Ukraine’s Defence City regime, effective from October 2025, offers tax, customs, and regulatory incentives to defence-related enterprises. Eligible companies must earn most income from defence goods or services. Benefits include exemptions on reinvested profits, real estate, land, and environmental taxes, plus simplified customs and currency rules. However, it excludes R&D credits and broader investor incentives, and cannot be combined with other preferential regimes. Residency is limited to strategically significant entities approved by the Ministry of Defence.

Vietnam’s draft AI Law, released for public consultation, aims to establish a comprehensive governance framework by January 2026. It introduces phased implementation, risk-based classification, role-driven accountability, and obligations for general-purpose AI. The law promotes innovation through incentives and sandboxes, and enforces strict penalties for violations, including revenue-based fines. Businesses in high-risk sectors like finance and health will face increased scrutiny. Stakeholders are urged to submit feedback before the National Assembly’s session on 20 October 2025.

The Brazilian Data Protection Authority (ANPD) has become an autonomous regulatory agency with expanded powers under Provisional Measure No. 1.317/2025 and Decree No. 12.622/2025. It now oversees digital protections for children and adolescents, including enforcing court orders, setting security standards, and coordinating with other agencies. The ANPD can issue regulations, supervise entities, and ensure proportional obligations for tech providers, prioritizing children’s rights and data protection in digital environments.

Organizations domiciled in Colombia can now adopt the international standard ISO/IEC 42001:2023, which will make them among the first organizations in Latin America to have a certifiable standard for the responsible management of artificial intelligence (AI) systems.