Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 24 of 322 developments
ADTP REGULATORY BRIEF
EFF urges stronger safeguards for automated content moderation ahead of elections
The guidance stresses that automated moderation must respect human rights and privacy, requiring transparency, audits, and human review, especially during election periods.
ADTP REGULATORY BRIEF
Future of Privacy Forum expands youth policy to integrate privacy, safety, and well‑being
The announcement signals new guidance that will shape how tech firms design AI‑enabled services for children, integrating privacy, safety, and well‑being considerations.
ADTP REGULATORY BRIEF
French court orders DNS resolver Quad9 to block sites, prompting its withdrawal from France
The court order forces a privacy‑focused DNS service to exit France, highlighting the impact of site‑blocking mandates on internet privacy.
ADTP REGULATORY BRIEF
AEPD releases a 10‑point guide on safely delegating tasks to AI assistants and agents
The guide helps individuals and organisations mitigate privacy and security risks when allowing AI tools to act on their behalf.
ADTP REGULATORY BRIEF
noyb files GDPR complaints against Scale AI's Outlier platform for invasive tracking and biometric verification
The complaints highlight potential EU data‑protection breaches in AI‑training platform labor practices.
ADTP REGULATORY BRIEF
AdFection malware campaign exploits behavioral ad tech to deliver zero‑click spyware
The report highlights how ad‑tech can be weaponized for spyware, underscoring urgent privacy and security risks for high‑risk users.
ADTP REGULATORY BRIEF
AI Hallucination Goes to Court: Global Mapping of Emerging Legal Issues
The post shows how existing legal frameworks are being stretched to address the harms of AI‑generated misinformation, signalling emerging obligations for AI providers and users.
ADTP REGULATORY BRIEF
noyb files GDPR complaints (C078, C097) over AI-generated inaccurate personal data
These complaints highlight how AI hallucinations challenge GDPR's accuracy and correction rights for individuals.
ADTP REGULATORY BRIEF
German court grants preliminary injunction against Google for AI-generated search summary linking publishers to fraud
The ruling highlights that providers may be liable for inaccurate AI‑generated content presented as their own, shaping future AI governance and privacy obligations.
ADTP REGULATORY BRIEF
EFF warns of 'Vulnerability Apocalypse' in PHP and urges corporate support for open‑source security
The article highlights urgent data‑security risks from unpatched open‑source software and advocates corporate funding to protect user privacy.
ADTP REGULATORY BRIEF
EFF warns of surge in software vulnerabilities due to frontier AI, urges digital hygiene
A rise in AI‑driven vulnerability discovery heightens privacy and security risks, making robust digital hygiene essential.
ADTP REGULATORY BRIEF
EU Council approves amendment to GDPR allowing unrestricted AI data processing
The amendment could override fundamental privacy rights by permitting AI firms to use all personal data with minimal safeguards.
ADTP REGULATORY BRIEF
Bill C-22 (Lawful Access Act) passes House of Commons, now before Senate
The bill expands government surveillance powers, affecting privacy and security of millions of Canadians.
ADTP REGULATORY BRIEF
EU proposes Cloud and AI Development Act (CADA) to impose cloud sovereignty requirements
CADA would introduce EU‑wide cloud sovereignty rules, affecting any provider seeking public‑sector contracts across the Union.
ADTP REGULATORY BRIEF
CNIL plenary agenda examines draft decree authorizing automated processing “PARCOURS” and creation of “DossierFacile”
The agenda signals upcoming regulatory scrutiny of new automated data‑processing tools and surveillance measures in France.
ADTP REGULATORY BRIEF
AEPD opens registration for cybersecurity and data protection session at XX Jornadas STIC on 24 Nov 2026
The AEPD event will address emerging cyber‑security challenges for personal data protection, providing guidance relevant to privacy and AI practitioners.
ADTP REGULATORY BRIEF
Brazil's Law n. 15.211/2025 sets child‑protection rules, bans profiling ads for minors and mandates age‑verification
The law introduces sweeping privacy and safety obligations for platforms, impacting how they verify age and target ads to minors.
ADTP REGULATORY BRIEF
EDPB adopts Guidelines 3/2025 on DSA‑GDPR interplay
The new EDPB guidance helps platforms align DSA duties with GDPR privacy requirements.
ADTP REGULATORY BRIEF
EU Commission opens investigation into Booking.com for DSA fraud and transparency breaches
The probe signals stricter enforcement of the DSA’s risk‑assessment and transparency obligations for large online platforms.
ADTP REGULATORY BRIEF
Berlin DPA finds microtargeting by major German parties illegal
The rulings signal that political parties in Germany may not use personal political data for targeted ads without consent, impacting future campaign practices.
ADTP REGULATORY BRIEF
AEPD reports over 3,000 personal data breach notifications in first half of 2026
The surge in breach reports highlights growing cyber risk and reinforces the need for robust notification and preventive measures under GDPR.
ADTP REGULATORY BRIEF
CNIL webinar explains new French telephone prospecting rules effective 11 August 2026
Practitioners must obtain and manage consumer consent before any commercial phone call under the new French law.
ADTP REGULATORY BRIEF
Spanish AEPD and Luxembourg CNPD sign MoU to strengthen privacy cooperation
The agreement enhances cross‑border collaboration on privacy challenges and emerging technologies.
ADTP REGULATORY BRIEF
CNIL guidance on reconstituting professional email addresses and data subject rights
The guidance clarifies GDPR‑compliant limits on reconstructing professional emails, reinforcing transparency and data‑subject rights.
Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.