic System Operators (PSE Lingkup Publik), defined as operators running electronic systems for government institutions or critical public services. The regulation mandates registration, data classification by risk level (low/medium/ high/strategic) with corresponding domestic storage and processing requirements, content- moderation governance, and access-blocking mechanisms for prohibited electronic information. All public-scope PSEs must achieve compliance by 25 March 2026, with non-compliant operators subject to progressive administrative sanctions under Articles 100-series ranging from written warnings to access disconnection (pemutusan akses) and removal from official registries.

On 24 February 2025 President Prabowo Subianto launched Badan Pengelola Investasi Daya Anagata Nusantara (Danantara), Indonesia's new state investment-management agency, consolidating around USD 900bn–1tn of Indonesian state-owned-enterprise assets — including Pertamina, PLN, Bank Mandiri, BRI, BNI, Telkom, MIND ID, Antam and Inalum — into a single super-holding modelled on Singapore's Temasek. Danantara was created by the Third Amendment to the BUMN Law (Law No. 1 of 2025, enacted 24 February 2025) and Government Regulation No. 10 of 2025 on its organisation and governance, with board appointments formalised by Presidential Regulation No. 30 of 2025. The agency reports directly to the President, bypassing the Ministry of State-Owned Enterprises, and is mandated to deploy SOE balance-sheet capacity into Prabowo's 8% growth target via co-investment in mineral downstreaming, refinery and EV-battery build-out, food security, and semiconductor / data-centre infrastructure.

On 1 February 2025, Finance Minister Nirmala Sitharaman announced the National Manufacturing Mission (NMM) in the Union Budget 2025-26 as a horizontal umbrella framework extending the 2014 "Make in India" architecture across small, medium and large industries. The mission rests on five focal areas: (i) ease and cost of doing business; (ii) a future-ready workforce for in-demand jobs; (iii) a vibrant and dynamic MSME sector; (iv) availability of technology; and (v) quality manufacturing. It will deliver policy support, execution roadmaps, and a governance/monitoring framework binding central ministries with states. NMM specifically commits to building a clean-tech manufacturing ecosystem with explicit coverage of solar PV cells, EV batteries, motors and controllers, electrolysers, wind turbines, very-high-voltage transmission equipment, and grid-scale batteries — i.e., the full hardware stack for India's Panchamrit (500 GW non-fossil by 2030), FAME-III EV ramp, and National Green Hydrogen Mission. NMM is the first horizontal Indian manufacturing-mission instrument in the IPTM register; existing IND entries are sector-specific PLIs (electronics, batteries, steel, semiconductors) and the National Critical Mineral Mission. Operational rollout flows through subsequent Cabinet-level scheme approvals (e.g. Biopharma SHAKTI ₹10,000 cr, Chemical Parks ₹600 cr in BE 2026-27); the mission itself does not carry a single headline outlay because it is the framework rather than an instrument.

Malaysia's Personal Data Protection (Amendment) Act 2024 (Act A1727), gazetted 17 October 2024, enters its third and final commencement phase on 1 June 2025 per commencement order P.U.(B) 522/2024. Phase 3 activates sections 6 and 9 of the amending Act, which impose mandatory Data Protection Officer (DPO) appointment thresholds, a 72-hour breach-notification duty to the Commissioner, and a statutory data-portability right, bringing Malaysia's PDPA broadly into alignment with GDPR and the ASEAN Model AI Governance Framework.

The National Assembly of Vietnam passed the Law on Data (Luật Dữ liệu), No. 60/2024/QH15, on 30 November 2024; it enters into force on 1 July 2025. The Law is Vietnam's first comprehensive horizontal data-governance statute, extending regulation beyond personal data (already covered by Decree 13/2023/ND-CP) to all digital data — public, private, and sectoral. It introduces statutory categories of "important data" (dữ liệu quan trọng) and "core data" (dữ liệu cốt lõi) tied to national-defence and national-security review for cross-border transfer, and establishes the National Data Centre under the Ministry of Public Security plus a statutory data-broker / data-services licensing framework.

