Industrial Policy & Trade Monitor· 2665 actions· ✨ 90 recent

On June 17, 2026, BIS announced a $36,184,680 civil penalty settlement with Robert Bosch GmbH (Stuttgart, Germany) — the largest-ever BIS enforcement penalty against a non-US company for Foreign Direct Product Rule (FDPR) violations. Between September 16, 2020 and September 26, 2024, Bosch exported approximately $72.4 million in MEMS sensor products and automotive software from abroad to Huawei Technologies and its Entity List affiliates without the required BIS license. Bosch filed a Voluntary Self-Disclosure and cooperated throughout; the DOJ issued the first-ever NSD declination under its newly established Corporate Enforcement Policy, declining criminal prosecution entirely.

Prime Minister Phạm Minh Chính issued Directive 38/CĐ-TTg on 5 May 2026, mobilising a cross-ministerial enforcement campaign against intellectual property infringement running 7–30 May 2026 with a 31 May reporting deadline. The directive explicitly responds to the USTR 2026 Special 301 designation of Vietnam as a Priority Foreign Country — the first such designation in eleven years — which triggers a statutory 30-day window for USTR to decide whether to open a Section 301 investigation. Ministries of Public Security, Industry and Trade (Market Surveillance), Information and Communications, and Culture are mobilised for coordinated raids targeting counterfeit-goods exporters, pirated-content platforms, and software-copyright violators, with the Prime Minister signalling enforcement will be permanent rather than a one-off campaign.

On 9 April 2026 the Government of India, exercising powers under section 4(1) of the Special Economic Zones Act 2005, gazetted a 66.166-hectare sector-specific Special Economic Zone at Dholera Special Investment Region, Gujarat for Tata Semiconductor Manufacturing Pvt. Ltd, exclusively for electronic hardware, software and IT/ITES. The notification is the statutory site- enabling instrument for India's first commercial-scale wafer-fab plant — a ~INR 91,000 crore (~USD 11bn) Tata Electronics / PSMC (Powerchip, Taiwan) joint project announced under India Semiconductor Mission (ISM) 1.0 in February 2024 — and follows the Letter of Approval issued on 17 March 2026. The same notification designates the SEZ as an Inland Container Depot under the Customs Act 1962 with effect from 9 April 2026, enabling on-site customs clearance for fab inputs.

The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) announced on 17 March 2026 that TradeStation Securities, Inc. agreed to pay $1,110,661 to settle 481 apparent violations of the Iranian Transactions and Sanctions Regulations (31 CFR Part 560), the Syrian Sanctions Regulations (31 CFR Part 542), and the Ukraine-/Russia-Related Sanctions Regulations (31 CFR Part 589) that occurred between 21 June 2021 and 15 June 2022. The violations arose from a mobile-platform software update that inadvertently caused the firm's second-tier geo-blocking to screen the IP address of a U.S.-located server rather than the user's IP, allowing customers in Iran, Syria, and Crimea to execute securities-related transactions. OFAC determined the apparent violations were non-egregious and voluntarily self-disclosed, resulting in a significantly reduced settlement amount.

On 29 January 2026, the Council of the European Union adopted Council Implementing Regulation (EU) 2026/267 and the accompanying Council Decision, implementing the EU's Iran human-rights restrictive-measures regime (Regulation (EU) No 359/2011, in place since 2011 and renewed annually). The package designates 15 individuals and 6 entities over the violent repression of peaceful protests, arbitrary detention, and internet/media censorship in Iran, bringing the regime's cumulative total to 24 individuals and 26 entities. The six newly listed entities are the Iranian Audio-Visual Media Regulatory Authority (SATRA), the IRGC-linked Seraj Cyberspace Organization, the Working Group for Determining Instances of Criminal Content (WGDICC), Yaftar Pazhohan Pishtaz Rayanesh Limited Company, Douran Software Technologies, and Masaf Institute. Designated parties are subject to an EU-wide asset freeze and a prohibition on making funds or economic resources available to them; listed individuals additionally face a travel ban.

On 27 January 2026, the Government of Quebec via Investissement Québec announced a CAD 40 million equity (preferred shares) investment in Vention, a Montreal-based industrial-automation and physical-AI software/hardware platform, as part of a CAD 150 million total financing round. Co-investors in the round included NVentures (NVIDIA's venture arm), Desjardins Capital, and Fidelity Investments Canada. The province frames the investment as building a Canadian-headquartered global leader in robotics/automation software rather than as a trade-restrictive measure.

