Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 24 of 214 developments
ADTP REGULATORY BRIEF
Ninth Circuit rejects expansive DMCA copyright claim over AI‑generated code
The ruling curtails attempts to broaden DMCA liability for AI‑generated code, preserving lawful AI development and remix culture.
ADTP REGULATORY BRIEF
Supreme Court ruling allows Arizona mail ballots to proceed as usual
The decision impacts voting procedures and raises privacy concerns over potential bulk data collection by DHS.
ADTP REGULATORY BRIEF
EPIC report: Data brokers sell personal data to Disney, GM, insurers and banks
The piece underscores the privacy risks of an underregulated data‑broker market that trades personal data without meaningful consent.
ADTP REGULATORY BRIEF
EPIC report finds companies hinder personal data access under state privacy laws
The report highlights enforcement challenges in state privacy regimes as companies resist data‑access requests.
ADTP REGULATORY BRIEF
EFF appoints former White House official Alexander Macgillivray to Board of Directors
Macgillivray's AI policy background may shape EFF's future work on AI governance and privacy rights.
ADTP REGULATORY BRIEF
Settlement codifies Meta's surveillance practices into law as states move to curb ALPR use
The piece highlights emerging legal and policy actions that affect privacy and surveillance technologies in the United States.
ADTP REGULATORY BRIEF
Meta settles lawsuit with 52 US states imposing age‑gating and time limits on under‑18 users
The settlement imposes new restrictions on minors that may curb youth online organizing.
ADTP REGULATORY BRIEF
Kenya publishes new guidance on cross‑border data transfers
The guidance signals stricter requirements for international data flows from Kenya, affecting multinational organisations’ transfer mechanisms and compliance programs.
ADTP REGULATORY BRIEF
Supreme Court hears challenge to DHS/SSA upgrades to SAVE database
The case could limit DHS’s use of the SAVE system for citizenship verification, reinforcing federal privacy protections.
ADTP REGULATORY BRIEF
EPIC senior counsel warns of privacy risks in unproven health technologies
Highlights privacy concerns in emerging health tech, urging companies to address trust and data protection.
ADTP REGULATORY BRIEF
California legislature passes three AI employment bills pending Governor's signature
These bills aim to curb AI-driven employment decisions and surveillance, enhancing employee protections and transparency.
ADTP REGULATORY BRIEF
DOJ partially confirms DHS whistleblower allegations on SAVE voter eligibility program
The action raises significant privacy and constitutional concerns about government use of personal data for voter eligibility.
ADTP REGULATORY BRIEF
EPIC sues DHS over expansion of SAVE voter eligibility program
The suit raises significant privacy and constitutional concerns about the government’s use of immigration data for voter eligibility checks.
ADTP REGULATORY BRIEF
EPIC warns sale of Google’s Spirit Air AI worker data lacks private right of action
The lack of a private right of action could hinder enforcement against the sale of employee data for AI training.
ADTP REGULATORY BRIEF
EU Commission to propose EU-wide minimum age for social media, linked to Digital Fairness Act
The upcoming proposal could set EU‑wide age limits for minors on social platforms, reshaping platform design and advertising practices.
ADTP REGULATORY BRIEF
California Legislature passes SB 690 to limit pen register lawsuits under CIPA
The bill removes private rights of action for website pen register claims, potentially affecting many pending lawsuits.
ADTP REGULATORY BRIEF
Police misuse ALPR data with frivolous reasons, EFF finds
The report reveals pervasive, undocumented ALPR searches that threaten privacy and civil liberties.
ADTP REGULATORY BRIEF
California Governor signs AB 2071 and AB 2298 to add digital literacy and cybersecurity to school curricula
The new laws mandate digital literacy and cybersecurity instruction for students, addressing online safety and privacy.
ADTP REGULATORY BRIEF
Amazon Ring's 'Throw Away the Key Encryption' adds limited privacy but falls short of true end‑to‑end encryption
TAKE improves key handling but does not provide the full privacy protections of end‑to‑end encryption, leaving users vulnerable to law‑enforcement access.
ADTP REGULATORY BRIEF
Cameras capture alleged vandal in Morristown SafetyStick pilot
The incident highlights privacy concerns around pilot surveillance deployments and the need for community oversight.
ADTP REGULATORY BRIEF
EU Cyber Resilience Act reporting obligations take effect for manufacturers
The EU Cyber Resilience Act now imposes mandatory incident reporting duties on manufacturers, raising compliance requirements for product security.
ADTP REGULATORY BRIEF
ENISA launches Single Reporting Platform for Cyber Resilience Act reporting
The SRP provides a single, EU‑wide tool for manufacturers to meet CRA reporting duties, enhancing coordinated cybersecurity risk management.
ADTP REGULATORY BRIEF
California AB 1709, a ban on social media for under‑16, signed into law
The law restricts minors' access to social media and raises privacy and free‑speech concerns.
ADTP REGULATORY BRIEF
Dutch DPA fines Uber €824,990,000 for automated decisions affecting drivers
The fine underscores strict GDPR enforcement of automated decision‑making provisions.
Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.