Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 24 of 306 developments
ADTP REGULATORY BRIEF
EFF warns of 'Vulnerability Apocalypse' in PHP and urges corporate support for open‑source security
The article highlights urgent data‑security risks from unpatched open‑source software and advocates corporate funding to protect user privacy.
ADTP REGULATORY BRIEF
EFF warns of surge in software vulnerabilities due to frontier AI, urges digital hygiene
A rise in AI‑driven vulnerability discovery heightens privacy and security risks, making robust digital hygiene essential.
ADTP REGULATORY BRIEF
Bill C-22 (Lawful Access Act) passes House, moves to Senate, expanding surveillance powers
The bill could dramatically broaden government surveillance and weaken encryption for millions of Canadians.
ADTP REGULATORY BRIEF
EU proposes Cloud and AI Development Act (CADA) to impose cloud sovereignty requirements
CADA would introduce EU‑wide cloud sovereignty rules, affecting any provider seeking public‑sector contracts across the Union.
ADTP REGULATORY BRIEF
CNIL plenary agenda examines draft decree authorizing automated processing “PARCOURS” and creation of “DossierFacile”
The agenda signals upcoming regulatory scrutiny of new automated data‑processing tools and surveillance measures in France.
ADTP REGULATORY BRIEF
Brazil's Law n. 15.211/2025 sets child‑protection rules, bans profiling ads for minors and mandates age‑verification
The law introduces sweeping privacy and safety obligations for platforms, impacting how they verify age and target ads to minors.
ADTP REGULATORY BRIEF
AEPD reports over 3,000 personal data breach notifications in first half of 2026
The surge in breach reports highlights growing cyber risk and reinforces the need for robust notification and preventive measures under GDPR.
ADTP REGULATORY BRIEF
CNIL webinar explains new French telephone prospecting rules effective 11 August 2026
Practitioners must obtain and manage consumer consent before any commercial phone call under the new French law.
ADTP REGULATORY BRIEF
CNIL guidance on lawful reconstitution of professional email addresses
Clarifies when legitimate interest can be used for email reconstruction, impacting B2B prospecting practices.
ADTP REGULATORY BRIEF
CNIL examines draft decree on real‑time audio capture by public transport operators
The proposal could introduce new privacy obligations for transport operators capturing audio in real time.
ADTP REGULATORY BRIEF
AEPD launches call for articles for third issue of Revista PIT on GDPR and emerging regulations
The announcement encourages scholarly analysis of GDPR's interaction with new AI, digital, cybersecurity and health regulations, influencing future data‑protection practice.
ADTP REGULATORY BRIEF
AI adoption more than doubles in EU strategic sectors, JRC report shows
The findings guide policymakers on addressing privacy and regulatory challenges to accelerate AI uptake across key EU industries.
ADTP REGULATORY BRIEF
EDPB issues guidance on privacy challenges of smart glasses
The guidance alerts stakeholders to emerging privacy risks of smart glasses and clarifies GDPR applicability and transparency obligations.
ADTP REGULATORY BRIEF
CEPD issues guidance on data protection challenges of smart glasses
The guidance highlights how smart glasses raise new privacy challenges and sets expectations for users, manufacturers, and service providers under EU data protection law.
ADTP REGULATORY BRIEF
EU and Ukraine sign administrative arrangement between CERT-EU and CERT-UA at 5th Cyber Dialogue
The new arrangement strengthens EU‑Ukraine operational cooperation on cybersecurity and aligns Ukraine with EU cyber‑security frameworks.
ADTP REGULATORY BRIEF
Italian DPA fines Wind Tre €16.7 million for unlawful telemarketing
The fine underscores the GDPR’s strict enforcement of consent and data‑subject rights in telecom marketing.
ADTP REGULATORY BRIEF
CNIL hosts 2nd Rencontres Informatique & Libertés on connected glasses and data‑sanctions
The conference highlights emerging privacy challenges of wearable tech and the increasing enforcement activity of the CNIL.
ADTP REGULATORY BRIEF
Italian DPA fines IQVIA €7 million for unlawful processing of patients’ health data
The fine highlights enforcement of GDPR obligations for health data controllers and underscores the need for proper legal bases, transparency, and impact assessments.
ADTP REGULATORY BRIEF
EU AI Scientific Panel holds special meeting on frontier AI safety and loss-of-control incidents
The meeting signals heightened EU focus on AI safety, incident response, and governance of frontier AI systems.
ADTP REGULATORY BRIEF
EFF warns age‑verification laws risk excluding people without ID
Age‑verification regimes may protect children but also threaten equal access to information and privacy for people without ID.
ADTP REGULATORY BRIEF
Hellenic DPA fines Ministry and EETAA for data breach
The decision highlights enforcement of GDPR security and processor obligations after a major data breach in a government programme.
ADTP REGULATORY BRIEF
Swedish DPA fines Miljödata approx EUR 160,000 for insufficient security measures
The fine highlights enforcement of GDPR Article 32 security obligations for processors handling large volumes of personal data.
ADTP REGULATORY BRIEF
CNIL closes injunction against FRANCE TRAVAIL after compliance with data security measures
The closure shows that timely remediation of GDPR security deficiencies can halt additional penalties.
ADTP REGULATORY BRIEF
AEPD publishes second issue of scientific journal “Privacy, Innovation and Technology”
The publication provides expert analysis of GDPR challenges and AI governance, helping practitioners anticipate regulatory impacts of emerging technologies.
Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.