The British Business Bank (BBB), the UK government's state-owned economic development bank, committed GBP 25 million in direct equity to Kraken Technologies, announced 20 January 2026 — the Bank's largest direct investment in a private company to date. Kraken is an AI-driven energy and utilities operating system, licensed to utilities serving over 70 million customer accounts worldwide, and is being spun out of Octopus Energy Group in a transaction that raised c. USD 1 billion from investors including D1 Capital Partners, Fidelity International, Durable Capital Partners and Ontario Teachers' Pension Plan Board's Teachers' Venture Growth, valuing Kraken at USD 8.65 billion. Business Secretary Peter Kyle framed the stake as keeping a strategically important UK-founded scale-up anchored domestically, part of a wider package under the Modern Industrial Strategy.

China's Ministry of Finance, NDRC, Ministry of Industry and Information Technology, People's Bank of China and National Financial Regulatory Administration jointly issued Cai Jin [2026] No. 4 on 2026-01-19, establishing a central-fiscal loan interest-subsidy scheme for micro, small and medium-sized enterprises (MSMEs) operating in 14 designated industrial-chain and emerging-industry sectors. Eligible loans originated from 2026-01-01 receive a 1.5-percentage-point annual interest subsidy for up to two years, capped at RMB 50 million in principal per enterprise (maximum subsidy RMB 1.5 million per enterprise). The policy is tentatively set to run one year with a possible extension.

On 24 December 2025 the Minister of Science and Technology signed Decision No. 4386/QĐ-BKHCN defining the functions, tasks, and organisational structure of the Vietnam National Multi-Project Wafer Coordination Centre (VNMPW/CC). The Centre sits under MOST's Authority of Information Technology Industry and acts as a coordinating hub between domestic chip-design firms, research institutes, and domestic / foreign fabrication and packaging partners. It provides shared EDA software access, IP libraries, technical design verification, performance measurement, training programmes, and pilot-production (MPW shuttle) support — the first concrete institutional node operationalising Vietnam's 2024 semiconductor strategy (Decision 1018/QĐ-TTg).

Taiwan's Legislative Yuan passed the Artificial Intelligence Basic Act (人工智慧基本法) on third reading on 23 December 2025, and President Lai Ching-te promulgated the 20-article statute on 14 January 2026, bringing it into force immediately. The Act designates the National Science and Technology Council (NSTC) as the central AI-policy competent authority and codifies seven governance principles — sustainability and well-being, human autonomy, privacy protection and data governance, cybersecurity and safety, transparency and explainability, fairness and non-discrimination, and accountability — that apply to all public-sector AI procurement and high-risk sectoral applications. The statute establishes a statutory foundation for the Taiwan AI Action Plan 2.0, mandates an Executive Yuan National AI Strategy Committee, and provides authority for sector-specific implementing regulations by FSC, NCC, MOHW, and MOTC across finance, telecoms, medical, and autonomous-vehicle AI within a two-year window. As the first national AI governance statute in the Greater China region and the third globally after the EU AI Act and South Korea's AI Basic Act, it frames regulatory expectations for the companies at the heart of the global AI hardware supply chain — TSMC, NVIDIA ODM partners, and advanced-packaging incumbents — that are headquartered or operate substantially in Taiwan.

The European Investment Bank agreed to lend up to EUR 870 million to Nokia to accelerate research and development of next-generation mobile network technologies (5G-Advanced and 6G radio access network hardware and software). The facility is structured in two tranches of EUR 435 million each: the first was signed in December 2025, with the second expected to be signed in mid-2026. The financing is delivered under the EIB's TechEU initiative and backed by an InvestEU guarantee, explicitly framed around EU strategic autonomy in mobile-network technology and support for EU security and defence objectives given the cybersecurity features of the radio networks involved.

The UK Export Control (Amendment) (No. 2) Regulations 2025 (SI 2025/1197) entered into force on 16 December 2025, extending the UK's strategic export control regime to cover quantum computing hardware (ECCN-aligned 4A506), advanced and cryogenic semiconductor technologies (3A501, 3A504, 3B501), and associated software and technology categories. The regulations also transfer existing national controls on quantum and advanced semiconductor items from the Export Control Order 2008 into the UK's assimilated Dual-Use Regulation (retained EU 428/2009 as amended), harmonising the UK's dual-use schedule with Wassenaar Arrangement 2024 updates. The action is explicitly calibrated as "Wassenaar Minus One" — aligning UK controls with the US BIS (EAR / ECCN framework) and EU (Regulation 2021/821 as amended) without requiring multilateral consensus on each item. It is the first UK statutory instrument since Brexit to add substantial new technology-specific dual-use controls targeting advanced semiconductor and quantum capabilities.

