Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 24 of 220 developments
ADTP REGULATORY BRIEF
FTC rescinds 2021 Policy Statement on Breaches by Health Apps and Connected Devices
The FTC's withdrawal of this guidance removes a previously stated compliance expectation for health app and IoT device developers.
ADTP REGULATORY BRIEF
EFF releases 1,000 pages of CMS records on AI-driven Medicare WISeR prior‑authorization program
The disclosure highlights how an AI‑driven Medicare prior‑authorization system may compromise patient access and raise privacy and bias concerns.
ADTP REGULATORY BRIEF
AEPD launches “Las claves de…” series on privacy and emerging neurotechnologies
The series aims to inform stakeholders about GDPR safeguards for neurodata, highlighting emerging privacy risks of brain‑related technologies.
ADTP REGULATORY BRIEF
Irish DPC welcomes court conviction of Brown Thomas for ePrivacy breaches
The enforcement action underscores the consequences of non‑compliance with ePrivacy rules for electronic marketing in Ireland.
ADTP REGULATORY BRIEF
EU Commission designates ChatGPT as VLOSE and Reddit, Roblox as VLOPs under DSA
The designations subject the three platforms to heightened DSA compliance requirements, impacting their data handling and AI governance practices.
ADTP REGULATORY BRIEF
Delaware Governor signs HB 380, amending the DPDPA effective Jan 1 2027
The amendment significantly strengthens privacy protections and expands data‑controller obligations in Delaware.
ADTP REGULATORY BRIEF
Data Protection Commission issues €645,000 fine and compliance orders against HSE
The enforcement action underscores GDPR accountability for health data custodians in Ireland.
ADTP REGULATORY BRIEF
CNIL agenda includes review of draft decrees on automated personal data processing and authorizations for health data studies
The agenda signals upcoming CNIL scrutiny of new automated data processing initiatives affecting law‑enforcement and health research.
ADTP REGULATORY BRIEF
Texas bans state funding for ALPRs; Florida orders removal of highway ALPRs
These executive actions curb state‑funded automated license plate reader surveillance, limiting location data collection on drivers.
ADTP REGULATORY BRIEF
AEPD to host data‑protection session at XX Jornadas STIC on 24 Nov 2026
The AEPD’s participation highlights the growing relevance of privacy and data‑protection in AI‑driven cybersecurity discussions.
ADTP REGULATORY BRIEF
Federal judge rules DoD illegally retaliated against Anthropic for refusing mass surveillance use
The decision underscores that companies can refuse unconstitutional uses of AI without facing government retaliation, a key protection for privacy.
ADTP REGULATORY BRIEF
Meta to implement age‑verification framework under $17 B settlement with 52 U.S. states
The settlement imposes extensive age‑verification and data‑retention obligations on Meta, affecting privacy and surveillance of all users.
ADTP REGULATORY BRIEF
Austrian Supreme Court rules CRIF’s use of address‑publisher data for credit scoring violates GDPR purpose limitation
The decision clarifies GDPR purpose‑limitation obligations for credit scoring, paving the way for a consumer class action in Austria.
ADTP REGULATORY BRIEF
California Assembly Bill 1709 passed, bans social media recommendation features for users under 16
The bill could force platforms to collect more personal data from minors while restricting their access to online speech.
ADTP REGULATORY BRIEF
EFF guide on doxxing incident response and digital footprint protection
Provides practical privacy and security measures to help victims mitigate and respond to doxxing campaigns.
ADTP REGULATORY BRIEF
Five US states enact location privacy laws banning sale of precise geolocation data
The enactment creates baseline protections for location data while highlighting enforcement gaps that could limit effectiveness.
ADTP REGULATORY BRIEF
EFF and The Trevor Project advise LGBTQ+ individuals to revise shared information for online safety
The guidance helps LGBTQ+ individuals reduce exposure to doxxing and outing risks by improving personal data control and security practices.
ADTP REGULATORY BRIEF
EFF and allies recommend new privacy safeguards to protect Brazil's electoral integrity
The recommendations aim to use privacy law enforcement to reduce manipulative political content and protect democratic processes.
ADTP REGULATORY BRIEF
Connecticut AG settles with TaxAct over taxpayer data disclosures via tracking tech
The settlement underscores heightened regulatory scrutiny of third‑party tracking and the handling of financial personal data.
ADTP REGULATORY BRIEF
EFF and ACLU sue San Jose Police over warrantless ALPR searches
The case could shape legal standards for location‑data surveillance by law enforcement across California.
ADTP REGULATORY BRIEF
EFF says Meta settlement expands data collection and limits youth rights
The settlement broadens Meta's data collection and surveillance, raising significant privacy and child‑safety concerns.
ADTP REGULATORY BRIEF
French Constitutional Council strikes down law banning social media for under‑15s
The ruling blocks a privacy‑invasive age‑verification regime and sets a precedent for similar restrictions in Europe.
ADTP REGULATORY BRIEF
noyb sends cease‑and‑desist letter to SCHUFA over alleged ‘shadow database’ GDPR violations
The action targets a potential GDPR breach affecting up to 69 million Germans and could lead to a large‑scale class action.
ADTP REGULATORY BRIEF
PDPC publishes Advisory Guidelines on Personal Data in Generative AI at Singapore Data Festival
The new PDPC guidance updates consent and notification requirements for AI, shaping how organizations handle personal and biometric data in Singapore.
Source: LiveThreat Regulatory Intelligence, analysed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.