Industrial Policy & Trade Monitor· 2663 actions· ✨ 89 recent

The Republic of Korea's National Assembly passed the Framework Act on the Development of Artificial Intelligence and the Establishment of a Foundation for Trustworthiness ("AI Basic Act") in plenary session on 26 December 2024, consolidating 19 separate AI bills tabled in the 22nd National Assembly. The statute was promulgated on 21 January 2025 and takes effect on 22 January 2026 after a one-year preparation period. Korea becomes the second jurisdiction worldwide — after the EU AI Act — to enact a comprehensive horizontal AI law, and the first in the Asia-Pacific. The Act establishes a risk-tiered regime targeting "high-impact" AI in healthcare, energy, public services, employment decisions, and generative-AI labelling, with extraterritorial reach over foreign providers whose systems affect the Korean market or users (mandatory local representative). It creates an AI Safety Institute, a national AI policy "control tower," and R&D / standardisation programmes under MSIT. Penalties are modest by international comparison — fines up to KRW 30 million plus a one-year grace period before full enforcement.

Malaysia's Personal Data Protection (Amendment) Act 2024 (Act A1727), gazetted 17 October 2024, enters its third and final commencement phase on 1 June 2025 per commencement order P.U.(B) 522/2024. Phase 3 activates sections 6 and 9 of the amending Act, which impose mandatory Data Protection Officer (DPO) appointment thresholds, a 72-hour breach-notification duty to the Commissioner, and a statutory data-portability right, bringing Malaysia's PDPA broadly into alignment with GDPR and the ASEAN Model AI Governance Framework.

The Minerals Regulation Commission Act, No. 14 of 2024 repeals and replaces Zambia's 2015 Mines and Minerals Development Act in its entirety, establishing a new autonomous Minerals Regulation Commission (MRC) as the country's central mining-sector regulator together with a standalone Mining Appeals Tribunal. The Act restructures licensing, royalty administration, monitoring and enforcement, and creates a dedicated dispute-resolution architecture separating regulatory and adjudicatory functions. Assented to on 20 December 2024 and gazetted on 26 December 2024, the Act took effect on 13 June 2025 pursuant to the Minerals Regulation Commission Act, 2024 (Commencement) Order, 2025 (SI 42 of 2025) signed by the Minister of Mines and Minerals Development on 3 June 2025.

Regulation (EU) 2025/38 of the European Parliament and of the Council of 19 December 2024 lays down measures to strengthen solidarity and capacities in the Union to detect, prepare for, and respond to cyber threats and incidents, and amends Regulation (EU) 2021/694 (Digital Europe Programme). Published in the Official Journal on 15 January 2025; entered into force on 4 February 2025 (20 days after OJ publication). The regulation establishes (i) a European Cybersecurity Alert System composed of national and cross-border Security Operations Centre (SOC) hubs interconnected EU-wide, (ii) a Cybersecurity Emergency Mechanism funded through the Digital Europe Programme, (iii) an EU Cybersecurity Reserve of trusted private-sector incident-response providers, and (iv) an ENISA-led post-incident review mechanism for significant or large-scale cybersecurity incidents. It complements the Cyber Resilience Act (Reg 2024/2847) and the NIS2 Directive as the third leg of the EU horizontal-cybersecurity stack.

Regulation (EU) 2025/40, published in the Official Journal on 22 January 2025 and entering into force on 11 February 2025, replaces the 1994 Packaging and Packaging Waste Directive 94/62/EC with a directly-applicable Regulation. It mandates binding recycled-content targets for plastic packaging (by polymer and format, reaching 30–65% by 2030 with higher targets by 2040), minimum reusable-packaging shares for beverages and transport, recyclability standards for all packaging placed on the EU market from 2030, deposit-return-scheme obligations for beverage containers from 2029, and bans on specified single-use plastic packaging formats. General application begins 12 August 2026, with staggered compliance windows extending to 2030 and beyond, affecting all non-EU exporters shipping consumer goods, beverages, or e-commerce fulfilment into the EU single market.