The U.S. Treasury's Office of Foreign Assets Control (OFAC) entered into a $3,103,360 settlement with Exodus Movement, Inc., a U.S.-incorporated non-custodial / self-custody crypto wallet software company, to resolve 254 apparent violations of the Iranian Transactions and Sanctions Regulations (ITSR, 31 C.F.R. Part 560) committed between October 17, 2017 and January 4, 2019. Exodus customer-support staff provided technical and account-related support — and in 12 of the 254 instances recommended the use of virtual private networks (VPNs) to circumvent partner-exchange geoblocking controls — to users who self-identified as located in Iran, in violation of the ITSR's prohibition on the export of services to Iran (§ 560.204) and, for the 12 egregious cases, the facilitation prohibition (§ 560.203). OFAC deemed the 12 VPN-coaching cases "egregious" because Exodus personnel were generally aware of U.S. sanctions and the company's own terms of use prohibited Iran usage, yet support staff actively helped Iranian users evade controls. Exodus separately committed to invest $630,000 in additional sanctions compliance controls. The settlement is structurally novel as the first OFAC enforcement action against a Web3-infrastructure / non-custodial wallet-software vendor and establishes that OFAC will assert jurisdiction over self-custody software providers based on customer-support facilitation conduct, not just custodial flow control.

On 11 December 2025 the US Department of State announced the inaugural Pax Silica Summit, held in Washington D.C. on 12 December 2025, at which the United States, Australia, Japan, the Republic of Korea, the United Kingdom, Singapore and Israel signed the non-binding Pax Silica Declaration. The declaration commits signatories to coordinate "trusted" supply chains across the full technology stack — software, frontier foundation models, network infrastructure, compute and semiconductors, advanced manufacturing, transportation logistics, minerals refining and processing, and energy — explicitly to reduce "coercive dependencies." The coalition has since expanded to add the United Arab Emirates, Greece, Qatar, Sweden and India (signed 20 February 2026 at the India AI Impact Summit), and on 26 March 2026 State announced a USD 250 million Pax Silica Fund intended to catalyse trusted-capital co-investment in critical-minerals processing and semiconductor supply chains.

The Australian Renewable Energy Agency (ARENA) awarded a AUD 18.07 million grant to energy retailer Flow Power under the "Driving the Nation Program" to build the "Flow Power Highway" — a minimum 10-site, up to 84-charger ultrafast battery-electric-vehicle (BEV) charging network across Brisbane, Melbourne and Sydney, delivering 29.4 MW of total charging capacity. The AUD 18.07 million grant leverages a AUD 70.23 million total project value, with Flow Power partnering UK charge-point operator GRIDSERVE (via its GIGATONS venture) for hardware, software and analytics. Announced 10 December 2025 alongside two smaller ARENA EV-infrastructure grants (Essential Energy AUD 2.3m for regional NSW chargers; UTS/RACE for 2030 CRC AUD 1.09m for a national vehicle-grid-integration network).

On 10 December 2025 the National Assembly of Vietnam adopted Law No. 134/2025/QH15 on Artificial Intelligence (8 chapters, 35 articles), Vietnam's first dedicated AI statutory framework and one of the first comprehensive horizontal AI laws in Southeast Asia. The law establishes a three-tier risk-based regulatory architecture (high / medium / low) for the research, development, provision, deployment, and use of AI systems; defines the rights and obligations of providers, deployers, importers, distributors, and users; and mandates state oversight via the Ministry of Information & Communications and Ministry of Science & Technology. Prohibited acts include systematic deception, manipulation of human perception, generation of fake content endangering national security, exploitation of vulnerable populations, and obstruction of human-supervision mechanisms. The law applies to Vietnamese agencies, organizations, and individuals as well as foreign organizations and individuals involved in AI-related activities in Vietnam, taking effect 1 March 2026 with 12-18 month transition windows for existing systems depending on sector.

The National Reconstruction Fund Corporation (NRFC), Australia's AUD 15 billion sovereign industrial-financing vehicle, committed AUD 100 million (~USD 66 million) of senior secured debt to Intellihub, a Sydney-based smart-meter and grid-data operator managing over 3.3 million meters nationally, announced 2 December 2025. The debt tranche sits inside a broader AUD 3.1 billion debt funding package and is earmarked for continued smart-meter rollout and upgrades to Intellihub's Evergen energy-management software, which supports virtual power plant and demand-response operations. NRFC classifies the deal as its first deployment in the Renewables and Low Emissions Technology priority area, framing it as decarbonisation-enabling grid infrastructure rather than a greenfield manufacturing build.

India's Ministry of Electronics and Information Technology (MeitY) notified the Digital Personal Data Protection Rules, 2025 via Gazette notification G.S.R. 846(E) on 13 November 2025, operationalising the 2023 DPDP Act. The Rules introduce a "negative list" cross-border personal-data transfer regime under Rule 14, verifiable parental consent, breach-notification windows, and tiered penalties up to INR 250 crore. Implementation is phased: Data Protection Board provisions in force on notification, Consent Manager rules from 13 Nov 2026, and core data-fiduciary / cross-border-transfer obligations from 13 May 2027.

