Pakistan issued the most rules in our records, Brazil set the most dates

Pakistan issued the most rules in our records, Brazil set the most dates

Between 20 September and 6 October our desk published 205 items that touched regulators, data protection, AI rules, digital tax, payments, telecoms or government digital programmes. We set 75 of them aside because they were security advisories (59) or vendor changes (16). Another 70 were funding calls, takeovers and rules from the EU or the United States, which are outside this count. That leaves 60 items on rules, consultations and programmes from 26 jurisdictions outside the EU and US, and one country leads them: Pakistan accounts for 10 of the 60, more than any other, and Brazil, with five, supplies more dated obligations than anyone.

The two counts say different things. Pakistan wrote a great deal and, in six of its ten items, gave the reader nothing to plan against. Brazil wrote less and told you the day.

Eight days of Pakistani tax orders, and what is missing from them

Between 23 and 30 September, Pakistan's Federal Board of Revenue (FBR) put out six statutory orders, a general order and a circular. S.R.O. 1655(I)/2026 lets its system cross-match sales tax returns and send notices through the IRIS portal, each giving at least seven days to reply. S.R.O. 1665(I)/2026 adds a chapter on faceless audits: cases picked by algorithm, an officer the taxpayer cannot name, every notice carrying a Digital Identification Number. S.R.O. 1666 extends e-invoicing to federal excise and Islamabad services tax, and S.R.O. 1662 lets a Chief Commissioner seal premises that should be integrated and are not. Sales Tax General Order 25 says goods moved between a factory and its own warehouse under one registration need a Stock Transfer Note, not an invoice.

Four other Pakistani bodies appear in our ten: the telecoms regulator PTA, the procurement authority PPRA, the National CERT and the State Bank. PTA's equipment regulations (S.R.O. 1110(I)/2026) make a Certificate of Compliance mandatory before import or use, with 5G test standards set. The Public Procurement Rules 2026 came into force at once and send federal buying through one system, EPADS. The National CERT's Advisory 18 lists eight measures for generative AI that it calls mandatory.

Now the gap. Six of the ten items carry no date a vendor could put in a plan: the PTA standards, the procurement rules, the faceless audit chapter, the e-invoicing extension, the CERT advisory and the stock-transfer order. The procurement rules took effect "with immediate effect", so there was no lead time to give. The faceless audit chapter starts on a date the FBR will notify in the Gazette and has not yet named. The e-invoicing item says neither order states a separate start date. Only four Pakistani items carry a date we could put in a calendar: the sales tax return for some large taxpayers (30 September), the Tax Year 2026 return extended to 15 October, the retailers' fixed-tax returns due the same day, and the State Bank's sandbox applications, closing on 30 November.

For anyone selling accounting, invoicing or compliance software into Pakistan this is the practical lesson of the count. The obligation to build for arrives first as an instrument number, and the date follows later by notification. Watch the instrument list, not the calendar.

What stayed in the count, and where it comes from

The 60 items cover 59 distinct measures, because China's chip-industry VAT deduction round was published twice from the same joint notice. By region, Asia-Pacific and South Asia supplies 33 of the 60 items, Latin America 10, Africa 10, the Gulf 4, and the UK and Ukraine 3. The UK is in the count because it is outside the EU and the US: two items, both on employment rules in force from 1 October. Without them the figure is 58 items from 25 jurisdictions.

The countries with the most items are Pakistan (10), Brazil (5), China (5), India (4) and Nigeria (4). South Korea, Japan and Australia have three each.

By subject, tax and invoicing is the largest group, 21 of the 60, which is why we do not rehearse it here: our earlier piece on nine e-invoicing and tax-system deadlines covers the invoicing items of 2 to 5 October. Next come AI and data protection (15), telecoms (10), payments and banking (5), employment rules (4) and a mixed five. AI is in the headline of 11 of the 60 items, from Australia's rule on disclosing automated decisions to Nigeria's draft that would make firms register AI-driven marketing.

One caution on speed. Of the 60, 22 were published between 20 and 30 September and 38 between 1 and 6 October. That looks like acceleration. Part of it is our own reading widening: across all 205 items the desk published 100 up to 30 September and 105 in the six days after, so this group's share of what we published rose from 22% to 36%, but the volume rose too. We would not claim regulators sped up. We can say we found more of them.

