Industrial Policy & Trade Monitor· 2667 actions· ✨ 89 recent

The European Investment Fund (EIF), part of the EIB Group, announced on 9 February 2026 an anchor investment of EUR 300 million (~USD 354.8 million) in Seaya Growth Tech Fund I, a Spain-based pan-European growth venture capital vehicle targeting a EUR 1 billion final close. The commitment is made under the European Tech Champions Initiative (ETCI), and the fund will make growth-stage (Series C+) equity investments in European companies across applied AI, deep-tech, fintech, climate solutions, smart manufacturing, supply-chain resilience, capital-market autonomy, cybersecurity and environmental technology. Global Trade Alert separately logs the transaction as a "red"-flagged state-linked financial-investment-support intervention.

On 1 February 2026, at Web Summit Qatar, Qatar's Prime Minister and Minister of Foreign Affairs Sheikh Mohammed bin Abdulrahman Al Thani announced that the Qatar Investment Authority (QIA) is expanding its Fund of Funds programme with an additional USD 2 billion in capital, taking the programme's total committed capital from USD 1 billion to USD 3 billion. Five new venture capital managers — Greycroft, Ion Pacific, Liberty City Ventures, Shorooq, and Speedinvest — are joining the programme, spanning AI, fintech, blockchain, infrastructure and special-situations strategies, bringing the total number of participating fund managers to 12 with an aggregate AUM of roughly USD 10 billion.

On 9 February 2026 the UK Office of Financial Sanctions Implementation (OFSI) published a comprehensively revised enforcement and monetary-penalties guidance following its July–October 2025 public consultation. The update introduces a Settlement Scheme (20% penalty discount for subjects who agree not to contest OFSI's findings within 30 business days), an Early Account Scheme (up to 20% discount for legal persons providing a timely senior-attested factual account), a revised voluntary-disclosure framework (maximum discount cut from 50% to 30% and renamed to cover both prompt self-reporting and full cooperation), a four-level case-assessment seriousness matrix (severity × conduct), and fixed monetary penalties of £5,000 and £10,000 for information, reporting, and licensing offences. A planned legislative amendment (requiring primary legislation) will subsequently double the statutory civil monetary-penalty cap from £1m / 50%-of-breach to £2m / 100%-of-breach; in the interim the Policing and Crime Act 2017 caps remain in force. The revised guidance is the foundational enforcement architecture for all UK financial-sanctions programs (Russia, Iran, DPRK, Syria, Belarus, Myanmar, and 10+ additional regimes).

On 13 January 2026, Germany's Federal Ministry for Economic Affairs and Energy (BMWE) and the European Investment Fund (EIF) announced an additional EUR 1.6 billion (approx. USD 1.75 billion) in state-backed capital for the EIF German Equity programme, a fund-of-funds that invests in venture capital and growth funds to strengthen the equity base of German technology startups. The top-up brings the total EIF German Equity mandate (inclusive of prior joint growth/scale-up lines and Germany's contribution to the European Tech Champions Initiative) to over EUR 10 billion. The mandate is sector-neutral but explicitly names AI, FinTech, digitisation, industrial innovation, energy technologies, manufacturing, life sciences and deeptech as priority areas, and is funded via the state-backed ERP Special Fund.

Decree 353/2025/NĐ-CP is the principal implementing instrument of Vietnam's Law on Digital Technology Industry (Law No. 71/2025/QH15), effective 1 January 2026 — the same date as the parent statute. The decree's five chapters and 36 articles operationalise three pillars: (i) a comprehensive State-support and preferential-incentive framework for products, services, and infrastructure across the semiconductor, AI, cloud, fintech, and e-commerce sectors; (ii) a high-quality-human-resources development framework covering training funds, scholarship schemes, and foreign-expert visa fast-tracks; and (iii) Vietnam's first statutory innovation sandbox, allowing organisations to deploy new digital products and business models under time- and scope-limited regulatory carve-outs where current law has not kept pace with practice.

Vietnam's National Assembly passed Law on Cybersecurity No. 116/2025/QH15 on 10 December 2025 (434 of 443 deputies in favour), effective 1 July 2026. The law supersedes both the 2018 Cybersecurity Law (Law 24/2018/QH14) and the 2015 Law on Cyber Information Security, consolidating cybersecurity, cyber-information-security, and network-information-security into a unified Ministry of Public Security-led framework. It retains data-localization obligations for foreign digital-service providers handling personal data, user-generated content, and relationship graphs of Vietnamese users (minimum 24-month retention), introduces 6-hour urgent / 24-hour standard content take-down windows on MPS request, expressly prohibits AI/deepfake forgery of images, voices, and videos for illegal purposes, and mandates child-safety platform measures.