The European Investment Fund (EIF), part of the EIB Group, invested EUR 20 million (~USD 23.1 million) on 6 November 2025 in TIN Capital's European Cyber Tech Fund V, a growth-equity vehicle backing European cybersecurity scale-ups. EIF's participation is supported under the European Commission's InvestEU programme; alongside Invest-NL and private investors, the fund closed at over EUR 80 million. The EIF frames the investment as strengthening Europe's digital security and autonomy amid incoming EU cybersecurity regulation (NIS2, the Cybersecurity Act, DORA). Global Trade Alert separately logs the transaction as a "red"-flagged state-linked financial investment-support intervention.

On 17 October 2025 Türkiye's Ministry of Industry and Technology opened the "HIT-Quantum" call, a USD 300 million support tranche under the HIT-30 High Technology Investment Programme (see `2024-07-26-turkiye-hit-30-high-technology-investment-programme`), aimed at building high-capacity infrastructure for quantum computing services, a scalable quantum hardware/software ecosystem for research centres, universities and the private sector, and skilled-workforce development. The call was announced alongside three parallel HIT-30 sector calls — a USD 1.6 billion "HIT-AI" call (see `2025-10-17-turkiye-hit-ai-cloud-infrastructure-call`), a USD 1.5 billion "HIT-Data Centre" call (see `2025-10-17-turkiye-hit-data-centre-call`), and a USD 1 billion "HIT-Industrial Robot" call (see `2025-10-17-turkiye-hit-industrial-robot-call`). Global Trade Alert logs this single government call as three separate "interventions" (financial grant, state loan, and tax/social-insurance relief) under state act 95017.

The European Investment Bank, the Spanish Ministry of Economy, Trade and Business, and Endesa SA agreed a EUR 650 million financing package on 29 September 2025 to modernise, digitalise and reinforce Endesa's electricity distribution network across six Spanish autonomous communities during 2025-2027. The package comprises a EUR 500 million loan channelling NextGenerationEU Recovery Plan funds through Spain's Autonomous Resilience Fund (FRA), plus a EUR 150 million EIB own-funds loan representing the first tranche of a EUR 500 million facility already approved by the Bank. Financing covers smart meters, advanced transformers, grid digitalisation software, new substations and underground cabling, with over half the investment targeted at economically disadvantaged regions.

India's Directorate General of Foreign Trade (DGFT) issued Notification No. 31/2025-26 on 23 September 2025, revising Appendix-3 of Schedule-II of the ITC(HS) Export Policy to add a new Category 7 — "Certain Emerging Technologies and related items" — to the SCOMET (Special Chemicals, Organisms, Materials, Equipment and Technologies) list. Category 7 brings under export-licence control: quantum-computing systems (≥34 qubits with controlled error rates), cryogenic CMOS integrated circuits, advanced lithography tools (≤45 nm minimum resolvable feature), additive-manufacturing equipment under vacuum, and related software/technology. The notification took effect 30 days from issuance, on 23 October 2025, and is the first new SCOMET category created since the list's last major restructure, aligning India's strategic-trade-control regime with parallel US BIS, Wassenaar Arrangement, and EU dual-use list updates.

The European Investment Bank signed a EUR 450 million loan with Thales to finance the group's 2025-2027 research and development investment programme in aeronautics and radar. The aeronautics stream targets safety and efficiency improvements for civil and military flight; the radar stream funds modernisation of existing equipment and development of a new generation of civil and military radar systems and software. The EIB frames the deal as its first-ever corporate loan to Thales and one of the largest it has extended to Europe's security and defence sector, part of a EUR 3.5 billion (3.5% of 2025 financing) EIB Group allocation to security and defence.

Paraguay promulgated Ley Nº 7547/2025 on 8 September 2025, comprehensively overhauling the maquila export-platform regime established by Ley Nº 1064/1997 after a 28-year run. The statute introduces a flat 1% tax on the higher of Paraguayan value-added or export-invoice value, a formal "service maquila" modality covering software, BPO, call centres, and digital processes for foreign markets, and a 20-year renewable benefit duration. The National Council of Maquila Export Industries (CNIME) is established as the supervisory authority; a 12-month transition period applies to existing programme holders.

The US Bureau of Industry and Security (BIS) amended the Export Administration Regulations to remove three foreign-owned semiconductor fabs operating in China — Intel Semiconductor (Dalian) Ltd, Samsung China Semiconductor Co. Ltd, and SK hynix Semiconductor (China) Ltd — from the Validated End-User (VEU) Authorizations list (15 CFR Part 748). BIS framed the VEU program as a "loophole" that previously allowed these fabs to receive most US-origin chipmaking equipment, software and technology license-free, a privilege no US-owned fab in China ever had. After the effective date, every restricted shipment to these fabs will require an individual export license, reviewed case-by-case under the existing 2022/2023 advanced- computing controls. The rule is published as Federal Register document 2025-16735 (90 FR 42321), Docket BIS-2025-0555, RIN 0694-AK32.