Loi n° 2024-1109 du 18 décembre 2024 portant Budget de l'État pour l'année 2025 (and its annexe fiscale, JO n° 21 of 26 December 2024, entered into force 10 January 2025) raises Côte d'Ivoire's gold ad valorem royalty (taxe ad valorem sur l'or) by two percentage points across all five price tiers — from 3% to 5% at gold ≤ USD 1,000/oz up to 6% to 8% at gold > USD 2,000/oz. The increase applies to all gold producers operating under the Code Minier régime and is collected on the value of gold extracted at the applicable USD-per-ounce reference price. First IPTM entry for Côte d'Ivoire; sits alongside the wider West/Central African mining-fiscal-tightening cycle (Mali 2024 implementing decree, Burkina Faso 2024 ALT mining code, Madagascar 2023 mining code refonte) and reflects a Ouattara-government posture of capturing more of the gold-price super-cycle for the state budget.

The U.S. Department of Commerce, through the International Trade Administration's Enforcement and Compliance unit, issued a final rule amending 19 CFR Part 351 to enhance the administration of the antidumping (AD) and countervailing duty (CVD) trade-remedy laws. The final rule (FR Doc. 2024-29245, 89 FR effective 15 Jan 2025) operationalises the proposals in the July 2024 NPRM (89 FR 57286), tightening procedures for cash-deposit and liquidation instructions, scope determinations, certifications, and treatment of non-market-economy and particular-market- situation findings — areas central to the second Biden-Trump hand-off in trade-remedy enforcement. A correcting amendment (FR Doc. 2025-05481, effective 31 Mar 2025) restored inadvertently deleted CFR language and fixed punctuation/spelling errors without changing substantive scope.

Australia enacted the Taxation (Multinational—Global and Domestic Minimum Tax) Act 2024 (No. 132, 2024) and its companion Imposition Act (No. 133, 2024), receiving royal assent on 10 December 2024, together implementing all three OECD/G20 GloBE charges in a single legislative cycle: an Income Inclusion Rule (IIR), an Undertaxed Profits Rule (UTPR), and a Qualified Domestic Minimum Top-up Tax (QDMTT). The IIR and QDMTT apply to fiscal years beginning on or after 1 January 2024 (retroactive at enactment); the UTPR applies to fiscal years beginning on or after 1 January 2025. All three charges apply to Australian members of MNE groups with consolidated annual revenue ≥ EUR 750 million, administered by the Australian Taxation Office.

UAE Cabinet Decision No. 142 of 2024, announced 9 December 2024 and formally gazetted 11 February 2025, introduces a Domestic Minimum Top-Up Tax (DMTT) on UAE constituent entities of Multinational Enterprise (MNE) groups with consolidated annual revenues ≥ EUR 750 million in at least two of the four preceding fiscal years. The DMTT ensures a 15% minimum effective tax rate (ETR) on UAE-source profits, functioning as a Qualified Domestic Minimum Top-up Tax (QDMTT) under the OECD/G20 Pillar Two GloBE framework, thereby giving the UAE first-priority taxing right before any IIR top-up by a parent-jurisdiction authority. The measure applies to fiscal years beginning on or after 1 January 2025. The UAE deliberately excluded the Income Inclusion Rule (IIR) and Under-Taxed Profits Rule (UTPR) from this primary instrument, deferring those to subsequent Cabinet Decisions; the QDMTT-only architecture mirrors Singapore's MEMTA and Switzerland's MindStV as the first-mover design choice for established low-tax financial hubs.

The National Assembly of Vietnam passed the Law on Data (Luật Dữ liệu), No. 60/2024/QH15, on 30 November 2024; it enters into force on 1 July 2025. The Law is Vietnam's first comprehensive horizontal data-governance statute, extending regulation beyond personal data (already covered by Decree 13/2023/ND-CP) to all digital data — public, private, and sectoral. It introduces statutory categories of "important data" (dữ liệu quan trọng) and "core data" (dữ liệu cốt lõi) tied to national-defence and national-security review for cross-border transfer, and establishes the National Data Centre under the Ministry of Public Security plus a statutory data-broker / data-services licensing framework.

Regulation (EU) 2024/3015 of the European Parliament and of the Council of 27 November 2024 establishes the first EU-wide binding prohibition on placing, making available on, or exporting from the EU single market any products made with forced labour at any stage of production, manufacture, harvest, extraction or processing. The regulation is cross-sector and horizontal — no sectoral exemptions apply. It entered into force on 13 December 2024, with a phased implementation schedule; procedural and institutional framework provisions apply from 13 December 2024, while full operational application begins on 14 December 2027. The regulation empowers national competent authorities (and the Commission for state-imposed forced-labour cases involving third countries) to investigate, require withdrawal, and order destruction of non-compliant goods, and establishes a Commission-maintained publicly accessible database of high-risk geographic areas, sectors, and products.

