updated internet security regulation