Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 24 of 306 developments
ADTP REGULATORY BRIEF
EFF warns of 'Vulnerability Apocalypse' in PHP and urges corporate support for open‑source security
The article highlights urgent data‑security risks from unpatched open‑source software and advocates corporate funding to protect user privacy.
ADTP REGULATORY BRIEF
EFF warns of surge in software vulnerabilities due to frontier AI, urges digital hygiene
A rise in AI‑driven vulnerability discovery heightens privacy and security risks, making robust digital hygiene essential.
ADTP REGULATORY BRIEF
EU Council approves amendment to GDPR allowing unrestricted AI data processing
The amendment could override fundamental privacy rights by permitting AI firms to use all personal data with minimal safeguards.
ADTP REGULATORY BRIEF
Bill C-22 (Lawful Access Act) passes House, moves to Senate, expanding surveillance powers
The bill could dramatically broaden government surveillance and weaken encryption for millions of Canadians.
ADTP REGULATORY BRIEF
EU proposes Cloud and AI Development Act (CADA) to impose cloud sovereignty requirements
CADA would introduce EU‑wide cloud sovereignty rules, affecting any provider seeking public‑sector contracts across the Union.
ADTP REGULATORY BRIEF
CNIL plenary agenda examines draft decree authorizing automated processing “PARCOURS” and creation of “DossierFacile”
The agenda signals upcoming regulatory scrutiny of new automated data‑processing tools and surveillance measures in France.
ADTP REGULATORY BRIEF
Brazil's Law n. 15.211/2025 sets child‑protection rules, bans profiling ads for minors and mandates age‑verification
The law introduces sweeping privacy and safety obligations for platforms, impacting how they verify age and target ads to minors.
ADTP REGULATORY BRIEF
EDPB adopts Guidelines 3/2025 on DSA‑GDPR interplay
The new EDPB guidance helps platforms align DSA duties with GDPR privacy requirements.
ADTP REGULATORY BRIEF
EU Commission opens investigation into Booking.com for DSA fraud and transparency breaches
The probe signals stricter enforcement of the DSA’s risk‑assessment and transparency obligations for large online platforms.
ADTP REGULATORY BRIEF
Berlin DPA finds microtargeting by major German parties illegal
The rulings signal that political parties in Germany may not use personal political data for targeted ads without consent, impacting future campaign practices.
ADTP REGULATORY BRIEF
AEPD reports over 3,000 personal data breach notifications in first half of 2026
The surge in breach reports highlights growing cyber risk and reinforces the need for robust notification and preventive measures under GDPR.
ADTP REGULATORY BRIEF
CNIL webinar explains new French telephone prospecting rules effective 11 August 2026
Practitioners must obtain and manage consumer consent before any commercial phone call under the new French law.
ADTP REGULATORY BRIEF
Spanish AEPD and Luxembourg CNPD sign MoU to strengthen privacy cooperation
The agreement enhances cross‑border collaboration on privacy challenges and emerging technologies.
ADTP REGULATORY BRIEF
Commission launches RAISE pledging initiative to boost AI support for researchers across Europe
The initiative signals EU commitment to strengthen AI research capacity, impacting AI governance and data-driven research.
ADTP REGULATORY BRIEF
CNIL guidance on reconstituting professional email addresses and data subject rights
The guidance clarifies GDPR‑compliant limits on reconstructing professional emails, reinforcing transparency and data‑subject rights.
ADTP REGULATORY BRIEF
CNIL guidance on lawful reconstitution of professional email addresses
Clarifies when legitimate interest can be used for email reconstruction, impacting B2B prospecting practices.
ADTP REGULATORY BRIEF
Norwegian DPA fines Xandr €8.6M for unlawful processing of Grindr users' data
The fine highlights the strict liability of joint controllers for obtaining valid consent when handling sensitive personal data.
ADTP REGULATORY BRIEF
CNIL examines draft decree on real‑time audio capture by public transport operators
The proposal could introduce new privacy obligations for transport operators capturing audio in real time.
ADTP REGULATORY BRIEF
AEPD launches call for articles for third issue of Revista PIT on GDPR and emerging regulations
The announcement encourages scholarly analysis of GDPR's interaction with new AI, digital, cybersecurity and health regulations, influencing future data‑protection practice.
ADTP REGULATORY BRIEF
UK ICO publishes report on data protection challenges in AI and launches Agentic AI Project
The ICO’s report signals heightened regulatory focus on AI data protection and introduces a new initiative to guide AI developers.
ADTP REGULATORY BRIEF
CNIL closes injunction against Google after compliance on cookie and Gmail ad consent
The decision demonstrates French regulator enforcement of privacy consent rules for cookies and email advertising.
ADTP REGULATORY BRIEF
Eurobarometer survey shows increasing AI adoption by European companies
The survey signals rising AI integration in European businesses, which may affect future regulatory focus on AI and data protection.
ADTP REGULATORY BRIEF
AI adoption more than doubles in EU strategic sectors, JRC report shows
The findings guide policymakers on addressing privacy and regulatory challenges to accelerate AI uptake across key EU industries.
ADTP REGULATORY BRIEF
EDPB issues guidance on privacy challenges of smart glasses
The guidance alerts stakeholders to emerging privacy risks of smart glasses and clarifies GDPR applicability and transparency obligations.
Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.