Décret n° 2024/05251/PM, signed on 19 November 2024 by the Cameroonian Prime Minister, establishes the legal framework governing the possession, marketing, export, import, and transit of mineral substances in Cameroon. The decree operationalises the trade-flow control architecture introduced by the headline Loi n°2023/014 portant Code Minier (December 2023), giving effect to SONAMINES's statutory monopoly over the purchase and commercialisation of strategic minerals including gold, diamonds, cobalt, nickel, and manganese. It is one of eight implementing decrees signed 18–19 November 2024 that together constitute the full operational legal framework under the 2023 Code Minier.

Singapore enacted the Multinational Enterprise (Minimum Tax) Act 2024 (Act No. 36 of 2024), which received Presidential assent on 8 November 2024 after passing Parliament on 15 October 2024, implementing OECD/G20 GloBE Pillar Two rules for fiscal years beginning on or after 1 January 2025. The Act introduces a 15% Income Inclusion Rule (IIR) and a Qualified Domestic Minimum Top-up Tax (DTT / QDMTT) for MNE groups with consolidated annual revenue ≥ EUR 750 million; the Undertaxed Profits Rule (UTPR) is deliberately deferred to a subsequent amendment cycle. Singapore's adoption is structurally significant as the first major low-corporate-tax-rate Asia-Pacific financial hub to conform to the 15% floor, signalling that traditional 17%-rate holding-company and treasury-centre structures are no longer a stable tax-arbitrage substrate.

Regulation (EU) 2024/2847 of the European Parliament and of the Council on horizontal cybersecurity requirements for products with digital elements, signed 23 October 2024 and entering into force 10 December 2024. The CRA is the first EU statutory cybersecurity regime covering all hardware and software products with a direct or indirect data connection placed on the EU market, imposing essential cybersecurity requirements, conformity assessment with CE marking, mandatory vulnerability handling, and 24-hour early-warning notification of actively-exploited vulnerabilities to ENISA. Main manufacturer obligations apply from 11 December 2027; conformity-assessment-body notification provisions apply from 11 June 2026 and reporting obligations from 11 September 2026. Penalties reach EUR 15M or 2.5% of global annual turnover.

Regulation (EU) 2024/2747, adopted on 9 October 2024 and published in the Official Journal on 8 November 2024, establishes the EU's first dedicated framework to anticipate, prepare for and respond to crises affecting the internal market. IMERA creates a two-tier "vigilance" / "emergency" mode architecture, sets up the Internal Market Emergency and Resilience Board (IMERB) to coordinate Member States and advise the Commission, and equips the Commission with last-resort powers including mandatory information requests to economic operators, priority-rated orders for crisis-relevant goods, fast-track conformity-assessment procedures, and rules to safeguard free movement of goods, services and persons. The regulation amends Council Regulation (EC) No 2679/98 (the "Strawberries Regulation") and becomes applicable on 29 May 2026.

Australia's first standalone cyber-security statute (Act No. 98 of 2024), passed by Parliament on 25 November 2024 and granted Royal Assent on 29 November 2024, with provisions commencing in tranches through 30 May 2025. The Act creates four binding regimes: (i) mandatory security-of-things standards for connected and IoT products supplied in Australia under regulations administered by the Department of Home Affairs; (ii) a mandatory ransomware / cyber-extortion payment disclosure regime requiring reporting business entities with annual turnover above AUD 3 million to notify the Australian Signals Directorate within 72 hours of any ransom payment made by or on behalf of the entity; (iii) a statutory Cyber Incident Review Board to conduct no-blame post-incident reviews of significant cyber incidents; and (iv) a "limited use" protection restricting how information voluntarily shared with the National Cyber Security Coordinator may be used by Commonwealth agencies. The Act implements core initiatives from the 2023-2030 Australian Cyber Security Strategy and affects every firm selling connected devices into Australia or operating above the turnover threshold in Australia.

