Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 24 of 213 developments
ADTP REGULATORY BRIEF
Future of Privacy Forum submits comments on Vermont Age-Appropriate Design Code rulemaking
The comments aim to shape Vermont’s upcoming rules on minors’ online privacy, influencing how businesses must design and operate digital services for children.
ADTP REGULATORY BRIEF
CNIL examines draft deliberation authorizing BIG DATA SANTE to process personal data for anonymized medical research (ONCOVAL)
If approved, the authorization would enable a French company to process health‑related personal data for research, shaping data‑privacy practices in the health sector.
ADTP REGULATORY BRIEF
Dutch DPA fines Uber €824.99 million for unlawful automated decision‑making
The fine demonstrates robust GDPR enforcement on automated decision‑making in the gig‑economy.
ADTP REGULATORY BRIEF
AEPD publishes second issue of scientific journal “Privacy, Innovation and Technology”
The publication provides expert analysis of GDPR challenges and AI governance, helping practitioners anticipate regulatory impacts of emerging technologies.
ADTP REGULATORY BRIEF
California Governor signs over 20 AI‑related bills into law
The new statutes impose broad AI transparency and safety obligations on providers, platforms, attorneys, and healthcare entities in California.
ADTP REGULATORY BRIEF
Commission registers European Citizens' Initiative for sovereign European AI domains
The registration signals a potential push for new EU AI governance measures driven by citizen input.
ADTP REGULATORY BRIEF
AEPD issues warnings to two Spanish municipalities over AI‑enabled video surveillance projects
The action highlights the need for data‑protection‑by‑design and proportionality when deploying AI‑driven video surveillance in the public sector.
ADTP REGULATORY BRIEF
Future of Privacy Forum urges standardized privacy benchmarks for frontier AI systems
Standardized privacy benchmarks would give concrete, comparable metrics for AI developers and deployers, supporting better privacy protection and regulatory oversight.
ADTP REGULATORY BRIEF
EPIC files amicus brief challenging Spirit Airlines' bankruptcy sale of employee data to Google
The filing highlights privacy risks of selling employee data for AI training, urging stronger safeguards in bankruptcy asset sales.
ADTP REGULATORY BRIEF
Meta’s Muse AI Agent raises privacy, security, and child safety concerns amid past FTC consent decree
The report highlights significant privacy and safety risks of Meta’s new AI agent, underscoring ongoing concerns about the company’s data practices.
ADTP REGULATORY BRIEF
Federal judge rejects motion to dismiss social media surveillance lawsuit against Trump administration
The ruling lets unions challenge a government AI‑driven social media surveillance program that threatens free speech and privacy of noncitizens.
ADTP REGULATORY BRIEF
California Governor signs three AI employment laws
The new statutes impose AI governance, transparency, and privacy obligations on California employers.
ADTP REGULATORY BRIEF
CNIL to examine draft decree on student violence questionnaire and automated vehicle sound monitoring
The agenda signals upcoming French regulatory scrutiny of new personal data processing tools in education and transport sectors.
ADTP REGULATORY BRIEF
EU Commission proposes KIDS Act to ban social‑media access for under‑13s and set minimum account age of 15
The KIDS Act would impose age‑based restrictions and safety‑by‑design obligations on online platforms, directly affecting children’s privacy and online safety in the EU.
ADTP REGULATORY BRIEF
EFF discusses privacy implications of Apple Siri AI features in iOS 27
Understanding Siri’s data handling helps users protect privacy as AI features expand on mobile devices.
ADTP REGULATORY BRIEF
Commerce Department seeks input on digitizing and modernizing the National Technical Reports Library
The RFI could shape how U.S. government technical data become available for AI training and research, impacting data‑governance and AI‑governance considerations.
ADTP REGULATORY BRIEF
U.S. lawmakers introduce AI AGENT Act and California SB 1106 defining AI agents
The proposals mark the first U.S. legislative attempts to define and regulate AI agents, shaping future AI governance.
ADTP REGULATORY BRIEF
EPIC and consumer groups urge FTC to ban surveillance pricing, calling disclosure insufficient
The filing pushes the FTC to consider banning personalized pricing, potentially expanding consumer protection against data-driven price discrimination.
ADTP REGULATORY BRIEF
CNIL to host AIR 2026 event on political communication ethics and election manipulation on 16 Nov 2026
The event highlights how existing privacy rules (RGPD, Loi Informatique et Libertés, 2025 political‑advertising regulation) apply to election‑related data practices and the growing threat of AI‑driven manipulation.
ADTP REGULATORY BRIEF
Texas AG Paxton launches investigation into AI data center development on land originally conveyed for park use
The investigation could halt a private AI data center project that may violate a longstanding public‑park trust, highlighting enforcement of land‑use restrictions in emerging AI infrastructure.
ADTP REGULATORY BRIEF
California Privacy Protection Agency adopts multiple regulations including Conflict of Interest Code Amendments and Data Broker Registration Fee
Adopted CPPA regulations expand enforcement tools for the CCPA and Delete Act, affecting data brokers and other entities.
ADTP REGULATORY BRIEF
Data Protection Commission releases AI Insights Report covering 2021‑2025 supervision
The DPC’s AI Insights Report offers regulators and controllers practical guidance on compliant AI development and deployment.
ADTP REGULATORY BRIEF
ENISA launches podcast series on Frontier AI and publishes guidance note on cybersecurity in the Frontier AI era
The launch and accompanying guidance highlight ENISA’s effort to inform stakeholders about AI‑related cybersecurity risks and recommended actions.
ADTP REGULATORY BRIEF
EU Commission releases two reports on generative AI and digital education impacts
The reports highlight privacy, bias and overreliance risks of AI in education, underscoring the need for guidance and professional development for teachers.
Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.