Industrial Policy & Trade Monitor· 2667 actions· ✨ 89 recent

Malaysia's Personal Data Protection (Amendment) Act 2024 (Act A1727), gazetted 17 October 2024, enters its third and final commencement phase on 1 June 2025 per commencement order P.U.(B) 522/2024. Phase 3 activates sections 6 and 9 of the amending Act, which impose mandatory Data Protection Officer (DPO) appointment thresholds, a 72-hour breach-notification duty to the Commissioner, and a statutory data-portability right, bringing Malaysia's PDPA broadly into alignment with GDPR and the ASEAN Model AI Governance Framework.

The Office of Foreign Assets Control (OFAC) issued a final rule on 19 December 2024 amending 32 parts of 31 CFR chapter V to modernize the general licenses authorizing payments for legal services from funds originating outside the United States. The rule replaces the annual reporting requirement that had applied to such payments with a 10-year recordkeeping requirement, aligning the legal-services general licenses with the new 10-year statute of limitations for IEEPA/TWEA violations and OFAC's parallel 5→10-year recordkeeping extension (31 CFR 501). The rule also standardises legal-services general-license language across programs — removing legacy letter-of-engagement prerequisites in certain parts (e.g., 31 CFR 594, 597), updating 31 CFR 549 (Lebanon) and 31 CFR 576 (Iraq Stabilization and Insurgency) to remove the requirement that payments for authorised legal services be separately specifically licensed, and harmonising the 31 CFR 591 (Venezuela-related) authorisation language. The rule was effective 19 December 2024 with an applicability date of 12 March 2025.

Ethiopia's Banking Business Proclamation No. 1360/2025, ratified by the House of Peoples' Representatives on 17 December 2024 and gazetted in March 2025, repeals Proclamation 592/2008 and opens Ethiopia's banking sector to foreign participation for the first time since the 1974 Derg-era nationalisations. Foreign banks may enter via subsidiary establishment, branch licensing, representative offices, or equity acquisition in existing domestic banks. A single strategic foreign investor is capped at 40% ownership per domestic bank, with aggregate foreign ownership across all investors capped at 49%. The reform positions Ethiopia — Africa's second-most-populous country — as a competitor to Nairobi, Lagos, and Johannesburg as an African banking centre, unlocking entry plans by Standard Bank, KCB Group, Equity Bank, ABSA, and GCC-based institutions.

On 16 December 2024 the Council of the European Union adopted Council Regulation (EU) 2024/3192 amending Regulation (EU) 833/2014, the 15th package of restrictive measures against Russia. The package adds 84 asset-freeze listings (54 individuals and 30 entities) under Regulation 269/2014 — for the first time including fully-fledged designations of seven Chinese individuals and entities supplying drone components, machine tools, and dual-use goods to the Russian military-industrial complex. It expands the EU shadow-fleet vessel- ban list by 52 tankers (total 79), activates the standalone EU hybrid- threats sanctions regime with its first 16-individual / 3-entity designations, extends the wind-down derogation for divestment from Russian subsidiaries to 31 December 2025, and reinforces anti- circumvention contractual clauses on EU exporters of dual-use goods.

UAE Cabinet Decision No. 142 of 2024, announced 9 December 2024 and formally gazetted 11 February 2025, introduces a Domestic Minimum Top-Up Tax (DMTT) on UAE constituent entities of Multinational Enterprise (MNE) groups with consolidated annual revenues ≥ EUR 750 million in at least two of the four preceding fiscal years. The DMTT ensures a 15% minimum effective tax rate (ETR) on UAE-source profits, functioning as a Qualified Domestic Minimum Top-up Tax (QDMTT) under the OECD/G20 Pillar Two GloBE framework, thereby giving the UAE first-priority taxing right before any IIR top-up by a parent-jurisdiction authority. The measure applies to fiscal years beginning on or after 1 January 2025. The UAE deliberately excluded the Income Inclusion Rule (IIR) and Under-Taxed Profits Rule (UTPR) from this primary instrument, deferring those to subsequent Cabinet Decisions; the QDMTT-only architecture mirrors Singapore's MEMTA and Switzerland's MindStV as the first-mover design choice for established low-tax financial hubs.

