Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 24 of 322 developments
ADTP REGULATORY BRIEF
SSA re-establishes matching program with Department of War to share military retirement data
The notice signals new inter‑agency sharing of personal and financial data, raising privacy considerations for affected individuals.
ADTP REGULATORY BRIEF
Commerce announces new computer matching program under Privacy Act to prevent improper payments
The program expands inter‑agency data sharing for payment integrity, raising privacy and security considerations for personal records.
ADTP REGULATORY BRIEF
EFF urges stronger safeguards for automated content moderation ahead of elections
The guidance stresses that automated moderation must respect human rights and privacy, requiring transparency, audits, and human review, especially during election periods.
ADTP REGULATORY BRIEF
Future of Privacy Forum expands youth policy to integrate privacy, safety, and well‑being
The announcement signals new guidance that will shape how tech firms design AI‑enabled services for children, integrating privacy, safety, and well‑being considerations.
ADTP REGULATORY BRIEF
EFF files lawsuit against CMS for records on Medicare AI prior‑authorization program (WISeR)
The lawsuit highlights privacy and AI‑governance concerns in a federal health program that automates care decisions.
ADTP REGULATORY BRIEF
French court orders DNS resolver Quad9 to block sites, prompting its withdrawal from France
The court order forces a privacy‑focused DNS service to exit France, highlighting the impact of site‑blocking mandates on internet privacy.
ADTP REGULATORY BRIEF
AEPD releases a 10‑point guide on safely delegating tasks to AI assistants and agents
The guide helps individuals and organisations mitigate privacy and security risks when allowing AI tools to act on their behalf.
ADTP REGULATORY BRIEF
noyb files GDPR complaints against Scale AI's Outlier platform for invasive tracking and biometric verification
The complaints highlight potential EU data‑protection breaches in AI‑training platform labor practices.
ADTP REGULATORY BRIEF
AdFection malware campaign exploits behavioral ad tech to deliver zero‑click spyware
The report highlights how ad‑tech can be weaponized for spyware, underscoring urgent privacy and security risks for high‑risk users.
ADTP REGULATORY BRIEF
Federal judge allows Reddit's anti‑circumvention lawsuit against SerpAPI and Perplexity to proceed
The ruling expands the reach of DMCA anti‑circumvention law to AI‑driven web‑scraping, raising legal uncertainty for researchers and developers.
ADTP REGULATORY BRIEF
AI Hallucination Goes to Court: Global Mapping of Emerging Legal Issues
The post shows how existing legal frameworks are being stretched to address the harms of AI‑generated misinformation, signalling emerging obligations for AI providers and users.
ADTP REGULATORY BRIEF
noyb files GDPR complaints (C078, C097) over AI-generated inaccurate personal data
These complaints highlight how AI hallucinations challenge GDPR's accuracy and correction rights for individuals.
ADTP REGULATORY BRIEF
German court grants preliminary injunction against Google for AI-generated search summary linking publishers to fraud
The ruling highlights that providers may be liable for inaccurate AI‑generated content presented as their own, shaping future AI governance and privacy obligations.
ADTP REGULATORY BRIEF
DOE publishes new system of records for NCEE Evaluation Studies, rescinds multiple prior SORNs
The new system of records expands the Department’s data collection under the Privacy Act, affecting individuals participating in education evaluation studies.
ADTP REGULATORY BRIEF
FCC finalizes rule letting consumers revoke consent for specific robocall categories
The rule gives consumers granular control over robocalls, enhancing privacy and reducing unwanted calls.
ADTP REGULATORY BRIEF
Agency proposes limited programmatic access to FederalRegister.gov and eCFR.gov via APIs
The proposal restricts automated scraping and mandates API use with security checks, impacting how data is accessed from federal sites.
ADTP REGULATORY BRIEF
EFF warns of 'Vulnerability Apocalypse' in PHP and urges corporate support for open‑source security
The article highlights urgent data‑security risks from unpatched open‑source software and advocates corporate funding to protect user privacy.
ADTP REGULATORY BRIEF
EFF warns of surge in software vulnerabilities due to frontier AI, urges digital hygiene
A rise in AI‑driven vulnerability discovery heightens privacy and security risks, making robust digital hygiene essential.
ADTP REGULATORY BRIEF
11th Circuit lifts injunctions, allowing FL H.B. 3 and GA S.B. 351 to be enforced
The rulings enable state age‑gating laws that could force platforms to collect more personal data and restrict minors' online access.
ADTP REGULATORY BRIEF
EU Council approves amendment to GDPR allowing unrestricted AI data processing
The amendment could override fundamental privacy rights by permitting AI firms to use all personal data with minimal safeguards.
ADTP REGULATORY BRIEF
Michigan Advisory Committee to the U.S. Commission on Civil Rights Announces Public Meetings
Stakeholders are informed of upcoming civil rights discussions and of security measures restricting automated data access.
ADTP REGULATORY BRIEF
Federal Register limits automated scraping of its sites and requires CAPTCHA verification
The notice introduces technical safeguards that affect how data is accessed from federal government sites.
ADTP REGULATORY BRIEF
VA modifies system of records for life insurance policies under the Privacy Act
The update signals VA's shift to a cloud‑based record‑keeping platform, impacting how veterans' personal and insurance data are stored and protected.
ADTP REGULATORY BRIEF
State Department rescinds Board of Appellate Review Records (State-02) system of records notice
The rescission removes a Privacy Act system of records, altering how passport‑related personal data are retained and accessed.
Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.