Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 24 of 322 developments
ADTP REGULATORY BRIEF
French court orders DNS resolver Quad9 to block sites, prompting its withdrawal from France
The court order forces a privacy‑focused DNS service to exit France, highlighting the impact of site‑blocking mandates on internet privacy.
ADTP REGULATORY BRIEF
noyb files GDPR complaints against Scale AI's Outlier platform for invasive tracking and biometric verification
The complaints highlight potential EU data‑protection breaches in AI‑training platform labor practices.
ADTP REGULATORY BRIEF
noyb files GDPR complaints (C078, C097) over AI-generated inaccurate personal data
These complaints highlight how AI hallucinations challenge GDPR's accuracy and correction rights for individuals.
ADTP REGULATORY BRIEF
FTC secures $106.8M judgment and permanent ban on illegal debt relief scheme
The FTC obtained a permanent injunction and large monetary judgment to stop a fraud operation that exploited vulnerable consumers.
ADTP REGULATORY BRIEF
EU Commission opens investigation into Booking.com for DSA fraud and transparency breaches
The probe signals stricter enforcement of the DSA’s risk‑assessment and transparency obligations for large online platforms.
ADTP REGULATORY BRIEF
Berlin DPA finds microtargeting by major German parties illegal
The rulings signal that political parties in Germany may not use personal political data for targeted ads without consent, impacting future campaign practices.
ADTP REGULATORY BRIEF
Order excludes DeepSeek products from Federal civilian executive branch IT systems and procurements
The order bars DeepSeek from supplying technology to federal agencies, underscoring enforcement of cybersecurity and data‑access policies.
ADTP REGULATORY BRIEF
FTC issues order to preserve competition in digital advertising as Publicis acquires LiveRamp
The FTC order aims to maintain competition in digital advertising, impacting how audience data is used and shared.
ADTP REGULATORY BRIEF
Norwegian DPA fines Xandr €8.6M for unlawful processing of Grindr users' data
The fine highlights the strict liability of joint controllers for obtaining valid consent when handling sensitive personal data.
ADTP REGULATORY BRIEF
FTC orders Walmart to pay over $9.8M to consumers harmed by wire‑transfer scams
FTC enforcement compels Walmart to compensate victims of fraud via its wire‑transfer platform, underscoring consumer protection in financial services.
ADTP REGULATORY BRIEF
DHS OIG audit finds TSA failed to safeguard passenger facial recognition data
The audit highlights serious privacy and security gaps in the TSA’s biometric surveillance program, underscoring the need for stronger oversight and data handling controls.
ADTP REGULATORY BRIEF
NY Attorney General urges bankruptcy court to protect children and consumers in Character.AI sale
The action seeks to prevent the sale of a vulnerable AI chatbot platform without robust child‑safety and privacy protections.
ADTP REGULATORY BRIEF
CNIL closes injunction against Google after compliance on cookie and Gmail ad consent
The decision demonstrates French regulator enforcement of privacy consent rules for cookies and email advertising.
ADTP REGULATORY BRIEF
French DPA fines Google €325 million for spam emails in Gmail
Significant GDPR enforcement action against a major tech company highlights privacy compliance risks for email services.
ADTP REGULATORY BRIEF
Italian DPA fines Wind Tre €16.7 million for unlawful telemarketing
The fine underscores the GDPR’s strict enforcement of consent and data‑subject rights in telecom marketing.
ADTP REGULATORY BRIEF
Turkish courts block LGBTQ+ NGOs' websites and detain activists under obscenity and criminal organization laws
The crackdown illustrates how existing criminal statutes are being used to suppress LGBTQ+ expression and association online.
ADTP REGULATORY BRIEF
Italian DPA fines BBVA €5.508 million for ignoring customer’s objection to direct marketing
The enforcement highlights the obligation of controllers to promptly honor opt‑out requests and the financial risk of non‑compliance.
ADTP REGULATORY BRIEF
Italian DPA fines Emirates €180,000 for health data infringements
The enforcement highlights GDPR obligations for clear information and proportionate retention of health data in the aviation sector.
ADTP REGULATORY BRIEF
Italian DPA fines security firm €39,000 for employee data violations
The enforcement highlights the GDPR’s strict requirements for employee data access and transparent processing of location data.
ADTP REGULATORY BRIEF
Italian DPA fines IQVIA €7 million for unlawful processing of patients’ health data
The fine highlights enforcement of GDPR obligations for health data controllers and underscores the need for proper legal bases, transparency, and impact assessments.
ADTP REGULATORY BRIEF
Hellenic DPA fines Ministry and EETAA for data breach
The decision highlights enforcement of GDPR security and processor obligations after a major data breach in a government programme.
ADTP REGULATORY BRIEF
Swedish DPA fines Miljödata approx EUR 160,000 for insufficient security measures
The fine highlights enforcement of GDPR Article 32 security obligations for processors handling large volumes of personal data.
ADTP REGULATORY BRIEF
Dutch DPA fines Uber €824.99 million for unlawful automated decision‑making
The fine demonstrates robust GDPR enforcement on automated decision‑making in the gig‑economy.
ADTP REGULATORY BRIEF
CNIL closes injunction against FRANCE TRAVAIL after compliance with data security measures
The closure shows that timely remediation of GDPR security deficiencies can halt additional penalties.
Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.