The Cook Islands government promulgated the Seabed Minerals (Minerals Harvesting and Other Mining) Regulations 2024 (Serial 2024/11), entering into force 1 October 2024, as the first statutory framework enabling commercial-scale polymetallic-nodule harvesting in the Cook Islands' 1.96 million km² EEZ — one of the world's largest documented manganese-nodule provinces estimated at ~6.7 billion metric tonnes. The Regulations were issued by the SBMA under the Seabed Minerals Act 2009 and establish the licensing pathway, environmental-assessment standards, royalty-and-benefit-sharing framework, production-licence application criteria, and operator financial-assurance requirements for the commercial harvesting tier. The government has stated that only exploration activities are currently permitted and that harvesting licences will not be granted until a science-based environmental decision has been made; the Regulations nonetheless create the legal architecture that would activate commercial extraction, structurally peer to Norway's June 2024 Arctic seabed-mining opening and ahead of the stalled ISA Mining Code negotiations.

The full Pleno of the Corte Suprema de Justicia of Honduras ruled unanimously on 20 September 2024 that Decree 236-2012 (constitutional amendments enabling the ZEDE regime) and Decree 120-2013 (Organic Law of the ZEDEs) violate the "stone-written" Articles 294, 303, and 329 of the Honduran Constitution, which govern territorial organisation, the justice system, and the economic regime respectively. The court applied a retroactive nullatory effect, treating the ZEDE framework as legally void ab initio (from origin). The ruling was published in La Gaceta No. 36,698 on 25 November 2024, conferring erga omnes legal force; the three operational ZEDEs — Próspera (Roatán), Orquídea (Choluteca), and Ciudad Morazán (Cortés) — are formally without statutory basis under Honduran law. The decision triggers a US$10.7 billion CAFTA-DR ICSID arbitration claim (Próspera v. Honduras; preliminary objections decided 26 February 2025) and sets a constitutional precedent for the cost of retroactive SEZ annulment globally.

The Bureau of Industry and Security (BIS) published a final rule (RIN 0694-AJ84; 89 FR 75477) amending 15 CFR Parts 764 and 766 of the Export Administration Regulations (EAR) to restructure administrative enforcement procedures. The rule revamps the voluntary self-disclosure (VSD) process under 15 CFR 764.5, abolishes prior penalty caps, amends the penalty guidelines in Supplement No. 1 to Part 766, and establishes that a deliberate decision not to disclose a "significant apparent violation" of the EAR will be treated as an aggravating factor when BIS calibrates administrative sanctions. The rule is effective on publication (16 September 2024).

On 6 September 2024 China's National Development and Reform Commission (NDRC) and Ministry of Commerce (MOFCOM) jointly issued Order No. 23, the Special Administrative Measures (Negative List) for Foreign Investment Access (2024 Edition), effective 1 November 2024. The 2024 list reduces nationwide restrictions from 31 to 29 entries, removing the last two manufacturing- sector restrictions (publication printing must be Chinese-controlled; investment in TCM-decoction steaming/roasting/calcination processes and confidential-formula proprietary Chinese-medicine production prohibited). Restrictions remain in services (telecommunications value-added, healthcare, education) and in 21 prohibited categories (news publishing, postal monopoly, fishing, gene therapy, tobacco). The 2021 edition is repealed on the same date.

FinCEN issued a final rule (89 FR 70258, FR Doc 2024-19198) requiring certain real-estate-closing and settlement professionals to file a new "Real Estate Report" and maintain records on non-financed (i.e., all-cash) transfers of U.S. residential real property to specified legal entities and trusts, on a nationwide basis. The rule uses a "reporting cascade" to designate one filer per transaction (settlement agent, title-insurance underwriter, escrow agent, or attorney, depending on which is present), replacing the long-running geographic-targeting-order (GTO) regime with a permanent nationwide framework. The original effective date of December 1, 2025 was subsequently postponed to March 1, 2026 via a FinCEN exemptive-relief order issued September 30, 2025.

FinCEN issued a final rule (published September 4, 2024 at 89 FR 72156; FR Doc 2024-19260) including most SEC-registered investment advisers (RIAs) and Exempt Reporting Advisers (ERAs) within the Bank Secrecy Act definition of "financial institution." Covered firms must implement a risk-based AML/CFT compliance program, appoint a compliance officer, train staff, obtain independent testing, file Suspicious Activity Reports (SARs) and Currency Transaction Reports (CTRs), and participate in §314(a)/(b) information sharing. The original compliance date was January 1, 2026; FinCEN subsequently delayed the effective date to January 1, 2028 by final rule published 2026-01-02 (FR Doc 2025-24184).

