July 22, 2026

Senate handling of the KIDS Act now represents the most consequential near-term decision point in US platform privacy governance. The House passed H.R. 7757 by a 267-117 margin, but the bill's reliance on divergent age-gating standards across its component provisions creates a structural compliance problem: satisfying them would compel platforms to collect government-issued ID or biometric data at scale. Civil liberties organizations, led by EFF, are mounting active lobbying campaigns for Senate rejection. The bill's fate will shape whether age-verification compliance becomes a federal mandate or reverts to the fragmented state-level patchwork currently in place.

Watch level: PREPARE (platform operators, identity verification vendors, children's privacy counsel)

The EDPB has extended its GDPR interpretive architecture to two additional technical domains that have until now lacked authoritative guidance. Alongside previously noted guidance on anonymisation and AI web scraping — which this briefing covered in its prior edition — the Board has now adopted final guidelines on blockchain technologies, addressing how personal data processed on distributed ledgers must satisfy GDPR obligations including erasure rights. Organizations building or advising on blockchain-native applications in the EU should treat this document as immediately operative compliance guidance, not aspirational commentary. The dual release signals that the EDPB views AI and decentralized infrastructure as coequal regulatory frontiers.

Watch level: PREPARE (blockchain application developers, EU-facing DeFi operators, AI training pipeline counsel)

The FTC's $2.25 million settlement with tenant screening firm RentGrow reinforces that consumer reporting accuracy obligations under FCRA carry active enforcement consequences. The Commission's allegations focused on duplicate record reporting and missing source disclosures — procedural failures that courts and regulators have long identified as FCRA core requirements, yet which the settlement suggests remain systemic in the sector. Background screening firms with CRA status should treat this action as a prompt for internal accuracy-procedure audits. The FTC's sustained focus on the tenant screening vertical indicates that RentGrow is unlikely to be the last target.

Watch level: PREPARE (consumer reporting agencies, tenant screening vendors, proptech compliance teams)

Two developments covered in prior editions warrant brief status notes. The EDPB-AMLA joint guidelines on AML-GDPR data-sharing frameworks remain in development, with no new substantive details released in the past 24 hours; financial institutions should continue monitoring the drafting process for consultation windows. Similarly, Dock Labs' EUDI Wallet market boundary analysis — flagging unresolved governance questions around wallet certification and cross-border interoperability ahead of the 2027 mandatory rollout — has not advanced materially. UK-based firms with EU-regulated sector exposure remain in a holding pattern pending resolution of those open framework elements.

Watch level: MONITOR (financial institution compliance teams, UK fintech and telecoms operators with EU market presence)