On 22 August 2025 South Korea's National R&D Program Evaluation Steering Committee, convened by MOTIE, finalized an exemption from the mandatory preliminary feasibility study (예비타당성조사 면제) for the "K-On-Device AI Semiconductor Technology Development" project, clearing the roughly KRW 689.15 billion (approx. USD 496 million) program to proceed toward FY2026 budget allocation without the standard multi-year vetting delay. The project funds full-stack development — custom AI chip design, software, and modules — across four demand-anchored industries: automotive (Hyundai Motor), IoT/home appliances (LG Electronics), machinery/robotics (Doosan Robotics, Daedong), and defense (Korea Aerospace Industries). MOTIE structured the program so end-user demand companies participated directly in project planning, pairing them with domestic fabless design and foundry manufacturing firms to build a domestic on-device AI semiconductor ecosystem, ahead of full budget confirmation and formal program launch.

On 20 August 2025 the Business Development Bank of Canada (BDC), a federal Crown corporation, launched the Industrial Innovation Venture Fund II (I²VF II) with a CAD 200 million (USD 144.4 million) commitment to back early-stage, high-growth companies developing productivity technologies for advanced manufacturing, mining and extractive industries, and agriculture/food. The fund expands on Fund I (2019, 20+ portfolio companies) with a widened focus on critical minerals alongside robotics, automation, applied AI and industrial software. BDC frames the fund as a response to Canada's productivity gap, which EVP Geneviève Bouthillier described as "especially acute in sectors like manufacturing, mining, and agriculture."

On 18 July 2025, the Council of the European Union adopted the 18th package of restrictive measures against Russia, anchored by Council Regulation (EU) 2025/1494 amending Regulation 833/2014 (sectoral measures), Council Implementing Regulation (EU) 2025/1476 implementing Regulation 269/2014 (asset-freeze listings), Council Decision (CFSP) 2025/1495 (vessel listings), and Council Regulation (EU) 2025/1472 (parallel Belarus measures). The package is the largest energy-sector escalation since 2022 and pivots from new-perimeter creation toward enforcement and circumvention closure. Headline measures: (i) the Russian-crude price cap is lowered from USD 60 to USD 47.6 per barrel with a new automatic dynamic mechanism re-indexing the cap to global oil prices every six months at a 15 % discount to the 22-week trailing average (effective 3 Sep 2025, with a transitional exemption to 18 Oct 2025 for pre-20 Jul 2025 contracts compliant with the prior cap); (ii) full transaction ban extended to 22 additional Russian banks, bringing the total cut off from the EU financial system to 45; transaction ban extended to third-country financial institutions and crypto-asset service providers facilitating circumvention; (iii) full transaction ban on Nord Stream 1 and Nord Stream 2 pipelines; (iv) import ban on refined oil products derived from Russian crude processed in third countries; (v) 105 additional vessels added to the shadow-fleet port-access ban (cumulative total 444); (vi) 26 new entities added to Annex IV military end-user list (15 Russian + 11 from China/Hong Kong/Turkey); (vii) Council Implementing Regulation 2025/1476 lists 14 individuals + 41 entities under asset-freeze, including a major Indian refinery (Nayara Energy, part-owned by Rosneft), three Chinese suppliers of battlefield goods, shadow-fleet operators, and entities involved in the deportation of Ukrainian children; (viii) parallel Belarus complementary measures via Regulation 2025/1472. Wind-down periods vary: 90 days for oil-price-cap contracts; banking-software wind-down to 30 Sep 2025; trade-goods wind-downs Oct 2025–Jan 2026 by category. Entry into force on 19 July 2025 (day following publication in the Official Journal), except for measures with explicit deferred application dates.

The Beijing Economic-Technological Development Zone (BDA / Yizhuang) Management Committee issued Jingjiguanfa [2025] No. 15, "Several Measures on Promoting Quantum Technology and Industry Development in the Beijing Economic-Technological Development Zone," on 2025-07-14, effective immediately and in force through 2027-12-31. The package spans ten support lines covering the full quantum stack (computing hardware/software, communications, sensing): up to RMB 2,000,000 one-off support for disruptive early-stage R&D projects, R&D-investment matching at 20% of an enterprise's prior-year R&D spend capped at RMB 5,000,000, 1:1 matching up to RMB 30,000,000 for enterprises undertaking state/municipal quantum research tasks, RMB 500,000 per product for new-technology/product certifications, up to RMB 100,000 per flagship application-demonstration project, up to RMB 30,000,000/year (three years max) for quantum-computing cloud platforms and compute centers, up to RMB 5,000,000/year (three years max) for operating industry-ecosystem platforms, rent subsidies up to RMB 1.5/sqm/day (max 2,000 sqm, three years), and talent, financing ("patient capital"/future-industry guidance fund), and international- cooperation support. The zone targets an internationally influential quantum industry cluster by 2027.

