Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 24 of 214 developments
ADTP REGULATORY BRIEF
California Governor signs AB 2071 and AB 2298 to add digital literacy and cybersecurity to school curricula
The new laws mandate digital literacy and cybersecurity instruction for students, addressing online safety and privacy.
ADTP REGULATORY BRIEF
Dutch DPA fines Uber €824,990,000 for automated decisions affecting drivers
The fine underscores strict GDPR enforcement of automated decision‑making provisions.
ADTP REGULATORY BRIEF
CNIL releases Volume 2 of “L’Agence Privacy” to educate adolescents on cybercrime and data privacy
The publication provides a new pedagogical tool to improve privacy awareness among minors.
ADTP REGULATORY BRIEF
EFF files FOIA lawsuit against CMS over AI-driven Medicare WISeR program
The case raises critical AI‑governance and health‑care transparency issues for Medicare beneficiaries.
ADTP REGULATORY BRIEF
SEC Investor Advisory Committee to Host Sept. 10 Meeting on AI Technologies and NMS Rules
The SEC is convening a meeting to examine AI’s impact on market integrity, signaling potential future regulatory focus.
ADTP REGULATORY BRIEF
Delaware Governor signs HB 380, amending the DPDPA effective Jan 1 2027
The amendment significantly strengthens privacy protections and expands data‑controller obligations in Delaware.
ADTP REGULATORY BRIEF
CNIL agenda includes review of draft decrees on automated personal data processing and authorizations for health data studies
The agenda signals upcoming CNIL scrutiny of new automated data processing initiatives affecting law‑enforcement and health research.
ADTP REGULATORY BRIEF
AEPD to host data‑protection session at XX Jornadas STIC on 24 Nov 2026
The AEPD’s participation highlights the growing relevance of privacy and data‑protection in AI‑driven cybersecurity discussions.
ADTP REGULATORY BRIEF
Federal judge finds DoD retaliation against Anthropic unlawful under First Amendment
The ruling underscores the legal limits on government retaliation against AI companies that refuse to support mass surveillance, impacting privacy and AI governance.
ADTP REGULATORY BRIEF
Austrian Supreme Court rules CRIF’s use of address‑publisher data for credit scoring violates GDPR purpose limitation
The decision clarifies GDPR purpose‑limitation obligations for credit scoring, paving the way for a consumer class action in Austria.
ADTP REGULATORY BRIEF
California Assembly Bill 1709 passed, bans social media recommendation features for users under 16
The bill could force platforms to collect more personal data from minors while restricting their access to online speech.
ADTP REGULATORY BRIEF
EFF and allies recommend new privacy safeguards to protect Brazil's electoral integrity
The recommendations aim to use privacy law enforcement to reduce manipulative political content and protect democratic processes.
ADTP REGULATORY BRIEF
noyb sends cease‑and‑desist letter to SCHUFA over alleged ‘shadow database’ GDPR violations
The action targets a potential GDPR breach affecting up to 69 million Germans and could lead to a large‑scale class action.
ADTP REGULATORY BRIEF
PDPC publishes Advisory Guidelines on Personal Data in Generative AI at Singapore Data Festival
The new PDPC guidance updates consent and notification requirements for AI, shaping how organizations handle personal and biometric data in Singapore.
ADTP REGULATORY BRIEF
Colorado governor signs SB 26-189, revising AI Act to regulate ADMT in employment
The law creates new notice, disclosure, and remediation obligations for employers using AI in hiring, promotion, and termination decisions.
ADTP REGULATORY BRIEF
EFF states all images are human-generated, with rare AI exceptions
The policy clarifies EFF's stance on AI‑generated imagery, emphasizing human authorship to avoid copyright issues and maintain authenticity.
ADTP REGULATORY BRIEF
EU proposes Cloud and AI Development Act (CADA) to boost AI and cloud sovereignty
CADA marks a shift toward AI‑promotion legislation in the EU, introducing positive obligations for Member States to foster AI innovation and cloud infrastructure.
ADTP REGULATORY BRIEF
Future of Privacy Forum releases updated AI risk assessment framework and best practices for hiring
The updated best practices give organizations concrete guidance to responsibly deploy AI in hiring, mitigating legal and ethical risks.
ADTP REGULATORY BRIEF
Senator Mark Kelly introduces Senior Chatbot Protection Act
The bill aims to protect seniors' privacy and autonomy as AI chatbots become more prevalent in their daily lives.
ADTP REGULATORY BRIEF
Senate Commerce Committee to vote on four privacy‑invasive bills (KOSA, SCREEN Act, Youth AI Privacy Act, CHATBOT Act)
The proposed bills could impose age‑gating and expanded data collection, affecting privacy and free speech for all internet users.
ADTP REGULATORY BRIEF
Ninth Circuit rules Perplexity AI’s Comet browser not liable under CFAA
The ruling limits CFAA liability for AI‑driven web tools, clarifying that developers are not criminally responsible for user‑initiated access.
ADTP REGULATORY BRIEF
EU Commission begins enforcing AI Act and new transparency rules on 2 August 2026
The enforcement introduces mandatory disclosure obligations for AI systems to curb deception and give users clearer information.
ADTP REGULATORY BRIEF
AEPD Privacy Lab invites entities to submit projects, research and initiatives
The announcement expands the visibility of privacy‑related work and encourages collaboration across academia, public bodies and industry.
ADTP REGULATORY BRIEF
AEPD announces 2026 Data Protection Awards to recognize privacy promotion
The call highlights the agency’s effort to foster privacy awareness and best‑practice innovation across sectors and vulnerable populations.
Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.