The U.S. Treasury's Office of Foreign Assets Control (OFAC) published in the Federal Register (89 FR 84472–84474, FR Doc 2024-24524) three general licenses issued under the Western Balkans Stabilization Regulations (31 CFR Part 588): GL 3A, GL 4, and GL 5. All three were originally issued on 18 June 2024 concurrent with OFAC's expansion of Republika Srpska / Dodik-network designations; the 23 October 2024 Federal Register notice formalises them per the Administrative Procedure Act notice requirements. GL 3A (which superseded GL 3 of 16 November 2023) authorises transactions involving certain WBSR-blocked entities that are ordinarily incident and necessary to the exportation or re-exportation of agricultural commodities, medicine, medical devices, replacement parts and components, software updates, or activities involving medical prevention, diagnosis, treatment, or clinical trials. GL 4 authorises wind-down transactions with entities blocked on 18 June 2024 through a defined cutoff. GL 5 authorises transactions ordinarily incident and necessary to the manufacture, distribution, operation, installation, or maintenance/repair of drinking-water pumps manufactured or distributed by the WBSR-blocked Bosnian Serb entity Kaldera Company EL PGP d.o.o. (and 50%-or-more-owned subsidiaries), preserving municipal water supply continuity.

FinCEN published a final rule (FR Doc 2024-23920, 89 FR 83782, effective on publication October 18, 2024) clarifying the public-utility exemption to the Corporate Transparency Act's beneficial ownership information (BOI) reporting rule. The amendment to 31 CFR 1010.380(c)(2)(xv) corrects a drafting cross-reference so the exemption explicitly covers any regulated public utility under 26 U.S.C. 7701(a)(33)(A) *or* (D) that provides telecommunications services, electrical power, natural gas, or water and sewer services within the United States. The change codifies FinCEN's June 10, 2024 telecommunications-provider guidance and is effective immediately upon publication; it neither expands nor restricts the underlying universe of reporting companies beyond aligning the rule text with the CTA statute.

Australia's first standalone cyber-security statute (Act No. 98 of 2024), passed by Parliament on 25 November 2024 and granted Royal Assent on 29 November 2024, with provisions commencing in tranches through 30 May 2025. The Act creates four binding regimes: (i) mandatory security-of-things standards for connected and IoT products supplied in Australia under regulations administered by the Department of Home Affairs; (ii) a mandatory ransomware / cyber-extortion payment disclosure regime requiring reporting business entities with annual turnover above AUD 3 million to notify the Australian Signals Directorate within 72 hours of any ransom payment made by or on behalf of the entity; (iii) a statutory Cyber Incident Review Board to conduct no-blame post-incident reviews of significant cyber incidents; and (iv) a "limited use" protection restricting how information voluntarily shared with the National Cyber Security Coordinator may be used by Commonwealth agencies. The Act implements core initiatives from the 2023-2030 Australian Cyber Security Strategy and affects every firm selling connected devices into Australia or operating above the turnover threshold in Australia.

The Office of Foreign Assets Control (OFAC) issued a final rule on 8 October 2024 amending the Reporting, Procedures and Penalties Regulations (RPPR) at 31 CFR Part 501. The rule finalises portions of OFAC's 10 May 2024 interim final rule and adds three exceptions to the requirement to file a report with OFAC concerning blocked property that is unblocked or transferred. It also implements other technical clarifications to OFAC's reporting framework. The rule takes effect on 7 November 2024.