India's Ministry of Electronics and Information Technology (MeitY) notified the Digital Personal Data Protection Rules, 2025 via Gazette notification G.S.R. 846(E) on 13 November 2025, operationalising the 2023 DPDP Act. The Rules introduce a "negative list" cross-border personal-data transfer regime under Rule 14, verifiable parental consent, breach-notification windows, and tiered penalties up to INR 250 crore. Implementation is phased: Data Protection Board provisions in force on notification, Consent Manager rules from 13 Nov 2026, and core data-fiduciary / cross-border-transfer obligations from 13 May 2027.

The Beijing Economic-Technological Development Area (BDA, also known as Yizhuang) Management Committee issued Notice 京技管发〔2025〕25号 ("Several Measures to Accelerate the High-Quality Development of Industrial Finance"), effective 11 November 2025 through 31 December 2028. It renews and supersedes the prior version (京技管发〔2024〕33号, issued 24 December 2024) of the same "industrial finance 20 measures" (产业金融二十条) program. The package subsidises the district's finance-for-industry ecosystem: newly licensed financial institutions receive capital-scaled grants (e.g. RMB 5 million + 1% of paid-in capital for institutions with RMB 100-300 million in capital, rising in tiers to a cap of RMB 60 million for larger institutions); branch-office openings receive RMB 2-4 million one-off grants; venture-capital fund managers receive rewards of 2-4% of capital deployed (capped at RMB 500,000/project); leasing and factoring firms with RMB 500 million+ capital receive 0.5% landing bonuses (capped at RMB 25 million); and tech-credit "risk compensation funds" reimburse partner banks for small/micro-enterprise loan losses. State media reporting on the program's prior iteration cited a maximum single-policy-item award of RMB 80 million. Global Trade Alert logged the underlying state act (95362) as a single "state aid, unspecified" intervention (150867).

On 22 September 2025, OFAC announced that ShapeShift AG — a now-defunct digital-asset exchange incorporated in Switzerland and operated from Denver, Colorado (ceased operations 2021) — agreed to pay USD 750,000 to settle potential civil liability for 17,183 apparent violations of four OFAC sanctions programs: the Cuban Assets Control Regulations (CACR), the Iranian Transactions and Sanctions Regulations (ITSR), the Sudanese Sanctions Regulations (SSR), and the Syrian Sanctions Regulations (SySR). The violations occurred between 10 December 2016 and 9 October 2018, when ShapeShift's platform processed USD 12,570,956 in exchanges for users located in sanctioned jurisdictions. OFAC found that ShapeShift failed to implement any internal controls to screen users in sanctioned jurisdictions until after receiving an OFAC administrative subpoena, yielding a base penalty of USD 39,515,000 — reduced to USD 750,000 by mitigating factors including the entity's now-defunct status, the historical-period nature of the violations, voluntary cooperation after the subpoena, and a no-recidivism finding.

The National Assembly of Vietnam passed the Personal Data Protection Law (Luật Bảo vệ dữ liệu cá nhân), Law No. 91/2025/QH15, on 26 June 2025; it enters into force on 1 January 2026. The PDPL is Vietnam's first statutory (rather than decree-level) personal-data-protection framework, elevating the prior Decree 13/2023/ND-CP (PDPD) regime into a 5-chapter, 39-article primary statute and adding revenue-based administrative penalties of up to 5% of prior-year annual revenue for cross-border data-transfer violations and up to 10x illegal gains for unlawful data trading. The law is implemented by Decree 356/2025/ND-CP (issued 31 December 2025, effective 1 January 2026) and applies extraterritorially to foreign organisations offering services to or processing the personal data of Vietnam residents.

The Hong Kong Legislative Council passed the Stablecoins Ordinance (Cap. 656) on 21 May 2025 (third reading), brought into operation by the Secretary for Financial Services and the Treasury on 1 August 2025. The Ordinance introduces a mandatory licensing regime administered by the Hong Kong Monetary Authority (HKMA) for any person who issues a fiat-referenced stablecoin (FRS) in Hong Kong, issues an HKD-pegged stablecoin anywhere in the world, or actively markets such issuance to the Hong Kong public. Key requirements include minimum HK$25 million paid-up capital, segregated pools of high-quality liquid reserve assets fully backing circulating supply, mandatory redemption-at-par rights for holders, AML/CFT controls, and broad HKMA enforcement powers including licence suspension, revocation, and financial penalties. A six-month transitional period for existing operators expires 31 January 2026.

The Nigeria Data Protection Commission issued the General Application and Implementation Directive (GAID) 2025 on 20 March 2025, the principal implementing directive of the Nigeria Data Protection Act 2023 (NDPA). The GAID came fully into force on 19 September 2025, replacing the Nigeria Data Protection Regulation (NDPR) 2019 as the operative enforcement instrument. It applies extraterritorially to any data controller or processor established outside Nigeria that processes personal data of Nigerian data subjects, imposes a tripartite cross-border transfer framework (adequacy decisions, Transfer Instruments, and statutory exceptions), mandates Data Protection Impact Assessments for AI and high-risk technologies, and carries a civil-penalty ceiling of 2% of annual gross revenue or NGN 10 million for designated data controllers and processors of major importance (DCPMIs), whichever is greater.