Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 24 of 322 developments
ADTP REGULATORY BRIEF
SSA re-establishes matching program with Department of War to share military retirement data
The notice signals new inter‑agency sharing of personal and financial data, raising privacy considerations for affected individuals.
ADTP REGULATORY BRIEF
Commerce announces new computer matching program under Privacy Act to prevent improper payments
The program expands inter‑agency data sharing for payment integrity, raising privacy and security considerations for personal records.
ADTP REGULATORY BRIEF
Future of Privacy Forum expands youth policy to integrate privacy, safety, and well‑being
The announcement signals new guidance that will shape how tech firms design AI‑enabled services for children, integrating privacy, safety, and well‑being considerations.
ADTP REGULATORY BRIEF
AEPD releases a 10‑point guide on safely delegating tasks to AI assistants and agents
The guide helps individuals and organisations mitigate privacy and security risks when allowing AI tools to act on their behalf.
ADTP REGULATORY BRIEF
AdFection malware campaign exploits behavioral ad tech to deliver zero‑click spyware
The report highlights how ad‑tech can be weaponized for spyware, underscoring urgent privacy and security risks for high‑risk users.
ADTP REGULATORY BRIEF
DOE publishes new system of records for NCEE Evaluation Studies, rescinds multiple prior SORNs
The new system of records expands the Department’s data collection under the Privacy Act, affecting individuals participating in education evaluation studies.
ADTP REGULATORY BRIEF
FCC finalizes rule letting consumers revoke consent for specific robocall categories
The rule gives consumers granular control over robocalls, enhancing privacy and reducing unwanted calls.
ADTP REGULATORY BRIEF
Agency proposes limited programmatic access to FederalRegister.gov and eCFR.gov via APIs
The proposal restricts automated scraping and mandates API use with security checks, impacting how data is accessed from federal sites.
ADTP REGULATORY BRIEF
EFF warns of 'Vulnerability Apocalypse' in PHP and urges corporate support for open‑source security
The article highlights urgent data‑security risks from unpatched open‑source software and advocates corporate funding to protect user privacy.
ADTP REGULATORY BRIEF
EFF warns of surge in software vulnerabilities due to frontier AI, urges digital hygiene
A rise in AI‑driven vulnerability discovery heightens privacy and security risks, making robust digital hygiene essential.
ADTP REGULATORY BRIEF
Michigan Advisory Committee to the U.S. Commission on Civil Rights Announces Public Meetings
Stakeholders are informed of upcoming civil rights discussions and of security measures restricting automated data access.
ADTP REGULATORY BRIEF
Federal Register limits automated scraping of its sites and requires CAPTCHA verification
The notice introduces technical safeguards that affect how data is accessed from federal government sites.
ADTP REGULATORY BRIEF
VA modifies system of records for life insurance policies under the Privacy Act
The update signals VA's shift to a cloud‑based record‑keeping platform, impacting how veterans' personal and insurance data are stored and protected.
ADTP REGULATORY BRIEF
State Department rescinds Board of Appellate Review Records (State-02) system of records notice
The rescission removes a Privacy Act system of records, altering how passport‑related personal data are retained and accessed.
ADTP REGULATORY BRIEF
OCC files proposed rule change to revise Rule 213 cybersecurity obligations
Proposed cybersecurity rule updates could affect clearing members' data protection practices.
ADTP REGULATORY BRIEF
Federal Register restricts automated scraping, requires CAPTCHA and API use
Increased security controls on federal information portals may affect automated data collection and AI training pipelines.
ADTP REGULATORY BRIEF
CNIL plenary agenda examines draft decree authorizing automated processing “PARCOURS” and creation of “DossierFacile”
The agenda signals upcoming regulatory scrutiny of new automated data‑processing tools and surveillance measures in France.
ADTP REGULATORY BRIEF
AEPD opens registration for cybersecurity and data protection session at XX Jornadas STIC on 24 Nov 2026
The AEPD event will address emerging cyber‑security challenges for personal data protection, providing guidance relevant to privacy and AI practitioners.
ADTP REGULATORY BRIEF
EFF releases guide to help parents and youth protect online privacy
The guide equips parents with tools to protect children’s privacy online amid growing legislative proposals that may restrict access to information.
ADTP REGULATORY BRIEF
EPIC files amicus brief urging Ninth Circuit to reject Big Tech First Amendment claim on California SB 976
The filing highlights how California's child‑protective feed law is being defended against constitutional challenges, underscoring its significance for privacy and AI‑governance in social media.
ADTP REGULATORY BRIEF
EDPB adopts Guidelines 3/2025 on DSA‑GDPR interplay
The new EDPB guidance helps platforms align DSA duties with GDPR privacy requirements.
ADTP REGULATORY BRIEF
CMS announces computer matching program with VA to identify duplicate Medicare/VHA payments
The inter‑agency data matching program raises privacy and security considerations for health data sharing between federal agencies.
ADTP REGULATORY BRIEF
AEPD reports over 3,000 personal data breach notifications in first half of 2026
The surge in breach reports highlights growing cyber risk and reinforces the need for robust notification and preventive measures under GDPR.
ADTP REGULATORY BRIEF
EFF releases Privacy Badger for Safari on macOS
The new Safari version extends tracker‑blocking and GPC signaling to millions of macOS users, enhancing privacy protections online.
Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.