India's Finance (No. 2) Act, 2024 (Act No. 15 of 2024) repeals the 2% Equalisation Levy on e-commerce supplies and services by non-resident operators (§165A of the Finance Act 2016, introduced 2020), with effect from 1 August 2024. The repeal removes a long-standing US trade irritant — the USTR had found the 2% levy unreasonable under a Section 301 investigation, and India agreed in October 2021 to remove it as part of a multilateral OECD Pillar 1 commitment, formally implemented here three years later. The residual 6% Equalisation Levy on digital advertising under §165 (in force since 2016) was not touched by this Act and remained in force until its own repeal effective 1 April 2025 via a subsequent Finance Act.

The Ethiopian Capital Market Authority (ECMA) issued Directive No. 1009/2024 on 16 July 2024, establishing the comprehensive licensing, operational, and supervisory framework for securities exchanges, derivatives exchanges, and the over-the-counter (OTC) market under the authority of Article 108 of the Capital Market Proclamation No. 1248/2021. The directive consolidates Ethiopia's previously fragmented securities-trading architecture into a single, licensed, and regulated market structure and provided the statutory pathway for the Ethiopian Securities Exchange (ESX) to receive the country's first securities-exchange licence. This is the first capital-markets architecture filing for Ethiopia on the IPTM register, forming the operating- licence layer alongside the banking-sector liberalisation enacted under Proclamation 1360/2025.

The European Union's Artificial Intelligence Act, Regulation (EU) 2024/1689, was published in the Official Journal on 12 July 2024 and entered into force on 1 August 2024. It establishes the world's first horizontal, risk-tiered legal framework for the development, market placement, and use of AI systems — covering prohibited practices, high-risk systems, general-purpose AI models, and minimal-risk applications — with extraterritorial reach over any provider placing an AI system on the EU market or whose output is used in the EU. Penalties reach up to EUR 35 million or 7% of global annual turnover. Application is staged: prohibitions from 2 February 2025, GPAI and governance from 2 August 2025, the bulk of high-risk obligations from 2 August 2026, and product-safety-embedded high-risk systems from 2 August 2027.

FinCEN issued a final rule under Section 311 of the USA PATRIOT Act (31 U.S.C. § 5318A) prohibiting US covered financial institutions from opening or maintaining a correspondent account for, or on behalf of, Iraq-based Al-Huda Bank, a foreign financial institution found to be of primary money-laundering concern. Treasury determined that Al-Huda Bank exploited its access to US dollars to support designated Foreign Terrorist Organizations including Iran's Islamic Revolutionary Guard Corps (IRGC) and IRGC-Quds Force, as well as Iran-aligned Iraqi militias Kata'ib Hizballah and Asa'ib Ahl al-Haq. The rule also imposes a special-due-diligence requirement on US covered institutions to guard against indirect access via foreign correspondent accounts. Published in the Federal Register on July 3, 2024; effective August 2, 2024.

The Global Minimum Tax Act (GMTA), enacted as section 81 of the Budget Implementation Act, 2024, No. 1 (Bill C-69; S.C. 2024, c. 17) and receiving royal assent on 20 June 2024, is Canada's primary legislative implementation of the OECD/G20 Inclusive Framework Pillar Two GloBE (Global Anti-Base Erosion) rules. The Act imposes a 15% minimum effective tax rate on Canadian members of multinational enterprise groups with consolidated annual revenue ≥ EUR 750 million via an Income Inclusion Rule (IIR) and a Qualified Domestic Minimum Top-up Tax (QDMTT); both apply retroactively to fiscal years beginning on or after 31 December 2023, meaning the first compliance returns are due as early as 30 June 2026. The Undertaxed Profits Rule (UTPR) backstop was deliberately carved out for separate later enactment. Canada structured the GMTA as a stand-alone statute — distinct from its EU, UK, and Korean counterparts, which amend or transpose into existing tax legislation — and administered by the Canada Revenue Agency as the collecting authority.