Mongolia's State Great Hural adopted a comprehensive package of amendments to the 2009 Nuclear Energy Law on 21 November 2024 (approved by 68.1% of votes), restructuring the country's uranium-sector governance across three principal axes. The amendments introduce a dynamic three-tier uranium royalty framework — 5% basic (AMNAT) + 5% special + 0–9% price-linked incremental royalty, yielding approximately 14–19% aggregate — that replaces a flat-rate structure with a price-elastic mechanism designed to capture uranium supercycle upside for the Mongolian state. The law also prohibits export of radioactive minerals in raw ore form (mandatory domestic processing to at least yellowcake/U₃O₈ before export), prohibits import, transit, and disposal of foreign spent nuclear fuel in Mongolia, and provides the parliamentary legal underpinning for the ~USD 1.6 billion Orano (France)– Mongolia state investment agreement on the Zuuvch-Ovoo in-situ-leach uranium deposit (Dornogovi province), signed October 2024, targeting first production in 2028 with eventual ramp-up to ~2,500 t/yr uranium output.

On 8 October 2024 Botswana's National Assembly assented to the Mines and Minerals (Amendment) Act No. 14 of 2024, the most significant rewrite of the country's mining statute (Cap. 66:01, 1999) in over two decades. The Act commenced on 1 October 2025 via Statutory Instrument 120 of 2025 and introduces five structurally significant provisions: a mandatory 24% citizen/local-investor equity participation in new mining concessions (if the state elects not to take the stake itself), a broadened "controlling interest" definition capturing indirect offshore transactions, enhanced ministerial licence-transfer approval requirements, strengthened environmental rehabilitation obligations, and an in-country beneficiation push. The measure closes the offshore-transaction loophole that previously allowed indirect change-of-control via Mauritius/BVI/Singapore SPVs to bypass ministerial approval, and operationalises Botswana's resource-nationalism turn alongside the companion February 2025 De Beers / Debswana commercial renegotiation.

The European Union's Artificial Intelligence Act, Regulation (EU) 2024/1689, was published in the Official Journal on 12 July 2024 and entered into force on 1 August 2024. It establishes the world's first horizontal, risk-tiered legal framework for the development, market placement, and use of AI systems — covering prohibited practices, high-risk systems, general-purpose AI models, and minimal-risk applications — with extraterritorial reach over any provider placing an AI system on the EU market or whose output is used in the EU. Penalties reach up to EUR 35 million or 7% of global annual turnover. Application is staged: prohibitions from 2 February 2025, GPAI and governance from 2 August 2025, the bulk of high-risk obligations from 2 August 2026, and product-safety-embedded high-risk systems from 2 August 2027.

Italy's Decreto-Legge 25 giugno 2024 n. 84, converted with amendments into Legge 8 agosto 2024 n. 115 (Gazzetta Ufficiale n. 189 of 13 August 2024, in force 14 August 2024), is Italy's national implementing instrument for Regulation (EU) 2024/1252 (the EU Critical Raw Materials Act). It establishes a MIMIT-led national governance framework for strategic CRM projects spanning extraction, transformation, and recycling; creates a mandatory National Register of strategic companies and value chains with annual reporting on strategic-material import/export flows; divides permitting competence between MASE (extraction/recycling, max 18/10 months) and MIMIT (transformation, max 10 months); and designates INVITALIA and CDP as financing windows for Italian strategic-CRM projects seeking EU Strategic Project status under CRMA Article 6.

President Luis Abinader signed Decreto No. 324-24 on 13 June 2024, declaring the promotion, innovation, and development of the semiconductor industry in the Dominican Republic as "alta prioridad nacional" (high national priority) and directing MICM to formulate a National Strategy for the Promotion of the Semiconductor Industry (ENFIS). The decree was published in the Official Gazette on 28 June 2024, establishing a high-level inter-ministerial coordination mechanism and linking the initiative to the free-trade-zone incentive framework under Law 8-90. ENFIS was formally launched on 19 August 2025 by President Abinader and MICM Minister Víctor Bisonó at the Día Nacional de las Zonas Francas, structuring the strategy across five pillars: Industrial Development, Governance and Policy, Workforce and Human Capital, Investment Attraction, and Innovation and R&D Ecosystem.

