Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 13 of 214 developments
ADTP REGULATORY BRIEF
California Legislature passes SB 690 to limit pen register lawsuits under CIPA
The bill removes private rights of action for website pen register claims, potentially affecting many pending lawsuits.
ADTP REGULATORY BRIEF
Police misuse ALPR data with frivolous reasons, EFF finds
The report reveals pervasive, undocumented ALPR searches that threaten privacy and civil liberties.
ADTP REGULATORY BRIEF
EU Cyber Resilience Act reporting obligations take effect for manufacturers
The EU Cyber Resilience Act now imposes mandatory incident reporting duties on manufacturers, raising compliance requirements for product security.
ADTP REGULATORY BRIEF
California AB 1709, a ban on social media for under‑16, signed into law
The law restricts minors' access to social media and raises privacy and free‑speech concerns.
ADTP REGULATORY BRIEF
Dutch DPA fines Uber €824,990,000 for automated decisions affecting drivers
The fine underscores strict GDPR enforcement of automated decision‑making provisions.
ADTP REGULATORY BRIEF
CNIL guidance on data‑protection obligations under the electronic invoicing reform effective 1 Sept 2026
Practitioners must align invoicing processes with GDPR, ISO‑27001, and eIDAS‑level authentication to avoid breaches and ensure lawful handling of personal data.
ADTP REGULATORY BRIEF
CNIL to examine draft deliberation on finance bill 2027 provisions for online platform content collection for tax purposes
The CNIL's review could shape how personal data from online platforms is collected for fiscal purposes, impacting privacy and surveillance practices.
ADTP REGULATORY BRIEF
CNIL releases Volume 2 of “L’Agence Privacy” to educate adolescents on cybercrime and data privacy
The publication provides a new pedagogical tool to improve privacy awareness among minors.
ADTP REGULATORY BRIEF
EU Commission proposes Article 88b for automated privacy signals in Digital Omnibus
The proposal could simplify consent by introducing automated privacy signals, reducing reliance on cookie banners across the EU.
ADTP REGULATORY BRIEF
AEPD opens investigation into Ministry of Interior report listing journalists and political leanings
The investigation could impact how government bodies handle journalists' personal and political data under GDPR.
ADTP REGULATORY BRIEF
FTC rescinds 2021 Policy Statement on Breaches by Health Apps and Connected Devices
The FTC's withdrawal of this guidance removes a previously stated compliance expectation for health app and IoT device developers.
ADTP REGULATORY BRIEF
EFF files FOIA lawsuit against CMS over AI-driven Medicare WISeR program
The case raises critical AI‑governance and health‑care transparency issues for Medicare beneficiaries.
ADTP REGULATORY BRIEF
Irish DPC welcomes court conviction of Brown Thomas for ePrivacy breaches
The enforcement action underscores the consequences of non‑compliance with ePrivacy rules for electronic marketing in Ireland.
Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.