On 10 July 2025 the Huairou District Economic and Information Technology Bureau (Beijing) issued Huaijingxinfa [2025] No. 35, district-level support measures to promote high-quality development of the advanced manufacturing and software/information-technology services industries, implementing the district's broader high-quality-development guiding opinions (Huaizhengfa [2024] No. 16). The measures cover 13 support categories (R&D, technology upgrading, standards/certification, "specialized, refined, unique and new" (专精特新) enterprise recognition, among others), with individual awards decided case-by-case through an application and government-approval process rather than a disclosed schedule of fixed amounts. A follow-on December 2025 notice solicited enterprise applications for the 2025 award cycle under this same document.

The Polish Sejm passed the Act of 9 July 2025 amending the Act of 24 July 2015 on the Control of Certain Investments, signed by the President on 21 July 2025 and effective 24 July 2025. The amendment removes the time-limited "Specialised Rules" tier (introduced in 2020 under the Anti-COVID Shield) and makes Poland's FDI screening regime permanent. Review competence is transferred from the President of UOKiK (the competition authority) to the minister responsible for economic affairs (currently the Minister of Finance and Economy), and a new trigger covering "an international situation distorting the market or competition" is added alongside the existing public-order, security and health grounds.

Brazil's national development bank BNDES approved a BRL 100 million (~USD 18 million) financing package for BRQ Digital Solutions, funded through the BNDES Mais Inovação program, to build 17 technical accelerators for the company's proprietary generative-AI platform "Fusion BRQ." The operation is aligned with Mission 4 (Digital Transformation) of Nova Indústria Brasil, the federal government's industrial policy, and is projected to create roughly 60 new R&D jobs. The AI platform targets accelerated software development across finance, healthcare, energy, insurance, retail, agriculture and telecom client sectors.

The National Assembly of Vietnam passed the Personal Data Protection Law (Luật Bảo vệ dữ liệu cá nhân), Law No. 91/2025/QH15, on 26 June 2025; it enters into force on 1 January 2026. The PDPL is Vietnam's first statutory (rather than decree-level) personal-data-protection framework, elevating the prior Decree 13/2023/ND-CP (PDPD) regime into a 5-chapter, 39-article primary statute and adding revenue-based administrative penalties of up to 5% of prior-year annual revenue for cross-border data-transfer violations and up to 10x illegal gains for unlawful data trading. The law is implemented by Decree 356/2025/ND-CP (issued 31 December 2025, effective 1 January 2026) and applies extraterritorially to foreign organisations offering services to or processing the personal data of Vietnam residents.

On 20 June 2025, the US Treasury's Office of Foreign Assets Control designated one individual, eight entities, and one vessel pursuant to Executive Order 13382 (WMD proliferators) for procuring and transshipping sensitive machinery to Iran's Rayan Roshd Afzar Company (RRA), a producer of UAV components and aerospace software for the IRGC. The vessel SHUN KAI XING, owned by Hong Kong-based Unico Shipping Co Ltd and chartered by Singapore-based V-Shipping Pte Ltd, was carrying the machinery for RRA and an affiliated firm when its cargo was inspected; the designated network — including China-based Shenzhen Xinxin Shipping, Dongguan Zanyin Machinery and Equipment, Athena Shipping, shipmaster Zhang Yanbing, and Turkiye-based Edisa Dis Ticaret Limited Sirketi — then falsified bills of lading to obscure the Iran-bound, RRA-consigned cargo after the inspection.

On 23 May 2025 the Bureau of Industry and Security notified major electronic design automation (EDA) suppliers — Cadence Design Systems, Synopsys, and Siemens EDA — by letter that a license is now required for any export, re-export, or in-country transfer of EDA software and technology classified under ECCNs 3D991 and 3E991 where a party to the transaction is located in China or is a Chinese "military end user" wherever located. BIS determined the shipments posed an unacceptable risk of diversion to Chinese military end use. The action was not published as a Federal Register rule; it surfaced publicly only through the affected companies' SEC 8-K disclosures. Synopsys suspended its FY2025 financial guidance in response. BIS rescinded the requirement effective 2 July 2025 (see amendments) amid the broader US-China trade truce, and the three vendors restored access for affected customers.

Thailand's Cabinet approved in principle on 22 April 2025 the urgent revision of the Foreign Business Act B.E. 2542 (1999), directing the Ministry of Commerce to overhaul the foundational 25-year-old statute governing foreign participation in Thai economic activities, explicitly shifting the guiding principle from "protection" of domestic entrepreneurs to "enhancing competitiveness." In January 2026, the Department of Business Development operationalised the reform by announcing a 10-sector List-3 delisting package — including telecommunications services not owning network infrastructure, software development, financial-services categories (treasury centres, derivatives agency, collateralised lending, credit guarantee), petroleum drilling services, management services for affiliated companies, and domestic agricultural commodity trading — that would allow wholly-foreign-owned subsidiaries without a Foreign Business Licence (FBL). Simultaneously, the revision introduces a shift from a legal-shareholding test to an actual-control / beneficial-ownership test in nominee-shareholder enforcement, tightening the anti-front-company architecture while liberalising legitimate foreign-investment routes. Full statutory enactment via parliamentary process is expected mid-to-late 2026.