FinCEN issued a final order, published in the Federal Register on 11 October 2024 (signed 26 September 2024), prohibiting US covered financial institutions from engaging in transmittals of funds to or from PM2BTC, a virtual-currency exchange operating outside the United States and identified as a primary money-laundering concern in connection with Russian illicit finance. The order is the first use of FinCEN's special- measure authority under Section 9714(a) of the Combating Russian Money Laundering Act, as amended by the FY 2022 NDAA (codified at 31 U.S.C. 5323). The action was coordinated with same-day OFAC SDN designations of related entities (Cryptex) and individuals (Sergey Sergeevich Ivanov of Taleon Holdings).

FinCEN issued a final rule (89 FR 70258, FR Doc 2024-19198) requiring certain real-estate-closing and settlement professionals to file a new "Real Estate Report" and maintain records on non-financed (i.e., all-cash) transfers of U.S. residential real property to specified legal entities and trusts, on a nationwide basis. The rule uses a "reporting cascade" to designate one filer per transaction (settlement agent, title-insurance underwriter, escrow agent, or attorney, depending on which is present), replacing the long-running geographic-targeting-order (GTO) regime with a permanent nationwide framework. The original effective date of December 1, 2025 was subsequently postponed to March 1, 2026 via a FinCEN exemptive-relief order issued September 30, 2025.

FinCEN issued a final rule (published September 4, 2024 at 89 FR 72156; FR Doc 2024-19260) including most SEC-registered investment advisers (RIAs) and Exempt Reporting Advisers (ERAs) within the Bank Secrecy Act definition of "financial institution." Covered firms must implement a risk-based AML/CFT compliance program, appoint a compliance officer, train staff, obtain independent testing, file Suspicious Activity Reports (SARs) and Currency Transaction Reports (CTRs), and participate in §314(a)/(b) information sharing. The original compliance date was January 1, 2026; FinCEN subsequently delayed the effective date to January 1, 2028 by final rule published 2026-01-02 (FR Doc 2025-24184).

On 11 August 2024, King Salman issued Royal Decree No. M/19 promulgating Saudi Arabia's new Investment Law (Nizam al-Istithmar), which entered into force on 12 February 2025 (180 days after publication in the Um Al-Qura' Gazette). The law replaces the 2000 Foreign Investment Law (Royal Decree M/1) and eliminates the statutory distinction between Saudi and non-Saudi investors, establishing a unified national-treatment framework: foreign investors no longer require a separate MISA foreign-investment licence and instead complete a streamlined registration with a national registry before commencing activity (other than listed securities, which remain under CMA rules). The law codifies fair-and-equitable treatment, freedom to manage and repatriate capital, IP protection, and protection from expropriation except by final judicial ruling with prompt compensation; activities are open by default, subject only to an "Excluded Activities" list maintained by an inter-ministerial committee. Implementing Regulations were issued by Ministerial Resolution No. 1086 dated 8/8/1446H (7 February 2025) and published in Um Al-Qura' Gazette issue 5083 on 25 April 2025. The law is the foundational FDI architecture for Vision 2030 and pairs with the 30-year RHQ tax-incentive package and the 2021 Mining Investment Law.

The US Treasury's Office of Foreign Assets Control (OFAC) published in the Federal Register reporting instructions implementing Section 104(a) of the Rebuilding Economic Prosperity and Opportunity (REPO) for Ukrainians Act (P.L. 118-50, Division F, enacted April 24, 2024). All US financial institutions at which Russian sovereign assets are located — or that know or should know of such assets, including in correspondent or payable-through accounts — must report those holdings to OFAC using Form TD-F 93.09. Initial reports were due by August 2, 2024, with rolling reports required within 10 days of detecting newly identified Russian sovereign assets. The notice is the predicate step for any future US seizure or transfer of frozen Russian central bank, National Wealth Fund, or Russian Ministry of Finance assets to benefit Ukraine.

