Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 24 of 322 developments
ADTP REGULATORY BRIEF
SSA re-establishes matching program with Department of War to share military retirement data
The notice signals new inter‑agency sharing of personal and financial data, raising privacy considerations for affected individuals.
ADTP REGULATORY BRIEF
Commerce announces new computer matching program under Privacy Act to prevent improper payments
The program expands inter‑agency data sharing for payment integrity, raising privacy and security considerations for personal records.
ADTP REGULATORY BRIEF
EFF urges stronger safeguards for automated content moderation ahead of elections
The guidance stresses that automated moderation must respect human rights and privacy, requiring transparency, audits, and human review, especially during election periods.
ADTP REGULATORY BRIEF
EFF files lawsuit against CMS for records on Medicare AI prior‑authorization program (WISeR)
The lawsuit highlights privacy and AI‑governance concerns in a federal health program that automates care decisions.
ADTP REGULATORY BRIEF
French court orders DNS resolver Quad9 to block sites, prompting its withdrawal from France
The court order forces a privacy‑focused DNS service to exit France, highlighting the impact of site‑blocking mandates on internet privacy.
ADTP REGULATORY BRIEF
AEPD releases a 10‑point guide on safely delegating tasks to AI assistants and agents
The guide helps individuals and organisations mitigate privacy and security risks when allowing AI tools to act on their behalf.
ADTP REGULATORY BRIEF
AdFection malware campaign exploits behavioral ad tech to deliver zero‑click spyware
The report highlights how ad‑tech can be weaponized for spyware, underscoring urgent privacy and security risks for high‑risk users.
ADTP REGULATORY BRIEF
Agency proposes limited programmatic access to FederalRegister.gov and eCFR.gov via APIs
The proposal restricts automated scraping and mandates API use with security checks, impacting how data is accessed from federal sites.
ADTP REGULATORY BRIEF
EFF warns of 'Vulnerability Apocalypse' in PHP and urges corporate support for open‑source security
The article highlights urgent data‑security risks from unpatched open‑source software and advocates corporate funding to protect user privacy.
ADTP REGULATORY BRIEF
EFF warns of surge in software vulnerabilities due to frontier AI, urges digital hygiene
A rise in AI‑driven vulnerability discovery heightens privacy and security risks, making robust digital hygiene essential.
ADTP REGULATORY BRIEF
Michigan Advisory Committee to the U.S. Commission on Civil Rights Announces Public Meetings
Stakeholders are informed of upcoming civil rights discussions and of security measures restricting automated data access.
ADTP REGULATORY BRIEF
Federal Register limits automated scraping of its sites and requires CAPTCHA verification
The notice introduces technical safeguards that affect how data is accessed from federal government sites.
ADTP REGULATORY BRIEF
VA modifies system of records for life insurance policies under the Privacy Act
The update signals VA's shift to a cloud‑based record‑keeping platform, impacting how veterans' personal and insurance data are stored and protected.
ADTP REGULATORY BRIEF
OCC files proposed rule change to revise Rule 213 cybersecurity obligations
Proposed cybersecurity rule updates could affect clearing members' data protection practices.
ADTP REGULATORY BRIEF
Federal Register restricts automated scraping, requires CAPTCHA and API use
Increased security controls on federal information portals may affect automated data collection and AI training pipelines.
ADTP REGULATORY BRIEF
Bill C-22 (Lawful Access Act) passes House of Commons, now before Senate
The bill expands government surveillance powers, affecting privacy and security of millions of Canadians.
ADTP REGULATORY BRIEF
EU proposes Cloud and AI Development Act (CADA) to impose cloud sovereignty requirements
CADA would introduce EU‑wide cloud sovereignty rules, affecting any provider seeking public‑sector contracts across the Union.
ADTP REGULATORY BRIEF
CNIL plenary agenda examines draft decree authorizing automated processing “PARCOURS” and creation of “DossierFacile”
The agenda signals upcoming regulatory scrutiny of new automated data‑processing tools and surveillance measures in France.
ADTP REGULATORY BRIEF
AEPD opens registration for cybersecurity and data protection session at XX Jornadas STIC on 24 Nov 2026
The AEPD event will address emerging cyber‑security challenges for personal data protection, providing guidance relevant to privacy and AI practitioners.
ADTP REGULATORY BRIEF
Ninth Circuit rejects Google’s security argument against interoperability
The ruling clears a major legal obstacle to mandated interoperability, reinforcing privacy‑friendly competition.
ADTP REGULATORY BRIEF
Brazil's Law n. 15.211/2025 sets child‑protection rules, bans profiling ads for minors and mandates age‑verification
The law introduces sweeping privacy and safety obligations for platforms, impacting how they verify age and target ads to minors.
ADTP REGULATORY BRIEF
Executive Order 14093 bans U.S. government use of commercial spyware
This order directly impacts national security and privacy by restricting government use of tools that can undermine encrypted communications.
ADTP REGULATORY BRIEF
EFF releases guide to help parents and youth protect online privacy
The guide equips parents with tools to protect children’s privacy online amid growing legislative proposals that may restrict access to information.
ADTP REGULATORY BRIEF
CMS announces computer matching program with VA to identify duplicate Medicare/VHA payments
The inter‑agency data matching program raises privacy and security considerations for health data sharing between federal agencies.
Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.