The Legislative Yuan of Taiwan (ROC) passed amendments to Article 10-1 of the Statute for Industrial Innovation (產業創新條例) on third reading on 18 April 2025, promulgated by Presidential Decree on 7 May 2025 and effective for qualifying expenditures incurred from 1 January 2025. The amendment expands the scope of the existing Article 10-1 investment tax credit — previously covering hardware, software, technology, or technical services for smart machinery, 5G network deployment, and cybersecurity — to additionally cover (i) AI products or services and (ii) energy-conservation and carbon-reduction initiatives. The maximum eligible expenditure cap per company per taxable year is doubled from NT$1bn to NT$2bn, and the implementation period is extended through 31 December 2029. Secondary legislation operationalising the amended categories was jointly issued by MOEA and MOF on 27 November 2025 as the "Regulations Governing Tax Credits Claimed for Investments in Smart Machinery, 5G Networks, Cybersecurity, Artificial Intelligence (AI) Products or Services, and Energy Conservation and Carbon Reduction." This is Taiwan's first AI-and-green-tech investment tax credit mechanism in the general-industrial framework, distinct from Article 10-2 (the chip-specific R&D + advanced-equipment credit, "Taiwan Chips Act").

The US Bureau of Industry and Security amended the Export Administration Regulations to add 12 entities to the Entity List under the destinations of China (11) and Taiwan (1) via Final Rule 2025-05427 (90 FR 14046), companion to the larger 70-entity rule (2025-05426) published the same day. Targets fall in three clusters: (i) Beijing Academy of Artificial Intelligence and Beijing Innovation Wisdom Technology — added for acquiring US-origin items in support of China's military modernization, specifically developing large AI models and advanced computing chips for defense; (ii) the Inspur group — Inspur (Beijing) Electronic Information Industry, Inspur Electronic Information Industry, Inspur Electronic Information (Hong Kong), Inspur (HK) Electronics, Inspur Software, and Inspur Taiwan — added as subsidiaries contributing to supercomputers for military end use; and (iii) Henan Dingxin, Nettrix Information Industry, Suma Technology, and Suma-USI Electronics — added for involvement in the development of Chinese exascale supercomputers. License requirements are for all items subject to the EAR; review policy is presumption of denial for the AI cluster and policy of denial for the supercomputer clusters.

BIS (acting through its Office of Information and Communications Technology and Services, OICTS) published a final rule under Executive Order 13873's ICTS authority prohibiting certain connected-vehicle (CV) transactions involving hardware and software designed, developed, manufactured, or supplied by persons owned by, controlled by, or subject to the jurisdiction of the People's Republic of China or the Russian Federation. The rule reaches the Vehicle Connectivity System (VCS — hardware/software enabling external RF connectivity above 450 MHz) and the Automated Driving System (ADS) software stack. Effective 17 March 2025, with phased prohibitions: import/sale of CVs incorporating covered software prohibited from model year 2027; import of covered VCS hardware prohibited from model year 2030 (or 1 January 2029 for hardware not associated with a model year). Importers and connected-vehicle manufacturers must file annual Declarations of Conformity.

Bolivia's Decreto Supremo 5309, signed by President Luis Arce on 8 January 2025, mandates that all public-sector entities migrate their information systems to Free Software and Open Standards by 12 January 2030. The decree includes a data-localization provision barring storage of non-public state data on servers outside Bolivian territory; government cloud workloads must run either on public-entity infrastructure or on state-operated cloud services within the country. AGETIC (Bolivia's ICT agency) is responsible for overseeing compliance and developing the implementation plan (approved via the companion Decreto Supremo 5322 on 23 January 2025).

The Republic of Korea's National Assembly passed the Framework Act on the Development of Artificial Intelligence and the Establishment of a Foundation for Trustworthiness ("AI Basic Act") in plenary session on 26 December 2024, consolidating 19 separate AI bills tabled in the 22nd National Assembly. The statute was promulgated on 21 January 2025 and takes effect on 22 January 2026 after a one-year preparation period. Korea becomes the second jurisdiction worldwide — after the EU AI Act — to enact a comprehensive horizontal AI law, and the first in the Asia-Pacific. The Act establishes a risk-tiered regime targeting "high-impact" AI in healthcare, energy, public services, employment decisions, and generative-AI labelling, with extraterritorial reach over foreign providers whose systems affect the Korean market or users (mandatory local representative). It creates an AI Safety Institute, a national AI policy "control tower," and R&D / standardisation programmes under MSIT. Penalties are modest by international comparison — fines up to KRW 30 million plus a one-year grace period before full enforcement.

