Regulatory Watch
New laws, rules, guidance, enforcement actions and court decisions in privacy, AI and cybersecurity. Every item links to its primary source.
Showing 24 of 415 developments
ADTP REGULATORY BRIEF
AEPD initiates enforcement actions against TikTok for child sexual abuse content
The action demonstrates enforcement of EU data‑protection rules to protect minors on online platforms.
ADTP REGULATORY BRIEF
CNIL to attend Salon des maires 2026 and release updated data‑protection guide for local authorities
The guidance helps French local governments meet privacy and AI‑governance obligations, strengthening trust and legal compliance.
ADTP REGULATORY BRIEF
CNIL issues ten cybersecurity fines to French local authorities
The sanctions highlight the growing enforcement of cybersecurity and data‑protection obligations for public bodies in France.
ADTP REGULATORY BRIEF
EFF submits comments to OHCHR on child rights and digital safety
The submission seeks to shape global recommendations to protect children’s privacy and rights while preserving their online safety and autonomy.
ADTP REGULATORY BRIEF
Commission preliminarily finds TikTok’s ‘For You’ feed breaches DSA over harmful ‘rabbit hole’ effect
The finding signals heightened regulatory scrutiny of algorithmic recommendation systems under the EU’s DSA, with potential obligations for large online platforms.
ADTP REGULATORY BRIEF
CNIL outlines obligations for health professionals conducting internal research
The guidance informs health actors how to comply with GDPR when re‑using patient data for internal research, reducing regulatory uncertainty.
ADTP REGULATORY BRIEF
Delhi Police issue takedown requests to X targeting Indian digital‑rights groups documenting online censorship
The police‑driven takedown requests against groups that track censorship create a chilling effect on transparency and freedom of expression in India.
ADTP REGULATORY BRIEF
CNIL plenary agenda (5 Nov 2026) covers AI guidance, automated decision communication, and draft decree on genetic/fingerprint databases
The agenda signals upcoming CNIL guidance on AI in health and potential regulatory changes to biometric data registers, impacting data controllers and processors.
ADTP REGULATORY BRIEF
CNIL issues guidance on session replay tools, urging transparency, consent and data minimisation
The guidance aims to protect user privacy by tightening consent and data‑minimisation rules for session replay technologies.
ADTP REGULATORY BRIEF
CNIL issues guidance on session replay tools to ensure GDPR compliance
The guidance helps providers and publishers align session replay technologies with privacy rules, reducing risk of unlawful personal data collection.
ADTP REGULATORY BRIEF
AEPD and Greek Data Protection Authority publish joint guidance on Secure Treatment Environments
The guidance helps data controllers and DPOs comply with the EU Data Governance and Health Data Space regulations by outlining secure, privacy‑by‑design environments for health data reuse.
ADTP REGULATORY BRIEF
Commission seeks feedback on advertising repositories under the Digital Services Act
The feedback will influence how ad transparency measures are implemented, affecting platforms, advertisers and researchers.
ADTP REGULATORY BRIEF
AEPD to host live discussion on algorithmic transparency on 10 November 2026
The session provides practical guidance on meeting GDPR and AI‑Act transparency requirements for automated decision‑making.
ADTP REGULATORY BRIEF
CEPD launches Privacy for Kids platform to educate children and families on data privacy
The initiative creates a Europe‑wide hub of educational resources to improve children’s digital privacy awareness.
ADTP REGULATORY BRIEF
Russia's Roskomnadzor targets VPN apps on Apple App Store
The Russian government is intensifying enforcement against privacy tools, limiting users' ability to bypass censorship.
ADTP REGULATORY BRIEF
EPIC urges EDPB to tighten draft guidelines on web scraping for AI training
The comments highlight significant privacy risks of web‑scraped data for AI, urging stricter guidance to protect individuals under the GDPR.
ADTP REGULATORY BRIEF
CNIL imposes €7 million fine on FNAC Darty and FNAC Direct for illegal cookie tracking
The fine underscores strict enforcement of cookie consent rules under France’s data‑protection law.
ADTP REGULATORY BRIEF
CNIL fines French retailer Fnac Darty €7 million for illegal mobile‑app tracking
The fine underscores the requirement for consent before tracking users for targeted advertising.
ADTP REGULATORY BRIEF
EFF urges stronger safeguards for automated content moderation ahead of elections
The guidance stresses that better‑designed automated moderation is essential to protect democratic discourse and personal data during elections.
ADTP REGULATORY BRIEF
Future of Privacy Forum expands youth policy to integrate privacy, safety, and well‑being, emphasizing AI inference risks
The initiative matters because it aims to shape product design and policy that protect children’s data and well‑being amid rising AI-driven personalization.
ADTP REGULATORY BRIEF
French court orders DNS resolver Quad9 to block sites, prompting its withdrawal from France
The court order forces a privacy‑focused DNS service to exit France, highlighting the impact of site‑blocking mandates on internet privacy.
ADTP REGULATORY BRIEF
AEPD releases a 10‑point guide on safely delegating tasks to AI assistants and agents
The guide helps individuals and organisations mitigate privacy and security risks when allowing AI tools to act on their behalf.
ADTP REGULATORY BRIEF
noyb files five GDPR complaints against Scale AI’s Outlier platform for invasive tracking and biometric surveillance
The filings highlight potential GDPR violations by an AI training platform that surveils its freelance workforce, prompting EU data‑protection authorities to investigate.
ADTP REGULATORY BRIEF
AdFection malware campaign exploits behavioral ad tech to deliver zero‑click spyware
The report highlights how ad‑tech can be weaponized for spyware, underscoring urgent privacy and security risks for high‑risk users.
Source: regulatory intelligence from a founding sponsor, analyzed by ADTP. Briefs summarize the linked source and are not legal advice; the linked source is the authority. Dates appear only when the source states them.