Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 24 of 322 developments
ADTP REGULATORY BRIEF
EFF urges stronger safeguards for automated content moderation ahead of elections
The guidance stresses that automated moderation must respect human rights and privacy, requiring transparency, audits, and human review, especially during election periods.
ADTP REGULATORY BRIEF
French court orders DNS resolver Quad9 to block sites, prompting its withdrawal from France
The court order forces a privacy‑focused DNS service to exit France, highlighting the impact of site‑blocking mandates on internet privacy.
ADTP REGULATORY BRIEF
AEPD releases a 10‑point guide on safely delegating tasks to AI assistants and agents
The guide helps individuals and organisations mitigate privacy and security risks when allowing AI tools to act on their behalf.
ADTP REGULATORY BRIEF
AdFection malware campaign exploits behavioral ad tech to deliver zero‑click spyware
The report highlights how ad‑tech can be weaponized for spyware, underscoring urgent privacy and security risks for high‑risk users.
ADTP REGULATORY BRIEF
EFF warns of 'Vulnerability Apocalypse' in PHP and urges corporate support for open‑source security
The article highlights urgent data‑security risks from unpatched open‑source software and advocates corporate funding to protect user privacy.
ADTP REGULATORY BRIEF
EFF warns of surge in software vulnerabilities due to frontier AI, urges digital hygiene
A rise in AI‑driven vulnerability discovery heightens privacy and security risks, making robust digital hygiene essential.
ADTP REGULATORY BRIEF
Bill C-22 (Lawful Access Act) passes House of Commons, now before Senate
The bill expands government surveillance powers, affecting privacy and security of millions of Canadians.
ADTP REGULATORY BRIEF
EU proposes Cloud and AI Development Act (CADA) to impose cloud sovereignty requirements
CADA would introduce EU‑wide cloud sovereignty rules, affecting any provider seeking public‑sector contracts across the Union.
ADTP REGULATORY BRIEF
CNIL plenary agenda examines draft decree authorizing automated processing “PARCOURS” and creation of “DossierFacile”
The agenda signals upcoming regulatory scrutiny of new automated data‑processing tools and surveillance measures in France.
ADTP REGULATORY BRIEF
AEPD opens registration for cybersecurity and data protection session at XX Jornadas STIC on 24 Nov 2026
The AEPD event will address emerging cyber‑security challenges for personal data protection, providing guidance relevant to privacy and AI practitioners.
ADTP REGULATORY BRIEF
Brazil's Law n. 15.211/2025 sets child‑protection rules, bans profiling ads for minors and mandates age‑verification
The law introduces sweeping privacy and safety obligations for platforms, impacting how they verify age and target ads to minors.
ADTP REGULATORY BRIEF
AEPD reports over 3,000 personal data breach notifications in first half of 2026
The surge in breach reports highlights growing cyber risk and reinforces the need for robust notification and preventive measures under GDPR.
ADTP REGULATORY BRIEF
CNIL webinar explains new French telephone prospecting rules effective 11 August 2026
Practitioners must obtain and manage consumer consent before any commercial phone call under the new French law.
ADTP REGULATORY BRIEF
CNIL guidance on lawful reconstitution of professional email addresses
Clarifies when legitimate interest can be used for email reconstruction, impacting B2B prospecting practices.
ADTP REGULATORY BRIEF
CNIL examines draft decree on real‑time audio capture by public transport operators
The proposal could introduce new privacy obligations for transport operators capturing audio in real time.
ADTP REGULATORY BRIEF
AEPD launches call for articles for third issue of Revista PIT on GDPR and emerging regulations
The announcement encourages scholarly analysis of GDPR's interaction with new AI, digital, cybersecurity and health regulations, influencing future data‑protection practice.
ADTP REGULATORY BRIEF
AI adoption more than doubles in EU strategic sectors, JRC report shows
The findings guide policymakers on addressing privacy and regulatory challenges to accelerate AI uptake across key EU industries.
ADTP REGULATORY BRIEF
EDPB issues guidance on privacy challenges of smart glasses
The guidance alerts stakeholders to emerging privacy risks of smart glasses and clarifies GDPR applicability and transparency obligations.
ADTP REGULATORY BRIEF
CEPD issues guidance on data protection challenges of smart glasses
The guidance highlights how smart glasses raise new privacy challenges and sets expectations for users, manufacturers, and service providers under EU data protection law.
ADTP REGULATORY BRIEF
EU and Ukraine sign administrative arrangement between CERT-EU and CERT-UA at 5th Cyber Dialogue
The new arrangement strengthens EU‑Ukraine operational cooperation on cybersecurity and aligns Ukraine with EU cyber‑security frameworks.
ADTP REGULATORY BRIEF
Italian DPA fines Wind Tre €16.7 million for unlawful telemarketing
The fine underscores the GDPR’s strict enforcement of consent and data‑subject rights in telecom marketing.
ADTP REGULATORY BRIEF
CNIL hosts 2nd Rencontres Informatique & Libertés on connected glasses and data‑sanctions
The conference highlights emerging privacy challenges of wearable tech and the increasing enforcement activity of the CNIL.
ADTP REGULATORY BRIEF
Italian DPA fines IQVIA €7 million for unlawful processing of patients’ health data
The fine highlights enforcement of GDPR obligations for health data controllers and underscores the need for proper legal bases, transparency, and impact assessments.
ADTP REGULATORY BRIEF
EU AI Scientific Panel holds special meeting on frontier AI safety and loss-of-control incidents
The meeting signals heightened EU focus on AI safety, incident response, and governance of frontier AI systems.
Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.