Analyzing critical legal trends and developments across data, cyber, AI and digital regulations from around the world and beyond borders

Data Protection Day (or Data Privacy Day outside of Europe) gives our global data and cyber community an opportunity to highlight the importance of respecting privacy, safeguarding data, and enabling trust. Navigating the complex landscape of data and cyber regulation is an increasingly difficult challenge, and the stakes will be further raised in 2026, driven by ongoing geopolitical uncertainty, an explosion of new regulations, and continued technological evolution.

Our team has shared our 2026 Top Issues to Watch for Global Data and Cyber Legal Risks, reflecting the intensifying effects of geopolitical tensions on cross‑border data flows, the continued rise of AI adoption and governance as a top board‑level priority, and the growing momentum of new AI regulatory frameworks worldwide. We also highlight the increasing scrutiny of transatlantic data transfers, the accelerating push for global cooperation to combat cybercrime, and the heightened focus on vendor management and supply chain vulnerabilities. These developments, alongside evolving data privacy and cybersecurity regimes worldwide, underscore the need for holistic, forward‑looking risk assessment and governance.

We have also updated our Global Data and Cyber Handbook, which is designed to help businesses stay ahead of this fast‑moving landscape. The latest edition provides expanded overviews and comparative insights across more than 50 jurisdictions, offering a clear view of the increasingly intricate web of global data privacy and cybersecurity requirements. Our handbook examines key data and cyber regulatory developments impacting AI, the regulation of non‑personal data and company data, regulatory approaches and enforcement, available remedies and penalties, and restrictions on cross-border data transfers.

We wish you all a happy Data Privacy Day, and look forward to helping you navigate an exciting, challenging, and rewarding 2026.

*Condensed version; publicly available

**Full version; log-in credentials required
**If you are a client, click here to request access.

Author

Brian Hengesbaugh is Global Chair of Baker McKenzie's Data & Cyber Practice. Formerly special counsel to the general counsel of the US Department of Commerce, Brian played a key role in the development and implementation of the US Government’s domestic and international policy in the area of privacy and electronic commerce. In particular, he served on the core team that negotiated the US-EU Safe Harbor Privacy Arrangement (Safe Harbor) and earned a Medal Award from the US Department of Commerce for this service.

Author

Vin leads our London Data Privacy practice and is also a member of our Global Privacy & Security Leadership team bringing his vast experience in this specialist area for over 22 years, advising clients from various data-rich sectors including retail, financial services/fin-tech, life sciences, healthcare, proptech and technology platforms.

Author

Magalie Dansac Le Clerc is a partner in Baker McKenzie's Paris office. A member of the Firm's Information Technology and Communications Practice Group, she is a Certified Information Privacy Professional (CIPP).

Author

Andy Leck is the head of the Intellectual Property (IP) Practice Group and a member of the Dispute Resolution Practice Group in Singapore. He is a core member of Baker McKenzie's regional IP practice and leads the Myanmar IP Steering Committee.

Author

Carolina Pardo is a lawyer and specialist in International Contract Law graduated from Universidad de los Andes. She obtained a LL.M. with specialization in International Private Law and Competition Law from the London School of Economics and Political Science. Over 20 years, she has advised major national and international clients on matters related to compliance with data protection, competition and consumer law rules. She has also successfully coordinated and prepared proposals for submission to national authorities on behalf of major industrial groups in Colombia.

Author

Justine focuses her practice on both proactive and reactive cybersecurity and data privacy services, representing clients in matters related to information governance, diligence in acquisitions and investments, incident preparedness and response, the California Consumer Privacy Act, privacy litigation, and cyber litigation.

Author

Cyrus Vance Jr. is a partner in Baker McKenzie's North America Litigation and Government Enforcement Practice as well as the Firm's Global Compliance and Investigations Practice. He is based in New York and serves as Global Chair of the Cybersecurity Practice.