Brazil: eight dates from five items

Dated obligations are a different count from items. Of the 59 distinct measures, 41 carry at least one date: a deadline for comments, a compliance or start date, or an application window. Eighteen carry none.

The dates cluster by country. Brazil, Pakistan and India each have four dated items. Counting every separate date rather than every item, Brazil leads with eight, India has five and Pakistan four.

Brazil's eight come from four items. The data protection authority ANPD is consulting on its inspection and sanctions rules until 26 October, and the same item records the telecoms regulator Anatel's consultation on the upper 6 GHz auction and Paraguay's telecoms plan. Anatel has two further consultations on outdoor Wi-Fi and frequency coordination. The tax reform adds two more items: the Simples Nacional option window, which closes on 15 October with a regularisation date of 30 October, and integration tests for the split-payment platform from 15 October, with other payment providers able to register from 16 November. One of the eight, Paraguay's, belongs to a different country but sits in a Brazilian item, so Brazil proper has seven.

Every one of the 10 Latin American items carries a red note, and 9 of the 10 are dated. The Gulf is the mirror image: all four items are dated and two carry a red note. Africa is the least dated, with 6 of 10. Asia-Pacific and South Asia has 13 undated items out of 32, and six of those 13 are Pakistan's.

Eight consultations, and the shortest notice was seven days

Eight items carry closing dates for comments, ten dates in all, from Kenya, Qatar, Nigeria, Malaysia, China, South Africa, Brazil (two items) and, inside one of the Brazilian items, Paraguay. We measure notice from the day we published, not the day the regulator opened, so these are shorter than the full period the regulator allowed.

Counted that way, seven of the eight first close within 28 days of our item, and the median is 19 days. Kenya was the shortest: our item on the draft National Payment System Bill went up on 2 October and comments close on 9 October. The longest was Anatel's outdoor Wi-Fi pair, 66 days away on our arithmetic: the item gives 70 days from 25 September without naming the last day, and we have worked it out as 4 December.

Four of the eight involve a telecoms regulator. The rest cover payments, standards, data and AI: Malaysia's personal data department wants views on an AI and personal data framework by 23 October, and Nigeria's competition and consumer commission is consulting on draft sales promotion rules that would require businesses to register their use of AI in marketing, by 20 October. Both are rules that a software vendor selling marketing automation or AI tooling in those markets could still shape, and the window is short.

Deadlines that arrive a fortnight after the news

Thirty-three items carry a compliance, start or application date. Twenty-nine of them have an exact day; four give only a month or a loose period (Nigeria's number-recycling system, Kuwait's media law, Chile's open finance, Australia's reporting-period change) and we leave those out of the arithmetic.

Of the 29, two had already passed when we published (India's pension wage ceiling and Colombia's mobile cancellation rule), and 27 were still ahead. The median gap from our item to the first date was 18 days. Seventeen of the 27 fell within 30 days, 21 within 90, and only two were more than 180 days away: Rwanda's 3G switch-off on 30 June 2027 and Singapore's rule from 1 July 2028 that firms with more than 200 staff employ a certified HR professional.

So most of what we reported gave a fortnight's warning. Japan's higher residence permit fees applied from 1 October, with applications received by 30 September keeping the old rate; we published on 28 September. The UAE gave large businesses until 30 October to appoint an accredited e-invoicing provider, and 1 January 2027 to go live. A buyer who waits for a vendor to announce support for these changes will often find the date has gone.

The red note is not a sign that the regulator was missed

Forty of the 60 items carry a red note, our marker for an item published with something not yet verified. Across all 205 items, the figure is 104. We also checked which items link a government or regulator page among their sources: 44 of 60 do, and 16 do not.

The two do not line up the way you might expect. Of the 40 red-noted items, 28 do cite a regulator page, so the note does not mean we relied on press reports. It more often marks a missing piece, which we did not code item by item. Conversely, four items cite no regulator page and carry no red note: South Korea's penalty rule, India's audit-deadline extension (reproduced from a press release by a third-party site), Pakistan's retailer scheme and Kenya's emergency SMS order.

By country, Brazil, China and Pakistan lean on regulator pages (5 of 5, 5 of 5 and 8 of 10 items). South Korea's three items, Costa Rica, Mexico, Egypt, Kuwait and the Philippines, eight items in all, cite none. Those are the places where we would read the regulator's own gazette before acting on our summary.