Loi n° 2024-449 of 21 May 2024, known as the SREN law (Sécuriser et Réguler l'Espace Numérique), was definitively adopted by the French Parliament on 10 April 2024, validated in part by the Conseil Constitutionnel on 17 May 2024 (Decision n° 2024-866 DC), promulgated by the President on 21 May 2024, and published in the Journal Officiel on 22 May 2024. SREN is France's digital-sovereignty omnibus statute: it transposes parts of the EU Digital Services Act (Regulation 2022/2065), Digital Markets Act (Regulation 2022/1925), and Data Governance Act (Regulation 2022/868) into French law and layers national-level instruments on top — most consequentially a data-localisation hook for sensitive public-sector data tied to the ANSSI SecNumCloud sovereign-cloud certification scheme, an ARCOM-enforced age-verification regime for adult-content sites (with €250k or 2%-of-turnover fines and account-closure powers), an "anti-scam" cybersecurity filter requiring browsers and DNS resolvers to block ANSSI-designated fraudulent domains, a jeux-en-ligne (JONUM) regime for cryptoasset-adjacent gaming, and a coordination framework between CSA, CNIL, ARCOM, and the Autorité de la concurrence. SREN is one of the first EU member-state digital omnibus statutes anchoring national public-sector data-hosting rules to a sovereign-cloud certification scheme.

On 22 January 2024 President Sadyr Japarov signed Presidential Decree No. 5 approving the National Project for the Extraction of Polymetals and Rare-Earth Elements for the Dynamic Development of the Economy of the Kyrgyz Republic. The decree designates 22 critical minerals (antimony, rare-earth elements, tungsten, copper, beryllium and other transition-relevant metals) and mandates the development of a comprehensive national Strategy on Critical Minerals supported by regulatory reform and digitisation of state geological data. Operational targets include $1bn in annual critical-minerals exports by 2030, $700m in foreign direct investment inflows to the sector, and the launch of at least five new investment projects. Following the decree, the Cabinet of Ministers approved an implementation Action Plan on 20 March 2024 with a 1bn som (approx $11m) budget allocation across 2024-2026. This is Kyrgyzstan's first standalone strategic-minerals framework instrument; it complements but does not duplicate the 2021 Mining Code (governance framework, not strategy).

Regulation (EU) 2023/2854 of the European Parliament and of the Council of 13 December 2023 on harmonised rules on fair access to and use of data — the "Data Act" — was published in the Official Journal on 22 December 2023, entered into force on 11 January 2024, and applies generally from 12 September 2025 (with longer transitional periods for IoT product-design obligations under Article 3(1), which apply to products placed on the market after 12 September 2026, and for the data-portability standardisation framework, applicable from 12 September 2027). The Data Act is the third pillar of the EU data-economy framework alongside the GDPR (personal data) and the Data Governance Act 2022/868 (data-intermediation services), and is the world's first horizontal statutory regime governing access to and portability of industrial / IoT / non-personal data — covering by-design data-availability obligations on connected-product manufacturers, a mandatory cloud- switching framework with progressive elimination of switching charges, B2G emergency data-sharing in exceptional needs, unfair-contract-terms protection for SMEs, and safeguards against unlawful international government access to non-personal data held in EU cloud.

Loi n° 22-18 du 24 juillet 2022 relative à l'investissement (Journal Officiel de la République Algérienne n° 50 du 28 juillet 2022) is Algeria's first comprehensive investment-code overhaul since Ordonnance 01-03 du 20 août 2001 and its 2016 Loi 16-09 amendment. The law replaces the legacy framework, codifies a liberalised FDI regime — retaining 51% Algerian-equity floors only for strategic sectors (hydrocarbons extraction, mining extraction, military/security) — creates the Agence Algérienne de Promotion de l'Investissement (AAPI) as the new single-window FDI-promotion agency and the Conseil National de l'Investissement (CNI) chaired by the Premier Ministre, and defines three investment regimes: Régime des Secteurs, Régime des Zones (Sud + Hauts-Plateaux territorial incentives), and the Régime Structurant for large-scale strategic projects ≥ DZD 2bn (~USD 15M) that attract negotiated multi-pillar fiscal, customs, parafiscal, and social-contribution incentive packages. Eight implementing décrets exécutifs n° 22-296 through 22-303 were published in JORADP n° 60 du 18 septembre 2022, operationalising governance, incentive matrices, the digital Registre National des Investissements, and dispute-resolution architecture.