The National Assembly of Vietnam passed the Law on Data (Luật Dữ liệu), No. 60/2024/QH15, on 30 November 2024; it enters into force on 1 July 2025. The Law is Vietnam's first comprehensive horizontal data-governance statute, extending regulation beyond personal data (already covered by Decree 13/2023/ND-CP) to all digital data — public, private, and sectoral. It introduces statutory categories of "important data" (dữ liệu quan trọng) and "core data" (dữ liệu cốt lõi) tied to national-defence and national-security review for cross-border transfer, and establishes the National Data Centre under the Ministry of Public Security plus a statutory data-broker / data-services licensing framework.

In two consecutive sectoral notifications, Pakistan's Special Technology Zones Authority (STZA) — a federal body under the Cabinet Division — formally declared two additional Special Technology Zones. The Khanpur Industrial Project (Mumrial, Khanpur, District Haripur, Khyber Pakhtunkhwa; ~197 acres / 199,174 sq ft of existing and proposed infrastructure) was notified on 12 September 2024. The LEOS Technology Zone (Lehtrar Road, Nilore, Islamabad; 19.23 acres / 225,562 sq ft) was notified on 8 November 2024. Both zones operate under the Special Technology Zones Authority Act, 2021 incentive regime, which provides Zone Enterprises and Zone Developers a 10-year exemption from income tax, customs duty on capital-goods imports, and sales tax (under the Customs Act 1969, Income Tax Ordinance 2001 and Sales Tax Act 1990), together with eligibility for Special Forex Accounts under State Bank of Pakistan regulations (no requirement to convert USD inflows to PKR). The umbrella incentive window for the STZA regime runs until 30 June 2035, with each zone enterprise's 10-year clock starting from the date the zone developer certifies commercial operation.

Regulation (EU) 2024/2847 of the European Parliament and of the Council on horizontal cybersecurity requirements for products with digital elements, signed 23 October 2024 and entering into force 10 December 2024. The CRA is the first EU statutory cybersecurity regime covering all hardware and software products with a direct or indirect data connection placed on the EU market, imposing essential cybersecurity requirements, conformity assessment with CE marking, mandatory vulnerability handling, and 24-hour early-warning notification of actively-exploited vulnerabilities to ENISA. Main manufacturer obligations apply from 11 December 2027; conformity-assessment-body notification provisions apply from 11 June 2026 and reporting obligations from 11 September 2026. Penalties reach EUR 15M or 2.5% of global annual turnover.

The U.S. Treasury's Office of Foreign Assets Control (OFAC) published in the Federal Register (89 FR 84472–84474, FR Doc 2024-24524) three general licenses issued under the Western Balkans Stabilization Regulations (31 CFR Part 588): GL 3A, GL 4, and GL 5. All three were originally issued on 18 June 2024 concurrent with OFAC's expansion of Republika Srpska / Dodik-network designations; the 23 October 2024 Federal Register notice formalises them per the Administrative Procedure Act notice requirements. GL 3A (which superseded GL 3 of 16 November 2023) authorises transactions involving certain WBSR-blocked entities that are ordinarily incident and necessary to the exportation or re-exportation of agricultural commodities, medicine, medical devices, replacement parts and components, software updates, or activities involving medical prevention, diagnosis, treatment, or clinical trials. GL 4 authorises wind-down transactions with entities blocked on 18 June 2024 through a defined cutoff. GL 5 authorises transactions ordinarily incident and necessary to the manufacture, distribution, operation, installation, or maintenance/repair of drinking-water pumps manufactured or distributed by the WBSR-blocked Bosnian Serb entity Kaldera Company EL PGP d.o.o. (and 50%-or-more-owned subsidiaries), preserving municipal water supply continuity.

Norway's Ministry of Foreign Affairs amended the Eksportkontrollforskrift (Regulations on the export of defence- related products, dual-use items, technology and services) to add a new national control list — Annex III ("List III") — for emerging and disruptive technologies not yet covered by the EU dual-use list. Exports of items on Annex III require a licence from the Ministry of Foreign Affairs regardless of destination, including a catch-all licensing obligation. Controls cover semiconductor manufacturing equipment (including dry-etch apparatus), enriched silicon/germanium substrates, high- performance integrated circuits, quantum computers above specified controlled-qubit thresholds, quantum software and technology, software/technology for reverse-engineering integrated-circuit layouts, and additive-manufacturing equipment for metal/alloy components. The amendment, announced 3 October 2024 and effective 1 November 2024 (with a one-month transitional period), aligns Norway with parallel national measures adopted by the United States (BIS 6 Sep 2024 emerging- technology IFR), the Netherlands, the United Kingdom, Japan, Spain, Denmark and Finland.