Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 24 of 214 developments
ADTP REGULATORY BRIEF
Future of Privacy Forum urges standardized privacy benchmarks for frontier AI systems
Standardized privacy benchmarks would give concrete, comparable metrics for AI developers and deployers, supporting better privacy protection and regulatory oversight.
ADTP REGULATORY BRIEF
EPIC comments on Vermont Attorney General's proposed Age-Appropriate Design Code rules
The comments influence how Vermont will enforce its children‑safety law, shaping privacy‑friendly age verification and design standards.
ADTP REGULATORY BRIEF
EPIC analysis links pixel‑tracking litigation under ECPA and CIPA to upcoming Supreme Court VPPA case
The piece provides practitioners with case‑law guidance on how pixel‑tracking claims are being evaluated under federal and state privacy statutes ahead of the Salazar v. Paramount Supreme Court review.
ADTP REGULATORY BRIEF
EPIC files amicus brief challenging Spirit Airlines' bankruptcy sale of employee data to Google
The filing highlights privacy risks of selling employee data for AI training, urging stronger safeguards in bankruptcy asset sales.
ADTP REGULATORY BRIEF
Rep. Darrell Issa introduces the American Copyright Protection Act (H.R. 10364) targeting VPNs for site‑blocking
The bill would extend site‑blocking orders to VPN services, raising significant privacy and security concerns.
ADTP REGULATORY BRIEF
Meta’s Muse AI Agent raises privacy, security, and child safety concerns amid past FTC consent decree
The report highlights significant privacy and safety risks of Meta’s new AI agent, underscoring ongoing concerns about the company’s data practices.
ADTP REGULATORY BRIEF
Federal judge rejects motion to dismiss social media surveillance lawsuit against Trump administration
The ruling lets unions challenge a government AI‑driven social media surveillance program that threatens free speech and privacy of noncitizens.
ADTP REGULATORY BRIEF
Ecuador orders security expert Ola Bini deported and bans return for 10 years
The case highlights the vulnerability of security researchers to arbitrary state actions, raising concerns for digital rights and cybersecurity practitioners.
ADTP REGULATORY BRIEF
California Governor signs three AI employment laws
The new statutes impose AI governance, transparency, and privacy obligations on California employers.
ADTP REGULATORY BRIEF
EDPB adopts Guidelines 04/2026 on GDPR fines and corrective powers for public consultation
The guidance clarifies how EU data protection authorities may impose fines and corrective measures, impacting GDPR enforcement.
ADTP REGULATORY BRIEF
Commission seeks feedback on proposed EU Kids Act
The consultation will shape EU‑wide rules on child online safety, privacy and age verification.
ADTP REGULATORY BRIEF
CNIL explains when data‑breach victims can claim compensation under the GDPR
Understanding the CNIL’s guidance helps data‑controllers and processors assess liability and prepare for potential court‑ordered damages.
ADTP REGULATORY BRIEF
DOI establishes new matching program under Privacy Act of 1974
The program expands federal data sharing under the Privacy Act, impacting how personal and financial records are matched and used for payment integrity.
ADTP REGULATORY BRIEF
EFF and ACLU demand records from Marin County Sheriff over illegal ALPR data sharing
The action highlights ongoing non‑compliance with California privacy statutes governing ALPR data and pressures the agency to audit and halt unlawful data sharing.
ADTP REGULATORY BRIEF
Court order forces Google to allow third‑party app stores on Play Store
The ruling opens Google Play to competing app stores, creating new privacy and security options for Android users.
ADTP REGULATORY BRIEF
Federal judge blocks Utah's anti-VPN age‑verification law (SB 73) with preliminary injunction
The ruling stops Utah's attempt to force worldwide VPN blocking for age‑verification, preserving user privacy and highlighting technical limits of such legislation.
ADTP REGULATORY BRIEF
EFF launches Opt Out October campaign urging users to leave tech giants for privacy
The campaign highlights consumer-driven privacy actions as a practical alternative to regulatory solutions.
ADTP REGULATORY BRIEF
CNIL to examine draft decree on student violence questionnaire and automated vehicle sound monitoring
The agenda signals upcoming French regulatory scrutiny of new personal data processing tools in education and transport sectors.
ADTP REGULATORY BRIEF
CNIL and Cybermalveillance.gouv.fr release guide for individuals on personal data breach response
The new CNIL guide equips citizens with clear steps to mitigate risks after a personal data breach, strengthening individual data‑privacy protection.
ADTP REGULATORY BRIEF
European Commission sends formal notice to Bulgaria for non‑compliance with the Digital Services Act
The action highlights EU enforcement of the Digital Services Act and its impact on national enforcement frameworks and platform liability.
ADTP REGULATORY BRIEF
EU Commission proposes KIDS Act to ban social‑media access for under‑13s and set minimum account age of 15
The KIDS Act would impose age‑based restrictions and safety‑by‑design obligations on online platforms, directly affecting children’s privacy and online safety in the EU.
ADTP REGULATORY BRIEF
HUD announces intent to establish eVMS system of records under the Privacy Act
HUD’s proposed eVMS system will centralize personal and financial data for housing assistance, impacting privacy and data‑handling practices.
ADTP REGULATORY BRIEF
Federal Register limits automated access; CAPTCHA required for flagged requests
The notice implements security measures to curb automated scraping of federal documents.
ADTP REGULATORY BRIEF
Federal Register proposes limiting automated scraping, requiring API use and CAPTCHAs
The proposal impacts developers by mandating API‑only programmatic access and adding CAPTCHA verification to protect site security.
Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.