South Africa's SME Funding Gap Is a Data-Plumbing Problem That Rules Alone Won't Fix
OECD data show 56% of South African MSMEs are unregistered. Lenders say verifiable payment and invoice data, not more capital, is the missing input.
2026-09-19Latest Analysis
Africa
digital public infrastructure APAC
Israel's 'Lived AI' Plan Bets on Deployment and Compute, and Is Right to Skip an EU-Style AI Act
Israel's 100,000-accelerator national AI plan pairs a hard-infrastructure push with sector-by-sector regulation. That is...
The Garante's €9.5M TIM Fine Shows Italy Enforces Data-Rights Deadlines, and Traffic-Data Requests Deserve the Same Rigor
Italy's €9.516M TIM fine over ignored access and deletion requests is a telemarketing case, but it tests the compliance ...
Saudi Arabia's Private-Sector Cyber Baseline Is Sensible in Design but Unfinished in Process
Baker McKenzie's July 2026 analysis of the NCA's NCNICC-1:2025 shows a tiered baseline for private firms, with no stated...
Estonia's IT Consolidation Puts X-Road Under One Architect, and the Safeguards Matter More Than the €11 Million
Estonia is cutting state IT bodies from ten to six. The savings are modest, but the reform will decide who governs the d...
Tallinn Manual 3.0 Should Answer the AI and Cyber Questions Armies Are Already Facing, Not Pause for Treaty Talks
West Point's CyCon 2026 series, drawing on Tallinn discussions, shows that procurement, lifecycle legal review and digit...
Nigeria's Spectrum Clean-Up Works Best When the NCC Lets Deals Like Mafab's Move Fast
Mafab's proposed sale of 5G spectrum to MTN shows secondary-market trading can rescue idle airwaves, if the NCC approves...
Apple's Negotiated EU App Store Terms Give Ukraine a Better Template Than a Copy-Paste of the DMA
Apple's Commission-negotiated EU fee overhaul shows how gatekeeper rules can be settled by dialogue, a lesson for Ukrain...
France's Social Media Ban Fell on Proportionality, and the DSA Regime Enforced by ARCOM Is the Sturdier Path
The Conseil constitutionnel struck France's under-15 ban for over-breadth and unsafeguarded age checks, leaving ARCOM an...
Canada's Streaming Levy Has Stalled in Court, and Ottawa's $600 Million Replacement Is the Sounder Design
Seven streamers paid nothing by the Aug. 31 deadline after a court stay. Public funding beats a contested 5% levy, but t...
London's First Robotaxis Should Be Governed by Existing Data Law, Not a New AV Data Regime
Uber and Wayve's supervised London launch shows UK GDPR and the AV Act's safety-data duties can cover robotaxi data, if ...
Australia's Outdoor Mobile Mandate Bets on Satellites That Its Own Spectrum Policy Could Keep Away
The UOMO bill sets a December 2027 satellite-dependent deadline while ACMA weighs auctioning the 2 GHz spectrum SpaceX s...
Malaysia's New MyKad Needs a Statutory Data Regime Before Banks and Telcos Get Access to It
The new MyKad's biometric database sits behind a PDPA that exempts government, leaving commercial uses and age-verificat...
Israel's AI Election-Label Rule Is Proportionate, but Its Real Test Is Whether Enforcement Can Move at Campaign Speed
Israel's new AI-disclosure rule for campaign ads targets deceptive realism rather than AI itself, a sound design whose w...
Kenya's Cross-Border Guidance Copies the GDPR's Toolkit but Adds Localization Rules That Could Undercut Its EU Adequacy Bid
ODPC's September 8 transfer guidance treats cloud access as a transfer and bars secondary-use onward transfers, raising ...
Ireland's €645,000 HSE Fine Targets Basic Records Hygiene, the Kind of GDPR Enforcement That Works
The DPC's fine on the HSE for rotting, unsecured paper records shows GDPR enforcement is most credible when it targets c...
AGCOM's Gambling-Prevention Guidelines Target Real Harms, but Logo and Link Limits Risk Muting Legal Operators
AGCOM's Delibera 200/26/CONS curbs surrogate gambling ads, but its logo and link limits could blur the line between lice...
Saudi Arabia's Soft-Law Deepfake Guidelines Are Sound on Consent, but Its Criminal Speech Law Sets the Real Rules
SDAIA's voluntary deepfake guidance favors consent and watermarking over bans, yet the Anti-Cyber Crime Law's elastic Ar...
India's UPI Fee Fixes a Real Funding Gap, But Section 10A Hands the Executive an Open-Ended Pricing Power
India's 0.4% MDR on UPI merchant payments above Rs 2,000 is modest, but the Section 10A amendment behind it leaves the e...
The CRA's Single Reporting Platform Cuts Paperwork, but the 24-Hour Clock Still Risks Circulating Unpatched Flaws
Since 11 September 2026, EU manufacturers must report exploited vulnerabilities within 24 hours through one ENISA platfo...
NTIA's Condition 50 Buys 270,000 Connections With a 14-Year Waiver of California's Broadband Rules
A federal BEAD award of $1.42 billion would bar California from enforcing net neutrality, affordability and safety rules...
California's Under-16 Feed Ban Trades Design Regulation for a Universal Age-Check Mandate
AB 1709 targets addictive design, but its $50,000-per-minor penalties push every platform toward verifying every user's ...
Turkey's e-Devlet Age Check Solves a Privacy Problem Its Enforcement Toolkit Creates Elsewhere
Turkey's under-15 social media ban, enforced from Nov. 1 via e-Devlet, is better designed on privacy than most, but thro...
OpenAI's Australian Data-Centre Ultimatum Is Really a Licensing Question the Government Has Already Framed
OpenAI says Australian copyright law blocks a training centre. The better answer is a workable licensing market with tra...
South Africa's Data Centre Fight Is a Disclosure Problem, Not a Case for a Moratorium
Cape Town groups want a national data centre freeze. The stronger fix is mandatory water and power reporting, which Sout...