Regulatory Watch

New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.

14Last 24 hours
36Last 7 days
21High or critical

Showing 22 of 214 developments

Settlement ADTP BRIEF 🤝

ADTP REGULATORY BRIEF

Settlement codifies Meta's surveillance practices into law as states move to curb ALPR use

settled US

The piece highlights emerging legal and policy actions that affect privacy and surveillance technologies in the United States.

Cybersecurity Enforcement
Moderate 41 · Sep 16, 2026 · EFF updates
Read the full brief →
Settlement ADTP BRIEF 🤝

ADTP REGULATORY BRIEF

Meta settles lawsuit with 52 US states imposing age‑gating and time limits on under‑18 users

settled US

The settlement imposes new restrictions on minors that may curb youth online organizing.

Children Enforcement
Low 39 · Sep 16, 2026 · EFF updates
Read the full brief →
Enforcement Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

DOJ partially confirms DHS whistleblower allegations on SAVE voter eligibility program

announced US

The action raises significant privacy and constitutional concerns about government use of personal data for voter eligibility.

Enforcement Privacy
Low 31 · Sep 15, 2026 · EPIC
Read the full brief →
Enforcement Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

EPIC warns sale of Google’s Spirit Air AI worker data lacks private right of action

pending US

The lack of a private right of action could hinder enforcement against the sale of employee data for AI training.

AI governance Data governance
Low 37 · Sep 15, 2026 · EPIC
Read the full brief →
Investigation ADTP BRIEF 🔍

ADTP REGULATORY BRIEF

Police misuse ALPR data with frivolous reasons, EFF finds

announced US

The report reveals pervasive, undocumented ALPR searches that threaten privacy and civil liberties.

Cybersecurity Enforcement
Moderate 42 · Sep 14, 2026 · EFF updates
Read the full brief →
Enforcement Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

Cameras capture alleged vandal in Morristown SafetyStick pilot

announced US-NJ

The incident highlights privacy concerns around pilot surveillance deployments and the need for community oversight.

Cybersecurity Enforcement
Low 28 · Sep 11, 2026 · EPIC
Read the full brief →
Fine ADTP BRIEF 💰

ADTP REGULATORY BRIEF

Dutch DPA fines Uber €824,990,000 for automated decisions affecting drivers

announced EU-NL

The fine underscores strict GDPR enforcement of automated decision‑making provisions.

AI governance Enforcement GDPR
Moderate 56 · Sep 10, 2026 · Hunton Privacy & Cybersecurity Law Blog
Read the full brief →
Enforcement Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

noyb to file injunction against SCHUFA over shadow database

announced EU-DE

The planned injunction highlights enforcement of EU data‑protection rights against a major credit reference agency.

Data governance Enforcement
Low 34 · Sep 10, 2026 · noyb
Read the full brief →
Enforcement Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

AEPD opens investigation into Ministry of Interior report listing journalists and political leanings

announced EU-ES

The investigation could impact how government bodies handle journalists' personal and political data under GDPR.

Cybersecurity Data governance
Moderate 44 · Sep 9, 2026 · AEPD (Spain) press releases
Read the full brief →
Enforcement Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

Irish DPC welcomes court conviction of Brown Thomas for ePrivacy breaches

decided EU-IE

The enforcement action underscores the consequences of non‑compliance with ePrivacy rules for electronic marketing in Ireland.

Data governance Enforcement ePrivacy Directive
Moderate 49 · Sep 7, 2026 · Data Protection Commission (Ireland)
Read the full brief →
Enforcement Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

EU Commission designates ChatGPT as VLOSE and Reddit, Roblox as VLOPs under DSA

announced EU

The designations subject the three platforms to heightened DSA compliance requirements, impacting their data handling and AI governance practices.