The calendar from 7 October 2026 to 31 January 2027

This is every dated entry in the set that falls in the window, 35 in all: 10 closing dates for comments and 25 deadlines, start dates and application windows. October holds 23 of them, November 4, December 4 and January 4. The busiest day is 15 October, with six. Entries marked "about", or given only a month, rest on our arithmetic or a month given without a day. The Mexican item is a bill approved in committee, not yet law.

October 2026

• 9 October, Kenya: comments close on the draft National Payment System Bill (item).
• 9 October, China: applications open for the chip-industry VAT deduction list, closing 16 October (item).
• 12 October, Ukraine: production registration opens for the eExcise system, after testing moved to the Sandbox on 5 October (item).
• 15 October, Paraguay: comments close on the national telecoms plan 2026 to 2030 (item).
• 15 October, Pakistan: Tax Year 2026 income tax returns, as extended (item).
• 15 October, Pakistan: retailers' fixed-tax scheme returns, with monthly penalties after (item).
• 15 October, India: a 0.4% merchant fee starts on UPI payments above Rs 2,000 (item).
• 15 October, Brazil: the Simples Nacional option window for 2027 closes (item).
• 15 October, Brazil: integration tests start on the split-payment platform (item).
• 16 October, China: chip-industry VAT deduction applications close (same item as 9 October).
• 20 October, Qatar: comments close on the draft Universal Service Policy (item).
• 20 October, Nigeria: comments close on the draft sales promotion regulations (item).
• 20 October, Japan: My Number Card on Android launches (item).
• 21 October, India: tax audit report due for audited taxpayers, as extended (item).
• 23 October, Malaysia: comments close on the AI and personal data protection framework (item).
• About 23 October, Brazil: comments close on Anatel's upper 6 GHz auction notice, 45 days from its 8 September gazette notice on our arithmetic (same item as ANPD).
• 26 October, Brazil: comments close on the ANPD inspection and sanctions rules (same item).
• 29 October, China: comments close on 29 proposed national standards (item).
• 30 October, South Africa: comments close on redefining universal access and service (item).
• 30 October, Brazil: Simples Nacional regularisation date (same item as 15 October).
• 30 October, UAE: businesses with AED 50 million or more appoint an accredited e-invoicing provider (item).
• 30 October, UK: the duty to take all reasonable steps against sexual harassment begins (item).
• October, Nigeria: the telecoms regulator's number-recycling risk system goes live, no day given (item).

November to January

• 1 November, Chile: new tax-service rules for dispatch guides and transport invoices apply (item).
• 16 November, Brazil: other payment providers may register for the split-payment tests (same item as 15 October).
• 21 November, India: income tax return due for audited taxpayers, as extended (same item as 21 October).
• 30 November, Pakistan: applications close for the State Bank's second sandbox cohort (item).
• About 4 December, Brazil: Anatel's outdoor 6 GHz Wi-Fi and frequency-coordination consultations close, 70 days from 25 September on our arithmetic (item).
• 10 December, Australia: privacy policies must disclose automated decisions (item).
• 31 December, Philippines: covered taxpayers must issue e-invoices (item).
• December, Colombia: the mobile cancellation rule extends to fixed services, no day given (item).
• 1 January 2027, Costa Rica: large taxpayers keep their books under full IFRS (item).
• 1 January 2027, Nigeria: payments data must be hosted inside the country (item).
• 1 January 2027, UAE: businesses with AED 50 million or more must have e-invoicing in operation (same item as 30 October).
• 1 January 2027, Mexico: customs valuation reform, if the bill passes as approved in committee (item).

Just outside the window: Saudi Arabia's wave 25 of e-invoicing integration is due on 1 February 2027, Australia's federal legacy-technology stocktake by the end of March 2027, Rwanda's 3G switch-off on 30 June 2027.

Three checks to run on any rule before you plan around it

The data suggests a short routine, built from the cases above rather than from general advice.

First, find out whether the rule has a day or only an instrument number. Pakistan's faceless audit chapter, the PTA's 5G standards and the e-invoicing extension had numbers and no start. Put the instrument on a watch list and look for the notification that sets the date, because that is where the lead time is.

Second, check where notices will reach you. Pakistan's scrutiny notices and faceless-audit notices arrive only through the IRIS portal, and the faceless chapter makes the Digital Identification Number the mark of a genuine notice. An out-of-date email address or representative on the account is now a compliance risk, not an admin detail.