The Kyrgyz Republic's parliament adopted on 13 June 2024 — and President Sadyr Japarov signed into law on 27 June 2024 — amendments to the Law "On Subsoil" (No. 49 of 19 May 2018) that lift the constitutional-status prohibition on geological exploration, prospecting, and development of uranium and thorium deposits enacted in 2019 under President Jeenbekov. The law simultaneously invalidates the standalone 2019 prohibition statute and introduces a voluntary state-equity transfer mechanism allowing mining-rights holders to transfer company shares to the state for strategically important gold and coal deposits. Together with the January 2024 Presidential Decree No. 5 (Polymetals and REE National Project), the amendment forms the second pillar of President Japarov's mining reset, re-opening the Kyzyl-Ompol uranium-REE-ilmenite deposit in Issyk-Kul oblast (est. 2,000+ tU resource + significant Th₂O₃, REE, and ilmenite by-products) to Western and Asian operators for the first time since 2019.

Regulation (EU) 2024/1781, the Ecodesign for Sustainable Products Regulation (ESPR), replaces the 2009 Ecodesign Directive with a cross-cutting product-sustainability framework covering nearly all physical goods placed on the EU single market. It empowers the Commission to adopt binding delegated acts setting ecodesign requirements (durability, reparability, recyclability, recycled content, chemical restrictions, energy and resource efficiency) by product category, establishes a mandatory Digital Product Passport (DPP) for supply-chain traceability, and bans the destruction of unsold consumer products. The regulation entered into force on 18 July 2024; the Commission's first ESPR and Energy Labelling Working Plan (2025–2030, COM(2025) 187) was adopted in April 2025, prioritising textiles, furniture, tyres, electronics, and iron/steel/aluminium.

Directive (EU) 2024/1760, adopted 13 June 2024 and entering into force 25 July 2024, imposes binding human-rights and environmental due-diligence obligations on large in-scope EU and non-EU companies across their chains of activities (upstream supply chain, own operations, and a limited part of downstream distribution). In-scope companies must identify, prevent, mitigate, and bring to an end actual and potential adverse human-rights and environmental impacts — covering forced labour, child labour, hazardous chemicals, and biodiversity loss — with obligations phased in from FY 2027 (EU companies with >5 000 employees and >EUR 1.5 bn turnover) through FY 2029 (>1 000 employees and >EUR 450 m). Companies must also adopt a climate transition plan compatible with the Paris Agreement 1.5 °C pathway (Art 22), and face civil liability for damages in national courts (Art 29); the original transposition deadline of 26 July 2026 was postponed and scope narrowed by the EU Omnibus I package (Directive 2026/470).

Peraturan Menteri Energi dan Sumber Daya Mineral (Permen ESDM) No. 6 of 2024, signed by Minister Arifin Tasrif on 30 May 2024 and published in the Berita Negara Republik Indonesia, establishes the procedural framework governing how holders of Mining Business Licences (IUP) and Special Mining Business Licences (IUPK) for copper, iron, lead, and zinc production may continue to sell processed mineral products abroad during the final phase of domestic smelter construction. Licence holders that previously obtained MEMR export recommendations and whose refining facilities have reached commissioning stage but are not yet at full operational capacity may apply for time-bound extensions to sell concentrate and semi-processed ore offshore through 31 December 2024, subject to quarterly physical inspections by the Director General of Minerals and Coal. The regulation is the MEMR-side companion instrument to the same-day Permendag 10/2024 (Ministry of Trade copper-concentrate and anode-sludge export prohibition), together constituting the complete legal architecture of Indonesia's copper hilirisasi (downstream- processing) mandate. Its scope is broader than the Trade Ministry rule: it covers copper, iron, lead, and zinc whereas Permendag 10/2024 targets copper and anode-sludge only, and it operates as the conditional derogation mechanism (MEMR) to Permendag 10/2024's absolute prohibition regime (Trade Ministry).

The Central African Republic enacted a comprehensive new Mining Code (Law No. 24-008) in May 2024, replacing the prior framework to govern all prospecting, exploration, exploitation, processing, and marketing of mineral deposits. The code creates two state enterprises: GEMINCA (Gemmes et Minéraux de Centrafrique), mandated as the state-designated purchaser of precious and semi-precious minerals — introducing a state monopsony channel for diamond and gold purchasing — and SONADERM (Société Nationale de Développement des Ressources Minérales), charged with geological survey and mineral-domain promotion. Mandatory EITI, Kimberley Process, and ICGLR compliance is imposed on all mining title holders, forecloses informal-sector operators, and tightens supply-chain due-diligence requirements for downstream importers. A companion formalisation framework licences artisanal and small-scale mining through cooperatives and purchasing-office structures, and a dedicated mining fund distinct from Treasury accounts is established to channel sector revenues.