Enforcement Privacy DSA
Low 38 · Sep 4, 2026 · Hunton Privacy & Cybersecurity Law Blog
Read the full brief →
Enforcement Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

Data Protection Commission issues €645,000 fine and compliance orders against HSE

decided EU-IE

The enforcement action underscores GDPR accountability for health data custodians in Ireland.

Cybersecurity Data governance GDPR
High 62 · Sep 3, 2026 · European Data Protection Board news
Read the full brief →
Dpa Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

AEPD to host data‑protection session at XX Jornadas STIC on 24 Nov 2026

announced EU-ES

The AEPD’s participation highlights the growing relevance of privacy and data‑protection in AI‑driven cybersecurity discussions.

AI governance Cybersecurity
Moderate 50 · Sep 2, 2026 · AEPD (Spain) press releases
Read the full brief →
Settlement ADTP BRIEF 🤝

ADTP REGULATORY BRIEF

Meta to implement age‑verification framework under $17 B settlement with 52 U.S. states

announced US

The settlement imposes extensive age‑verification and data‑retention obligations on Meta, affecting privacy and surveillance of all users.

Children Cybersecurity COPPA
Moderate 50 · Sep 1, 2026 · EFF updates
Read the full brief →
Settlement ADTP BRIEF 🤝

ADTP REGULATORY BRIEF

Connecticut AG settles with TaxAct over taxpayer data disclosures via tracking tech

settled US-CT

The settlement underscores heightened regulatory scrutiny of third‑party tracking and the handling of financial personal data.

Cybersecurity Enforcement
Moderate 44 · Aug 27, 2026 · Covington Inside Privacy
Read the full brief →
Settlement ADTP BRIEF 🤝

ADTP REGULATORY BRIEF

EFF says Meta settlement expands data collection and limits youth rights

settled US

The settlement broadens Meta's data collection and surveillance, raising significant privacy and child‑safety concerns.

Children Cybersecurity
Moderate 43 · Aug 26, 2026 · EFF updates
Read the full brief →
Enforcement Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

noyb sends cease‑and‑desist letter to SCHUFA over alleged ‘shadow database’ GDPR violations

announced EU-DE

The action targets a potential GDPR breach affecting up to 69 million Germans and could lead to a large‑scale class action.

AI governance Data governance GDPR
Low 39 · Aug 26, 2026 · noyb
Read the full brief →
Enforcement Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

EFF and civil groups urge Nottinghamshire Police to halt live facial recognition rollout

announced EU-GB

The call highlights privacy and civil‑rights risks of deploying live facial recognition in public spaces, especially for minors.

Biometric Children
Low 37 · Aug 21, 2026 · EFF updates
Read the full brief →
Enforcement Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

Tech firms privately resist ICE subpoenas seeking user data

announced US

Corporate resistance to ICE subpoenas highlights the role of tech firms in protecting user privacy and First Amendment rights.

Cybersecurity Data governance
Low 35 · Aug 19, 2026 · EFF updates
Read the full brief →
Investigation ADTP BRIEF 🔍

ADTP REGULATORY BRIEF

EFF report finds mobile ad libraries may leak user location data

announced WORLD

The findings raise privacy concerns about location tracking by ad SDKs and underscore the need for stronger safeguards.

Enforcement Location
Low 30 · Aug 19, 2026 · EFF updates
Read the full brief →
Enforcement Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

EU Commission begins enforcing AI Act and new transparency rules on 2 August 2026

in effect EU

The enforcement introduces mandatory disclosure obligations for AI systems to curb deception and give users clearer information.

AI governance Enforcement EU AI Act
Moderate 50 · Aug 2, 2026 · European Commission digital strategy news
Read the full brief →
Enforcement Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

noyb files GDPR complaint against dict.cc over 1,741‑partner consent banner

filed EU-AT

The case highlights how mass‑consent banners can breach GDPR’s informed‑consent rule.

Data governance Enforcement GDPR
Low 37 · Jul 30, 2026 · noyb
Read the full brief →
← Previous Page 2 of 3 Next →

Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.