Third, treat a consultation as a short window. Our median notice was 19 days, and the shortest seven. A vendor that wants a say, on Malaysia's AI framework or Nigeria's AI-marketing registration, has to read the draft before it reaches a newsletter.

How we counted

We took the 205 news, business-news and HR-news items our desk published between 20 September and 6 October 2026 on this theme. We sorted each by hand into security advisory (59), vendor change (16), funding or grant call (41), takeover (10), rule from the EU or a US state or federal body (19) and rule, consultation or government programme outside the EU and US (60). The last group is the count. Items are counted by the jurisdiction they are about; a multi-country item is assigned to its main subject. Dates were read from each item and checked in a script; the day counts above are calendar days from the item's publication date.

Limits. This counts what our desk published, which depends on what we read, and a country with few items may simply have been read less. Pakistan's lead may partly reflect a regulator that publishes often and press that follows it closely. "Red note" means an item published with a note that something is not yet verified; we did not code the reason. "Cites a government or regulator page" means such a domain appears in the item's source list, not that every claim rests on it. Dates marked "about" are our arithmetic or a month without a day. Fifty-nine measures are distinct because one Chinese notice was published twice. Nothing here is a market total; it counts items, countries and dates.

Sources

Our items are linked inline above. Primary pages cited inside those items:

• Pakistan FBR statutory orders: https://www.fbr.gov.pk/Downloads/?id=17740&Type=SROs and https://download1.fbr.gov.pk/SROs/202693089244653SRO1666dated29-09-2026.pdf
• Pakistan FBR Sales Tax General Order 25: https://download1.fbr.gov.pk/Docs/20269281593856844STGO25of2026.pdf
• Pakistan PTA equipment regulations: https://www.pta.gov.pk/category/implementation-of-telecom-equipment-standards-regulations-1149711125-2026-09-09
• Pakistan National CERT Advisory 18: https://pkcert.gov.pk/advisory/26/18.pdf
• Kenya Central Bank draft payment system policy and bill: https://www.centralbank.go.ke/2026/09/21/draft-national-payment-system-policy-and-national-payment-system-bill-2026/
• Qatar CRA consultation: https://www.cra.gov.qa/en/press-releases/cra-launches-public-consultation-on-draft-universal-service-policy
• Nigeria FCCPC draft regulations: https://fccpc.gov.ng/draft-sales-promotion-amended-regulations-2026/
• Malaysia JPDP consultation paper: https://www.pdp.gov.my/ppdpv1/en/public-consultation-paper-no-1-2026-personal-data-protection-framework/
• Brazil ANPD consultation: https://www.gov.br/anpd/pt-br/assuntos/noticias/anpd-abre-audiencia-consulta-atualizacao-regulamento-fiscalizacao
• Brazil Anatel consultations: https://www.gov.br/anatel/pt-br/assuntos/noticias/anatel-abre-consultas-para-regulamentar-wi-fi-outdoor-na-faixa-de-6-ghz
• Brazil Receita Federal on Simples Nacional: https://www.gov.br/receitafederal/pt-br/assuntos/noticias/2026/setembro/simples-nacional-2027-entenda-os-novos-prazos-e-faca-sua-escolha-com-consciencia-e-tranquilidade
• China MIIT chip VAT notice: http://www.miit.gov.cn/zwgk/zcwj/wjfb/tz/art/2026/art_7d2e760b4be94217b8f55caec840b30d.html
• UAE Federal Tax Authority: https://tax.gov.ae/en/media.centre/news/federal.tax.authority.organises.joint.awareness.meeting.for.accredited.service.providers.and.persons.subject.to.the.einvoicing.system.aspx
• Australia OAIC guidance: https://www.oaic.gov.au/news/media-centre/new-resources-on-transparency-for-use-of-ai-and-automated-decision-making
• Japan Digital Agency: https://services.digital.go.jp/mynumbercard-android/news/fec690c52f9ffeb35d30f/
• Ukraine Ministry of Digital Transformation: https://thedigital.gov.ua/news/business/u-sandbox-rozshyryly-mozlyvosti-dlia-testuvannia-eaktsyzu
• Saudi ZATCA wave 25: https://zatca.gov.sa/en/MediaCenter/News/Pages/Wave25-E-invoicing.aspx
• UK Department for Business and Trade timeline: https://www.gov.uk/government/publications/implementing-the-plan-to-make-work-pay-and-employment-rights-act/plan-to-make-work-pay-and-employment-rights-act-timeline-update