Regulatory Watch

New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.

14Last 24 hours
36Last 7 days
21High or critical

Showing 7 of 214 developments

Dpa Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

Italian DPA fines IQVIA €7 million for unlawful processing of patients’ health data

decided EU-IT

The fine highlights enforcement of GDPR obligations for health data controllers and underscores the need for proper legal bases, transparency, and impact assessments.

Cybersecurity Data governance GDPR
High 72 · Oct 9, 2026 · European Data Protection Board news
Read the full brief →
Fine ADTP BRIEF 💰

ADTP REGULATORY BRIEF

Italian DPA fines Emirates €180,000 for health data infringements

decided EU-IT

The enforcement highlights GDPR obligations for clear information and proportionate retention of health data in the aviation sector.

Data governance Enforcement GDPR
High 66 · Oct 9, 2026 · European Data Protection Board news
Read the full brief →
Fine ADTP BRIEF 💰

ADTP REGULATORY BRIEF

Italian DPA fines BBVA €5.508 million for ignoring customer objection to direct marketing

in effect EU-IT

The fine underscores the obligation of controllers to promptly respect data subject objections and implement effective technical measures.

Data governance Enforcement GDPR
High 63 · Oct 9, 2026 · European Data Protection Board news
Read the full brief →
Fine ADTP BRIEF 💰

ADTP REGULATORY BRIEF

Dutch DPA fines Uber €824.99 million for unlawful automated decision‑making

published EU-NL

The fine demonstrates robust GDPR enforcement on automated decision‑making in the gig‑economy.

AI governance Enforcement GDPR
High 72 · Oct 8, 2026 · European Data Protection Board news
Read the full brief →
Dpa Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

Hellenic DPA fines Ministry and EETAA for data breach

decided EU-GR

The enforcement action highlights the liability of both controllers and processors for inadequate security and non‑compliant processing agreements under the GDPR.

Cybersecurity Enforcement GDPR
High 62 · Oct 8, 2026 · European Data Protection Board news
Read the full brief →
Enforcement Action ADTP BRIEF ⚖️

ADTP REGULATORY BRIEF

AEPD issues warnings to two Spanish municipalities over AI‑enabled video surveillance projects

published EU-ES

The action highlights the need for data‑protection‑by‑design and proportionality when deploying AI‑driven video surveillance in the public sector.

AI governance Biometric
High 66 · Oct 6, 2026 · AEPD (Spain) press releases
Read the full brief →
Regulatory Guidance ADTP BRIEF 🧭

ADTP REGULATORY BRIEF

CNIL and Cybermalveillance.gouv.fr release guide for individuals on personal data breach response

published EU-FR

The new CNIL guide equips citizens with clear steps to mitigate risks after a personal data breach, strengthening individual data‑privacy protection.

Cybersecurity Data governance
High 63 · Oct 1, 2026 · CNIL (France)
Read the full brief →
Page 1 of 4 Next →

Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.