Cybersecurity 2026

INDIA

China

Pakistan

Nepal

Delhi

Bangladesh

India

Myanmar

Law and Practice Contributed by: Anoop Narayanan, Priyanka Gupta and Harshita Sakarya ANA Law Group

Sri Lanka

Contents 1. General Overview of Laws and Regulators p.191 1.1 Cybersecurity Regulation Strategy p.191 1.2 Cybersecurity Laws p.193 1.3 Cybersecurity Regulators p.195 2. Critical Infrastructure Cybersecurity Regulation p.196 2.1 Scope of Critical Infrastructure Cybersecurity Regulation p.196 2.2 Critical Infrastructure Cybersecurity Requirements p.196 2.3 Incident Response and Notification Obligations p.197 2.4 State Responsibilities and Obligations p.198 3. Operational Resilience in the Financial Sector p.198 3.1 Scope of Financial Sector Operational Resilience Regulation p.198 3.2 ICT Service Provider Contractual Requirements p.199

3.3 Key Operational Resilience Obligations p.200 3.4 Operational Resilience Enforcement p.201

3.5 International Data Transfers p.201 3.6 Threat-Led Penetration Testing p.201 4. Cyber-Resilience p.202 4.1 Cyber-Resilience Legislation p.202 4.2 Key Obligations Under Legislation p.202 5. Security Certification for ICT Products, Services and Processes p.202

5.1 Key Cybersecurity Certification Legislation p.202 6. Cybersecurity in Other Regulations p.203 6.1 Cybersecurity and Data Protection p.203 6.2 Cybersecurity and AI p.204 6.3 Cybersecurity in the Healthcare Sector p.205

189 CHAMBERS.COM

Powered by