Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 24 of 393 developments
ADTP REGULATORY BRIEF
EFF submits comments to OHCHR on child rights and digital safety
The submission seeks to shape global recommendations to protect children’s privacy and rights while preserving their online safety and autonomy.
ADTP REGULATORY BRIEF
CNIL outlines obligations for health professionals conducting internal research
The guidance informs health actors how to comply with GDPR when re‑using patient data for internal research, reducing regulatory uncertainty.
ADTP REGULATORY BRIEF
CNIL issues guidance on session replay tools, urging transparency, consent and data minimisation
The guidance aims to protect user privacy by tightening consent and data‑minimisation rules for session replay technologies.
ADTP REGULATORY BRIEF
CNIL issues guidance on session replay tools to ensure GDPR compliance
The guidance helps providers and publishers align session replay technologies with privacy rules, reducing risk of unlawful personal data collection.
ADTP REGULATORY BRIEF
AEPD and Greek Data Protection Authority publish joint guidance on Secure Treatment Environments
The guidance helps data controllers and DPOs comply with the EU Data Governance and Health Data Space regulations by outlining secure, privacy‑by‑design environments for health data reuse.
ADTP REGULATORY BRIEF
EPIC urges EDPB to tighten draft guidelines on web scraping for AI training
The comments highlight significant privacy risks of web‑scraped data for AI, urging stricter guidance to protect individuals under the GDPR.
ADTP REGULATORY BRIEF
AEPD releases a 10‑point guide on safely delegating tasks to AI assistants and agents
The guide helps individuals and organisations mitigate privacy and security risks when allowing AI tools to act on their behalf.
ADTP REGULATORY BRIEF
noyb files five GDPR complaints against Scale AI’s Outlier platform for invasive tracking and biometric surveillance
The filings highlight potential GDPR violations by an AI training platform that surveils its freelance workforce, prompting EU data‑protection authorities to investigate.
ADTP REGULATORY BRIEF
noyb files GDPR complaints (C078, C097) over AI-generated inaccurate personal data
These complaints highlight how AI hallucinations challenge GDPR's accuracy and correction rights for individuals.
ADTP REGULATORY BRIEF
EU Council approves amendment to GDPR allowing unrestricted AI data processing
The amendment could override fundamental privacy rights by permitting AI firms to use all personal data with minimal safeguards.
ADTP REGULATORY BRIEF
Bill C-22 (Lawful Access Act) passes House of Commons, moves to Senate
The bill threatens privacy and security by expanding government surveillance powers and mandating data retention.
ADTP REGULATORY BRIEF
EU proposes Cloud and AI Development Act (CADA) to impose cloud sovereignty requirements
CADA would introduce EU‑wide cloud sovereignty rules, affecting any provider seeking public‑sector contracts across the Union.
ADTP REGULATORY BRIEF
EDPB adopts Guidelines 3/2025 on DSA‑GDPR interplay
The new EDPB guidance helps platforms align DSA duties with GDPR privacy requirements.
ADTP REGULATORY BRIEF
AEPD reports over 3,000 personal data breach notifications in first half of 2026
The surge in breach reports highlights growing cyber risk and reinforces the need for robust notification and preventive measures under GDPR.
ADTP REGULATORY BRIEF
CNIL webinar explains new French telephone prospecting rules effective 11 August 2026
Practitioners must obtain and manage consumer consent before any commercial phone call under the new French law.
ADTP REGULATORY BRIEF
CNIL guidance on reconstituting professional email addresses and data subject rights
The guidance clarifies GDPR‑compliant limits on reconstructing professional emails, reinforcing transparency and data‑subject rights.
ADTP REGULATORY BRIEF
Italian DPA fines Wind Tre €16.7 million for unlawful telemarketing
The fine underscores the GDPR’s strict enforcement of consent and data‑subject rights in telecom marketing.
ADTP REGULATORY BRIEF
noyb ranks EU Parliament members on their stance toward GDPR and ePrivacy amendments
The analysis highlights which EU lawmakers are supporting or undermining current privacy safeguards as the Digital Omnibus reforms progress.
ADTP REGULATORY BRIEF
Italian DPA fines BBVA €5.508 million for ignoring customer’s objection to direct marketing
The enforcement highlights the obligation of controllers to promptly honor opt‑out requests and the financial risk of non‑compliance.
ADTP REGULATORY BRIEF
Italian DPA fines Emirates €180,000 for health data infringements
The enforcement highlights GDPR obligations for clear information and proportionate retention of health data in the aviation sector.
ADTP REGULATORY BRIEF
Italian DPA fines security firm €39,000 for employee data violations
The enforcement highlights the GDPR’s strict requirements for employee data access and transparent processing of location data.
ADTP REGULATORY BRIEF
Italian DPA fines IQVIA €7 million for unlawful processing of patients’ health data
The fine highlights enforcement of GDPR obligations for health data controllers and underscores the need for proper legal bases, transparency, and impact assessments.
ADTP REGULATORY BRIEF
CNIL examines draft deliberation authorizing BIG DATA SANTE to process personal data for anonymized medical research (ONCOVAL)
If approved, the authorization would enable a French company to process health‑related personal data for research, shaping data‑privacy practices in the health sector.
ADTP REGULATORY BRIEF
CNIL closes injunction against FRANCE TRAVAIL after compliance with data security measures
The closure shows that timely remediation of GDPR security deficiencies can halt additional penalties.
Source: regulatory intelligence from a founding sponsor, analyzed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.