Regulation (EU) 2022/868 of the European Parliament and of the Council of 30 May 2022 on European data governance — the Data Governance Act (DGA) — was published in the Official Journal on 3 June 2022, entered into force on 23 June 2022, and became fully applicable on 24 September 2023. The DGA is the second pillar of the EU data-economy framework (alongside GDPR for personal data and the Data Act 2023/2854 for industrial/IoT data) and establishes four structural mechanisms: (i) a harmonised public-sector data re-use regime for protected data held by public-sector bodies; (ii) a mandatory notification and structural-separation regime for data-intermediation service providers; (iii) a voluntary recognition framework for data-altruism organisations (RDAOs); and (iv) the European Data Innovation Board (EDIB) to co-ordinate national competent authorities and advise on common European data spaces and interoperability standards. The regulation is the foundational parent statute of the existing French SREN law filing (2024-05-21) and functions as enabling legislation for the EU's sectoral common-data-space programme (Health, Agriculture, Finance, Mobility, Green Deal, Energy, etc.).

The Personal Information Protection Law of the People's Republic of China (中华人民共和国个人信息保护法 — PIPL) was adopted at the 30th meeting of the 13th NPC Standing Committee on 20 August 2021 and entered into force on 1 November 2021, constituting the third and final pillar of China's cybersecurity and data-governance regulatory trinity alongside the Cybersecurity Law (2016) and the Data Security Law (2021). The PIPL is China's comprehensive personal-information statute establishing consent-based and necessity-based legal bases for PI processing, a tiered cross-border personal-data transfer regime (CAC security assessment / PI protection certification / Standard Contractual Clauses), extraterritorial application (Art. 3) to non-Chinese controllers offering services to or analysing the behaviour of PRC residents, and a heightened protection regime for sensitive personal information and data of minors under 14. It mandates data-protection impact assessments, personal-information-protection-officer obligations at designated handlers, breach notification, and a full suite of data-subject rights including access, rectification, deletion, portability, objection, and automated- decision-making opt-out. Article 53 requires overseas controllers to establish a domestic representative or designated entity in China, providing a domestic enforcement counterparty.

The Data Security Law of the People's Republic of China (中华人民共和国数据安全法) was adopted at the 29th meeting of the 13th NPC Standing Committee on 10 June 2021 and entered into force on 1 September 2021, constituting the second pillar of China's cybersecurity and data-governance regulatory trinity alongside the Cybersecurity Law (2016) and the Personal Information Protection Law (2021). The DSL establishes a tiered data-classification regime — "important data" and "national core data" — with escalating security obligations including risk assessment, risk monitoring, breach reporting, and classified-protection requirements for data handlers. It introduces a data-export security review for "important data" generated or collected within China, the statutory parent authority operationalised by the 2024 CAC Cross-Border Data Flow Provisions, and enacts a §36 blocking statute prohibiting Chinese organisations and individuals from transferring data stored in China to foreign judicial or law-enforcement authorities without prior PRC government approval.

The US Department of the Treasury's Office of Foreign Assets Control (OFAC) published abbreviated Hong Kong-Related Sanctions Regulations at 31 CFR Part 585, codifying the sanctions framework established by Executive Order 13936 of July 14, 2020 ("The President's Executive Order on Hong Kong Normalization"). The regulations prohibit all transactions with persons designated under EO 13936 — those determined to have undermined Hong Kong's autonomy or contributed to the erosion of freedoms guaranteed under the Sino-British Joint Declaration — and add designated persons to the OFAC Specially Designated Nationals (SDN) list. OFAC published the rules in abbreviated form for immediate public guidance, with intent to supplement with full interpretive guidance, general licenses, and licensing policy.

The Cybersecurity Law of the People's Republic of China (中华人民共和国网络安全法) was adopted at the 24th meeting of the 12th NPC Standing Committee on 7 November 2016 and entered into force on 1 June 2017, establishing the foundational legal framework for network security governance across all sectors. The law creates the Critical Information Infrastructure Operator (CIIO) designation and protection regime administered by the Cyberspace Administration of China (CAC), mandates data localisation for personal information and important data collected or generated by CIIOs in China, and establishes cross-border data-transfer security assessment requirements under Article 37 — the provision later operationalised by DSL 2021, PIPL 2021, and the 2024 CAC Cross-Border Data Flow Provisions. The CSL introduced multi-level protection scheme (等级保护制度 / MLPS) obligations for all network operators and network-product/service security-review procedures, under which CAC triggered the cybersecurity review of Didi Global in 2021 and the exclusion of Micron's products from Chinese critical-infrastructure projects in 2023.