On 17 May 2024 the US Forced Labor Enforcement Task Force (FLETF), chaired by DHS, published the largest single expansion of the UFLPA Entity List to date, adding 26 PRC-based companies (89 FR 43365). The majority are cotton traders and warehouse operators located outside the Xinjiang Uyghur Autonomous Region (XUAR) but identified as downstream conduits laundering XUAR-origin cotton into global supply chains. Under the Uyghur Forced Labor Prevention Act's rebuttable-presumption (§2(d)(2)(B)(v)), goods wholly or in part produced by any listed entity are presumed to violate 19 U.S.C. §1307 and are barred from US entry unless the importer demonstrates by clear and convincing evidence that no forced labour was involved. US apparel brands with exposure to the listed traders (Levi's, Gap, PVH/Calvin Klein sourcing chains) were required to trace and unwind that exposure within 60 days.

The Parliament of Georgia adopted the Law on Transparency of Foreign Influence (Law No 4194-XIV) on 14 May 2024 by an 84–4 vote, overriding a presidential veto on 28 May 2024. The law requires NGOs, broadcasters, and online/print media that derive 20% or more of their funding from a "foreign power" in any calendar year to register as "organisations pursuing the interests of a foreign power," with reporting and transparency obligations and fines of up to GEL 25,000 (~EUR 8,400) per violation. The European Council immediately froze Georgia's EU accession negotiations citing the law's incompatibility with EU values, the European Commission suspended EUR 30M+ of annual direct budget support, and the US State Department announced visa restrictions targeting Georgian officials, establishing the measure as a pivotal FDI-climate and geopolitical inflection event for the country.

Japan's National Diet enacted the Act on the Protection and Use of Critical Economic Security Information (重要経済安保情報の保護及び活用に関する法律, Act No. 27 of 2024) on 10 May 2024; it was promulgated on 17 May 2024 and came into full operation on 16 May 2025. The law establishes Japan's first peace-time economic-security clearance regime extending to private-sector employees. It designates "Critical Economic Security Information" (CESI) covering threat-intelligence on critical-infrastructure cyber attacks, regulatory-review information on essential infrastructure, and vulnerability data on critical-product supply chains; mandates Cabinet Office "適性評価" (suitability assessment) for cleared personnel; and imposes criminal penalties of up to five years' imprisonment for unauthorised disclosure. The CESI Act complements the 2022 Economic Security Promotion Act (ESPA), closing the information-protection gap and aligning Japan's framework with Five Eyes and EU partners for joint R&D and dual-use cooperation.

Order of the State Council No. 785, adopted at the 31st executive meeting on April 26, 2024 and effective October 1, 2024, is the first comprehensive statutory regulation governing China's entire rare earth industry chain — from mining and smelting through product circulation and import/export. It replaces the 2012 administrative-regulation framework with higher-authority State Council instruments, centralising quota allocation under MIIT+NDRC+MNR, establishing a mandatory national rare earth traceability platform, and extending domestic controls to foreign-origin feedstock refined in China. This regulation is the umbrella enabling instrument for all downstream MOFCOM and MIIT rare earth export-control measures enacted from 2024 onward.

Loi n° 2024-449 of 21 May 2024, known as the SREN law (Sécuriser et Réguler l'Espace Numérique), was definitively adopted by the French Parliament on 10 April 2024, validated in part by the Conseil Constitutionnel on 17 May 2024 (Decision n° 2024-866 DC), promulgated by the President on 21 May 2024, and published in the Journal Officiel on 22 May 2024. SREN is France's digital-sovereignty omnibus statute: it transposes parts of the EU Digital Services Act (Regulation 2022/2065), Digital Markets Act (Regulation 2022/1925), and Data Governance Act (Regulation 2022/868) into French law and layers national-level instruments on top — most consequentially a data-localisation hook for sensitive public-sector data tied to the ANSSI SecNumCloud sovereign-cloud certification scheme, an ARCOM-enforced age-verification regime for adult-content sites (with €250k or 2%-of-turnover fines and account-closure powers), an "anti-scam" cybersecurity filter requiring browsers and DNS resolvers to block ANSSI-designated fraudulent domains, a jeux-en-ligne (JONUM) regime for cryptoasset-adjacent gaming, and a coordination framework between CSA, CNIL, ARCOM, and the Autorité de la concurrence. SREN is one of the first EU member-state digital omnibus statutes anchoring national public-sector data-hosting rules to a sovereign-cloud certification scheme.