The Ethiopian Capital Market Authority (ECMA) issued Directive No. 1009/2024 on 16 July 2024, establishing the comprehensive licensing, operational, and supervisory framework for securities exchanges, derivatives exchanges, and the over-the-counter (OTC) market under the authority of Article 108 of the Capital Market Proclamation No. 1248/2021. The directive consolidates Ethiopia's previously fragmented securities-trading architecture into a single, licensed, and regulated market structure and provided the statutory pathway for the Ethiopian Securities Exchange (ESX) to receive the country's first securities-exchange licence. This is the first capital-markets architecture filing for Ethiopia on the IPTM register, forming the operating- licence layer alongside the banking-sector liberalisation enacted under Proclamation 1360/2025.

The German Federal Cabinet adopted a 49-measure cross-sectoral supply-side reform package on 17 July 2024 alongside the draft 2025 Federal Budget, aimed at reversing Germany's decade-long slide in global competitiveness rankings (from 6th to 24th since 2014). The package covers tax and social-security exemptions for overtime and weekend work, foreign skilled-worker incentives (Aktivrente / extended short-time-work rules), bureaucracy reduction targeting ~€944m/yr in compliance-cost savings, flexible working-time arrangements, energy-price relief for industry (Strompreispaket), accelerated infrastructure and planning-procedure reforms, expanded investment deductions and degressive depreciation for movable assets, and a raised R&D-allowance ceiling. The initiative is the supply-side / regulatory-reform complement to the simultaneously adopted SVIKG €500bn special infrastructure fund and is structurally analogous to the UK Mansion House Reforms and France's France 2030 productivity-enhancement pillar.

FinCEN issued a final rule under Section 311 of the USA PATRIOT Act (31 U.S.C. § 5318A) prohibiting US covered financial institutions from opening or maintaining a correspondent account for, or on behalf of, Iraq-based Al-Huda Bank, a foreign financial institution found to be of primary money-laundering concern. Treasury determined that Al-Huda Bank exploited its access to US dollars to support designated Foreign Terrorist Organizations including Iran's Islamic Revolutionary Guard Corps (IRGC) and IRGC-Quds Force, as well as Iran-aligned Iraqi militias Kata'ib Hizballah and Asa'ib Ahl al-Haq. The rule also imposes a special-due-diligence requirement on US covered institutions to guard against indirect access via foreign correspondent accounts. Published in the Federal Register on July 3, 2024; effective August 2, 2024.

On 24 June 2024 the Council of the European Union adopted Council Regulation (EU) 2024/1745, the 14th package of restrictive measures against Russia, amending Regulation (EU) 833/2014. The package introduces the EU's first targeted measures against Russian LNG (a ban on EU-port transhipment to third countries after a 9-month transition, and a prohibition on EU investment and goods/services exports to Russian LNG projects under construction such as Arctic LNG 2 and Murmansk LNG), bans EU entities outside Russia from using the SPFS Russian financial-messaging system, designates 27 named "shadow-fleet" tankers under a new vessel-specific port-access ban, and imposes a "best-efforts" obligation on EU parents to ensure non-EU subsidiaries do not engage in sanctions circumvention. It adds 116 new listings (69 individuals, 47 entities), including third-country circumvention enablers, to the asset-freeze and travel-ban regime.

OFAC final rule (FR Doc 2024-11618, 89 FR 46518) amending the Cuban Assets Control Regulations at 31 CFR Part 515 to further implement the May 2022 Biden administration policy of expanded support for the Cuban people. The rule reinstates the "U-turn" general license (authorizing US banks to process funds transfers that originate and terminate outside the US, neither originator nor beneficiary a US person); replaces "self-employed individual" with the broader "independent private sector entrepreneur" (covering Cuban private businesses up to 100 employees, including private cooperatives); authorizes Cuban nationals in the private sector and located in Cuba to open and operate accounts at US financial institutions (including via online/mobile banking); and expands authorizations for internet-based services to support Cuban civil society and private-sector entrepreneurs. Effective 29 May 2024.

