Archive: October 2025

There were high hopes heading into 2025 that we would see a rebound in M&A around the world, however geopolitical and macroeconomic uncertainty meant the market was more subdued than many had been hoping for.

Happy October and Cyber Awareness Month! While October ends with ghosts and goblins and other scary monsters for Halloween, the entire month of October is dedicated to raising awareness of cyber security and preventing (and if necessary responding to) cyber security incidents.

Thailand is once again moving forward with AI regulation in an effort to establish a comprehensive framework for the use of artificial intelligence in the country. On 1 October 2025, the National Cyber Security Agency, the agency under the Ministry of Digital Economy and Society, published the “AI Securities Guideline” (the Guideline).

The Cybersecurity Information Sharing Act of 2015 (CISA 2015) expired on September 30, 2025, after Congress missed the reauthorization deadline. That lapse removes the decade-old legal framework that encouraged and protected cyber threat information sharing among companies, Information Sharing and Analysis Organizations and Centers (ISAOs/ISACs), and the federal government.

In a significant regulatory development, the Cyberspace Administration of China (CAC) has officially issued the Measures for the Administration of National Cybersecurity Incident Reporting (the Final Reporting Measures), which will take effect on 1 November 2025.

September 8th marked the entry into force of several provisions of the Retail Payment Activities Act1 (RPAA) and the mandate given to the Bank of Canada to supervise payment services providers (PSPs).

On September 1, 2025, Texas amended its telephone solicitation law to include text messages and to add several new requirements, including a registration requirement with the Texas Secretary of State, plus a form of security (such as a bond) in the amount of $10,000.

On September 23, 2025, Italy adopted Law no. 132/2025 on Artificial Intelligence (AI). The law will enter into force on 10 October 2025 and aims, inter alia, to complement the Regulation EU 2024/1689 (EU AI Act).