On 3 April 2024 the European Commission opened two simultaneous FSR Phase II in-depth investigations — the second and third ever under the Foreign Subsidies Regulation (Regulation 2022/2560) — concerning a Romanian public-procurement procedure for the design, construction and operation of a 454.97 MW EU-co-funded photovoltaic park (Rovinari Est). The first investigation targeted the ENEVO Group consortium including LONGi Solar Technologie GmbH (German subsidiary wholly owned by HK-listed LONGi Green Energy Technology Co., Ltd.); the second targeted Shanghai Electric UK Co. Ltd. and Shanghai Electric Hong Kong International Engineering Co., Ltd. (Chinese SOE). Both respondents withdrew from the procurement procedure after the Commission's opening; the Commission subsequently closed both investigations. This was the first FSR Phase II enforcement action in the renewable-energy / solar-PV sector and the first targeting a private Chinese-listed company's EU subsidiary.

The Cyberspace Administration of China (CAC) issued the Provisions on Promoting and Regulating Cross-Border Data Flows (《促进和规范数据跨境流动规定》) on 22 March 2024, effective immediately. The rules substantially raise the thresholds at which CAC security assessment, Standard Contractual Clauses (SCC), or Personal Information Protection Certification are required for outbound data transfers, and create categorical exemptions for contract performance, HR management, intra-group transfers below a volume threshold, and transit data processed in China with no domestic personal information introduced. A Free Trade Zone pilot mechanism allows designated FTZs (Shanghai Lingang, Tianjin, Beijing) to publish their own negative lists defining which data categories still require prior approval, easing conditions for multinationals with operations in those zones.

Venezuela's Asamblea Nacional sanctioned the Organic Law for the Defense of Guayana Esequiba on 21 March 2024; President Maduro promulgated it on 3 April 2024 (Gaceta Oficial Extraordinaria N° 6.798). The 39-article law asserts Venezuelan domestic legal sovereignty over the ~159,500 km² Essequibo region administered by Guyana, creates the legal framework for a new "Estado Guayana Esequiba" federal entity, and empowers the President to invalidate any concession, licence, or operating agreement granted by Guyana over the disputed territory — directly threatening ExxonMobil, Hess, and CNOOC interests in the Stabroek offshore block (~11 bn bbl recoverable reserves) and the broader 2.5+ mb/d Guyanese production ramp scheduled through 2027.

Three Commission Delegated Regulations (CDR 2024/1772, 1773, 1774) adopted 13 March 2024 and published in the EU Official Journal on 25 June 2024 constitute the first batch of binding Level 2 implementing rules under DORA (Regulation (EU) 2022/2554). CDR 2024/1772 sets ICT incident classification criteria and materiality thresholds for mandatory reporting; CDR 2024/1773 specifies the required content of contractual policies for ICT third-party services supporting critical or important functions; CDR 2024/1774 defines the ICT risk management tools, methods, processes, and policies — including a simplified framework for smaller in-scope entities. All three apply from 17 January 2025 alongside the parent DORA regulation, covering approximately 22,000 EU regulated financial entities.

On 16 February 2024 the European Commission opened case FSP.100147, the first-ever in-depth Phase II investigation under the EU Foreign Subsidies Regulation (FSR, Regulation 2022/2560), to examine whether Chinese state-owned CRRC Qingdao Sifang Locomotive Co. Ltd. received foreign subsidies enabling it to submit an unduly advantageous tender for a EUR 614 million Bulgarian Ministry of Transport contract covering 20 zero-emission electric push-pull trains and 15 years of maintenance. The Commission identified approximately EUR 1.745 billion in total foreign financial contributions to CRRC — roughly five times the bid value. CRRC withdrew its tender on 26 March 2024 before the Commission could issue a final decision; the Commission closed the investigation following the withdrawal.