The Office of Foreign Assets Control (OFAC) issued an interim final rule (IFR) on 10 May 2024 (FR Doc 2024-10033, 89 FR) amending the Reporting, Procedures and Penalties Regulations (RPPR) at 31 CFR Part 501. The IFR overhauls OFAC's reporting framework by requiring electronic submission of certain reports through the OFAC Reporting System (ORS), expanding the rejected-transaction reporting obligation to all U.S. persons (not only U.S. financial institutions), modifying blocked-property reporting procedures, updating procedures for petitions for administrative reconsideration and property-blocked-in-error requests, and revising FOIA-availability provisions. The IFR took effect on 8 August 2024 and was subsequently finalised — with three new exceptions to the blocked-property reporting requirement — by the 8 October 2024 final rule (FR Doc 2024-23217, effective 7 November 2024).

The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) published in the Federal Register "Directive 1 under Executive Order 14014, 'Prohibitions Related to Financial Services to or for the Benefit of Myanma Oil and Gas Enterprise.'" The Directive — originally issued on OFAC's website on 2023-10-31 with a 2023-12-15 effective date — determines that MOGE is a political subdivision, agency, or instrumentality of the Government of Burma and prohibits U.S. persons from providing, exporting, or reexporting, directly or indirectly, financial services to or for the benefit of MOGE. The Federal Register publication codifies notice of the Directive in the formal record of agency action; the underlying prohibition has been operative since December 2023.

The Cyberspace Administration of China (CAC) issued the Provisions on Promoting and Regulating Cross-Border Data Flows (《促进和规范数据跨境流动规定》) on 22 March 2024, effective immediately. The rules substantially raise the thresholds at which CAC security assessment, Standard Contractual Clauses (SCC), or Personal Information Protection Certification are required for outbound data transfers, and create categorical exemptions for contract performance, HR management, intra-group transfers below a volume threshold, and transit data processed in China with no domestic personal information introduced. A Free Trade Zone pilot mechanism allows designated FTZs (Shanghai Lingang, Tianjin, Beijing) to publish their own negative lists defining which data categories still require prior approval, easing conditions for multinationals with operations in those zones.

OFAC amended and reissued the Global Magnitsky Sanctions Regulations (31 CFR Part 583) in their entirety on 12 March 2024, to implement the Global Magnitsky Human Rights Accountability Act and EO 13818 (20 December 2017) more fully. The reissuance adds expanded interpretive guidance, new definitions (agricultural commodities, medicines, medical devices), new statutory authority (Uyghur Human Rights Policy Act of 2020), and several new general licenses covering blocked-account management, legal services, personal-use medical/food transactions, and emergency services. No new SDN designations or country-level targeting; the action is a compliance-architecture update that clarifies permissible conduct and tightens procedural standards across the global human-rights-and-corruption sanctions program.

The U.S. Treasury's Office of Foreign Assets Control (OFAC) published in the Federal Register (89 FR 16400, FR Doc 2024-04856) two general licenses issued under the Western Balkans Stabilization Regulations (31 CFR Part 588): GL 2 and GL 3. Both were originally issued on 16 November 2023 concurrent with OFAC's initial round of Republika Srpska / Dodik-network designations; the 7 March 2024 Federal Register notice formalises them per the Administrative Procedure Act notice requirements. GL 2 authorises wind-down transactions with newly blocked WBSR entities through 15 March 2024. GL 3 authorises exports and re-exports of agricultural commodities, medicine, medical devices, replacement parts, and services for medical prevention and treatment to WBSR-blocked persons; GL 3 was subsequently superseded by GL 3A on 18 June 2024.

The U.S. Treasury's Office of Foreign Assets Control (OFAC) published a final rule in the Federal Register (89 FR 15769, FR Doc 2024-04500) renaming the Darfur Sanctions Regulations (31 CFR Part 546) to the Sudan Stabilization Sanctions Regulations and amending them to implement Executive Order 14098 of May 4, 2023. E.O. 14098 broadened US sanctions authority beyond the Darfur-specific frame to cover all persons destabilising Sudan and undermining democratic transition, responding to the SAF–RSF armed conflict that erupted in April 2023. The rule adds new general licenses covering legal-service payments (§ 546.508), African Union transactions (§ 546.511), and agricultural/medical exports (§ 546.513), and introduces an interpretative provision clarifying that entities are not automatically blocked solely because a blocked individual holds a leadership position.

