July 16, 2026

US legislative and federal enforcement pressure on data-intensive industries intensified this week, with the House-passed KIDS Act now exposing Senate Republicans and Democrats alike to competing lobbying campaigns over child safety and civil liberties. The bill passed 267-117, a margin that masks deep structural disagreement: its age-gating mechanism cannot, critics argue, function without collecting biometric or government identity data from all users, not only minors. That design tension is precisely the argument the Electronic Frontier Foundation and allied organizations are carrying into Senate offices ahead of any floor consideration.

Watch level: PREPARE (platform operators, age-verification vendors, in-house counsel at social media and streaming companies)

The FTC's $2.25 million settlement with RentGrow marks a targeted signal to the tenant-screening sector that FCRA compliance is under active federal scrutiny. The agency's allegations centered on duplicate record reporting, inadequate accuracy procedures, and missing source disclosures — failures that directly affect housing applicants' ability to contest erroneous data. Consumer reporting agencies operating in residential rental markets should treat this settlement as a prompt to audit accuracy controls and disclosure practices before the FTC identifies the next target.

Watch level: PREPARE (tenant screening CRAs, property management technology vendors, FCRA compliance counsel)

The EDPB's anonymisation and web scraping guidance, now operative, narrows the interpretive space AI developers have relied upon when assembling training datasets from publicly accessible sources. The board's positions on what constitutes genuine anonymisation — and under what conditions web scraping qualifies as a lawful processing activity — directly affect data pipeline design for large language model development. Organizations that built GDPR compliance rationales on prior ambiguity in these areas should initiate a gap assessment against the board's updated positions. This is confirmation of guidance previously noted in this briefing; the operative date, not the publication, is the relevant compliance trigger.

Watch level: PREPARE (generative AI developers, data controllers using web-scraped training data, EU-market AI compliance teams)

The EDPB–AMLA joint guidelines initiative signals a structural effort to resolve the longstanding tension between GDPR data minimisation obligations and AML information-sharing requirements in the EU financial sector. The two regimes have historically pulled in opposite directions: AML frameworks demand broad data retention and inter-institutional sharing, while GDPR constrains both. Joint guidance will carry weight with supervisory authorities in both domains, potentially reshaping how banks, payment institutions, and their compliance partners document and justify cross-entity data flows. The consultation process warrants close monitoring, as final positions will likely be difficult to contest once adopted.

Watch level: MONITOR (EU-regulated financial institutions, AML compliance officers, DPOs in the banking and payments sector)

Dock Labs' delineation of the EUDI Wallet market structure offers useful operational clarity for private-sector participants still assessing entry pathways ahead of the 2027 mandatory rollout. The core distinction — government-reserved functions versus market-accessible attestation services — confirms that qualified and non-qualified electronic attestation of attributes remain viable commercial opportunities, though certification schemes and cross-border interoperability standards remain incomplete. Organizations that have not yet mapped their intended role against the three available pathways (relying party, issuer, or wallet provider) should do so now, as regulatory conditions for each differ materially and several governance elements are still being finalized.

Watch level: MONITOR (identity technology vendors, financial institutions, travel and healthcare sectors considering EUDI Wallet integration)