Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 21 of 214 developments
ADTP REGULATORY BRIEF
FTC rescinds 2021 Policy Statement on Breaches by Health Apps and Connected Devices
The FTC's withdrawal of this guidance removes a previously stated compliance expectation for health app and IoT device developers.
ADTP REGULATORY BRIEF
Delaware Governor signs HB 380, amending the DPDPA effective Jan 1 2027
The amendment significantly strengthens privacy protections and expands data‑controller obligations in Delaware.
ADTP REGULATORY BRIEF
Data Protection Commission issues €645,000 fine and compliance orders against HSE
The enforcement action underscores GDPR accountability for health data custodians in Ireland.
ADTP REGULATORY BRIEF
AEPD to host data‑protection session at XX Jornadas STIC on 24 Nov 2026
The AEPD’s participation highlights the growing relevance of privacy and data‑protection in AI‑driven cybersecurity discussions.
ADTP REGULATORY BRIEF
Meta to implement age‑verification framework under $17 B settlement with 52 U.S. states
The settlement imposes extensive age‑verification and data‑retention obligations on Meta, affecting privacy and surveillance of all users.
ADTP REGULATORY BRIEF
EFF guide on doxxing incident response and digital footprint protection
Provides practical privacy and security measures to help victims mitigate and respond to doxxing campaigns.
ADTP REGULATORY BRIEF
EFF and The Trevor Project advise LGBTQ+ individuals to revise shared information for online safety
The guidance helps LGBTQ+ individuals reduce exposure to doxxing and outing risks by improving personal data control and security practices.
ADTP REGULATORY BRIEF
Connecticut AG settles with TaxAct over taxpayer data disclosures via tracking tech
The settlement underscores heightened regulatory scrutiny of third‑party tracking and the handling of financial personal data.
ADTP REGULATORY BRIEF
EFF says Meta settlement expands data collection and limits youth rights
The settlement broadens Meta's data collection and surveillance, raising significant privacy and child‑safety concerns.
ADTP REGULATORY BRIEF
French Constitutional Council strikes down law banning social media for under‑15s
The ruling blocks a privacy‑invasive age‑verification regime and sets a precedent for similar restrictions in Europe.
ADTP REGULATORY BRIEF
PDPC publishes Advisory Guidelines on Personal Data in Generative AI at Singapore Data Festival
The new PDPC guidance updates consent and notification requirements for AI, shaping how organizations handle personal and biometric data in Singapore.
ADTP REGULATORY BRIEF
EFF and civil groups urge Nottinghamshire Police to halt live facial recognition rollout
The call highlights privacy and civil‑rights risks of deploying live facial recognition in public spaces, especially for minors.
ADTP REGULATORY BRIEF
Tech firms privately resist ICE subpoenas seeking user data
Corporate resistance to ICE subpoenas highlights the role of tech firms in protecting user privacy and First Amendment rights.
ADTP REGULATORY BRIEF
US federal age‑verification proposals KIDS Act and KOSA face privacy criticism over ZKP use
Proposed age‑verification laws in the US and EU are criticized for privacy and security risks associated with ZKP‑based systems.
ADTP REGULATORY BRIEF
White House issues NSPM to enable private-sector offensive cyber operations against transnational cybercrime
The NSPM expands private‑sector involvement in offensive cyber operations, creating a federally supervised program to target transnational cybercrime.
ADTP REGULATORY BRIEF
Flock Safety announces optional 7‑day ALPR data retention and other reforms
The reforms aim to limit how long police can retain vehicle location data, addressing privacy concerns around mass surveillance.
ADTP REGULATORY BRIEF
New Jersey enacts Age-Appropriate Design Code (A4015) signed by Governor Sherrill
The NJAADC introduces comprehensive safety‑by‑design rules for minors online, setting a new national benchmark for age‑appropriate design.
ADTP REGULATORY BRIEF
Future of Privacy Forum releases updated AI risk assessment framework and best practices for hiring
The updated best practices give organizations concrete guidance to responsibly deploy AI in hiring, mitigating legal and ethical risks.
ADTP REGULATORY BRIEF
Senate Commerce Committee to vote on four privacy‑invasive bills (KOSA, SCREEN Act, Youth AI Privacy Act, CHATBOT Act)
The proposed bills could impose age‑gating and expanded data collection, affecting privacy and free speech for all internet users.
ADTP REGULATORY BRIEF
Ninth Circuit rules Perplexity AI’s Comet browser not liable under CFAA
The ruling limits CFAA liability for AI‑driven web tools, clarifying that developers are not criminally responsible for user‑initiated access.
ADTP REGULATORY BRIEF
ENISA releases NIS360 report showing improved cybersecurity maturity of EU critical sectors
The report tracks implementation of the NIS2 Directive and helps policymakers prioritize resources to boost cyber resilience across the EU.
Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.