On 29 February 2024 Switzerland's WBF decided to align with the EU's 13th Russia sanctions package by amending the Ordinance on Measures in Connection with the Situation in Ukraine (SR 946.231.176.72), effective 1 March 2024 at 18:00 CET. The amendment adds over 100 individuals and nearly 90 entities — mainly Russian military-industrial-complex firms and suppliers of DPRK-sourced weapons to Russia — to the asset-freeze and designation lists, and extends the dual-use/military-technology export ban to 27 additional companies believed to be circumventing existing controls.

Canada made SOR/2024-32, Regulations Amending the Special Economic Measures (Russia) Regulations, registered and effective 2024-02-21 on the second anniversary of Russia's invasion of Ukraine. The regulations add 163 persons to Schedule 1 — 10 individuals and 153 entities, predominantly Russian organizations tied to military-industrial production, logistics, insurance and oil-sector support — triggering Canadian dealing/asset bans. A parallel amendment to Schedule 7 adds five new goods categories under the Harmonized System (explosives and pyrotechnics; data-processing units and components; ball and roller bearings; semiconductor manufacturing equipment; optical and navigational instruments), banning their export to Russia or Russian persons.

On 31 January 2024 Switzerland's Federal Council decided to align with the EU's 12th sanctions package (adopted 18 December 2023) by amending the Ordinance on Measures Relating to the Situation in Ukraine (SR 946.231.176.72), entering into force the same day at 18:00. The update extends Switzerland's Russia-sanctions perimeter to match the EU's additions — including the Russian diamond, steel and other import-revenue restrictions — and adds a new financial-sector prohibition barring Russian nationals and Russia-resident individuals from controlling Swiss crypto-asset service providers, aimed at closing sanctions-circumvention and enforcement gaps.

FinCEN published a final rule on January 25, 2024 adjusting the maximum civil monetary penalties (CMPs) for Bank Secrecy Act (BSA) violations as mandated by the Federal Civil Penalties Inflation Adjustment Act of 1990, as amended by the 2015 Improvements Act. Adjustments are calculated using the CPI-U percent change between October 2022 and October 2023 and are codified in 31 CFR § 1010.821. The update covers 12 BSA statutory penalty provisions, ranging from per-day recordkeeping violations to wilful correspondent-account and special-measures infractions, with the largest single-penalty ceiling rising to $1,731,383.

OFAC published a final rule on January 12, 2024 adjusting the maximum civil monetary penalty (CMP) ceiling amounts across five statutory authorities as mandated by the Federal Civil Penalties Inflation Adjustment Act of 1990 (as amended by the 2015 Improvements Act). The 2024 adjustment multiplier is 1.03241 (reflecting the October 2022–October 2023 CPI-U change). Penalties under IEEPA rise from $356,579 to $368,136; TWEA penalties from $105,083 to $108,489; and the Narcotics Kingpin Act maximum from $1,771,754 to $1,829,177. The rule is issued as a final rule effective on publication without prior notice and comment under the non-discretionary "good cause" exemption.

Qatar's Cabinet approved and publicly launched the Third National Development Strategy (NDS3) 2024-2030 on 10 January 2024, the final-stage framework on the path to Qatar National Vision 2030. NDS3 targets average annual GDP growth of 4%, a 25% GHG-emissions reduction, and a skilled-workforce share rising to 46% of the labour force, anchored by LNG capacity expansion from ~77 mtpa to ~142 mtpa and diversification into manufacturing, logistics, financial services, and tourism clusters. It is the parent umbrella under which all sectoral implementing strategies — including the Qatar National Manufacturing Strategy 2024-2030 — and all QIA sovereign-wealth deployment criteria operate through 2030.