top of page

IoT Source Booklet:
Regulatory and policy developments

2025 Edition


Cloud, edge & spatial computing, and internet of things (IoT)
1. Research conducted by individuals, companies, associations and universities
1.1. January
1.1.1. North America
1.1.1.1. United States of America

  • KPMG, Regulations regarding digital content and cloud transactions - KPMG analysis and observations, January 2025, accessible here

1.2. March
1.2.1. International

  • Hollie Hennessy, Consumer loT Device Cybersecurity Standards, Policies, and Certification Schemes 2025, Omdia, March 2025, accessible here

  • Wevolver & Edge AI Foundation, The 2025 Edge AI Technology Report - The guide to understanding the current state of the art in hardware & software for Edge AI, March 2025, accessible here

1.3. June
1.3.1. International

  • Zhi-Min Wang et al., "Towards spatial computing: recent advances in multimodal natural interaction for Extended Reality headsets", in Frontiers of Computer Science, Volume 19, Article no. 1912708, Springer Nature, June 2025, accessible here

1.4. October

  • ​International Turnkey Systems (ITS) & IBS Intelligence, Next-Gen Islamic Core Banking: Built for Cloud, Ready for Compliance, October 2025, accessible here

2. Reports, guidelines, recommendations and other documents published by regulatory and supervisory authorities, international organizations, and other public institutions and agencies
2.1. January
2.1.1. Asia
2.1.1.1. Hong Kong

  • Office of the Privacy Commissioner for Personal Data of Hong Kong, Guidance on Cloud Computing, January 2025, accessible here

2.2. March
2.2.1. International

  • Organisation for Economic Cooperation and Development (OECD), An immersive technologies policy primer, OECD Digital Economy Papers no. 373, March 2025, accessible here;

2.2.2. Africa
2.2.2.1. South Africa

  • Sout African Reserve Bank, Cloud Computing and Data offshoring in the National Payment System, National Payment System Department, Consultation paper, March 2025, accessible here

2.3. April
2.3.1. Europe
2.3.1.1. European Union

  • European Commission, Final Report of the Expert Group on B2B data sharing and cloud computing contracts, April 2025, accessible here

2.4. May
2.4.1. International

  • Organisation for Economic Cooperation and Development (OECD), Competition in the provision of cloud computing services, OECD Roundtables on Competition Policy Papers no. 323, May 2025, accessible here

2.5. June
2.5.1. International

  • Organisation for Economic Cooperation and Development (OECD), Competition in the Provision of Cloud Computing Services – Note by Denmark, Directorate for Financial and Enterprise Affairs Competition Committee, accessible here

2.5.2. Europe
2.5.2.1. European Union

  • Sarah Knafo, Report on European technological sovereignty and digital infrastructure, Committee on Industry, Research and Energy, European Parliament, June 2025, accessible here

2.5.2.2. United Kingdom

  • Information Commissioner's Office, Guidance on consumer Internet of Things products and services: Impact Assessment – DRAFT, June 2025, accessible here;

  • Information Commissioner's Office, Consumer Internet of Things – draft impact assessment, June 2025, accessible here;

2.6. September
2.6.1. Europe
2.6.1.1. European Union

  • European Commission, Cloud Sovereignty Framework, Version 1.2.1, Directorate-General for Digital Services, September 2025, accessible here

2.7. October
2.7.1. International

  • Organisation for Economic Cooperation and Development (OECD), Measuring domestic public cloud compute availability for artificial intelligence, OECD Artificial Intelligence Papers no. 49, October 2025, accessible here

2.8. November
2.8.1. Europe
2.8.1.1. European Union

  • European Commission, Communication to the Commission - Approval of the draft Commission Recommendation on non-binding model contractual terms on data access and use and non-binding standard contractual clauses for cloud computing contracts (with Annexes), annexed hereto, November 2025, accessible here;

  • European Commission, Annex to the Communication to the Commission - Approval of the draft Commission Recommendation on non-binding model contractual terms on data access and use and non-binding standard contractual clauses for cloud computing contracts (with Annexes), annexed hereto, November 2025, accessible here

2.9. December
2.9.1. Europe
2.9.1.1. European Union

  • Tristan Marcelin, Cloud and AI development act, European Parliamentary Research Service (EPRS), European Parliament, December 2025, accessible here;

bottom of page