September 3, 2026

The EU General Court's dismissal of the challenge to Microsoft Edge's non-designation under the Digital Markets Act closes a significant avenue for browser rivals and reinforces the Commission's broad discretion over gatekeeper threshold determinations. In Case T-357/24, Opera Norway v Commission, the court affirmed that third parties face a high bar when contesting non-designation decisions, narrowing the legal pathway for competitors who had sought to subject Edge to DMA interoperability and self-preferencing obligations. The ruling matters most for technology firms monitoring the DMA's competitive scope: it confirms that the Commission retains considerable latitude in deciding who bears gatekeeper obligations, and that judicial review of non-designation will be deferential rather than searching. Platform rivals and their counsel should reassess litigation strategies that rely on third-party standing to compel designation.

Watch level: PREPARE (browser vendors, platform rivals with EU market exposure, competition counsel)

Executive action in Texas and Florida reflects a rapidly hardening regulatory environment for automated license plate reader networks on public infrastructure. Texas Governor Abbott banned state agency spending on Flock Safety cameras on August 28 following disclosure of $30 million in undisclosed surveillance network funding; Florida Governor DeSantis issued a Florida DOT order on August 31 requiring removal of all ALPRs from state highway rights-of-way within 30 days and revoking all existing installation permits. The parallel actions by two of the largest US states indicate that vendor relationships with state and local governments are now subject to procurement scrutiny that was absent as recently as 2025. Local agencies that installed Flock or comparable systems under non-transparent funding channels face immediate compliance exposure under the Florida order, and procurement teams across both states should audit current contracts against the new restrictions.

Watch level: PREPARE (ALPR vendors, local law enforcement agencies in TX and FL, state procurement counsel)

Europe's transition from eIDAS 2.0 pilots to operational deployment is accelerating across multiple jurisdictions simultaneously. Romania's ROWallet is progressing toward a January 2027 full rollout, Moldova has completed the first private-sector bank integration of a national digital ID infrastructure, and Germany and Italy are each advancing enabling legislation. Mastercard's Lighthouse accelerator is backing wallet-integration firms, pointing to near-term commercial demand for wallet-compatible onboarding and compliance tooling. Organizations operating across European markets should treat wallet-compatible identity infrastructure as a near-term compliance requirement rather than a future planning item, particularly those in financial services and regulated professional sectors subject to eIDAS 2.0 relying-party obligations.

Watch level: PREPARE (EU-market financial institutions, identity verification vendors, eIDAS relying parties)

Three US House bills advancing through committee underscore that federal AI and data governance legislation is moving on multiple tracks simultaneously. HR 10207, which would require verifiable parental consent before platforms process minors' personal data, has been referred to the House Committee on Energy and Commerce. HR 5350, the FAIR Act of 2025 targeting algorithmic fairness standards, has been referred to the House Judiciary Committee. HR 4950, the Data BRIDGE Act, has advanced from subcommittee to full committee by voice vote, marking the furthest procedural progress of the three. None of these measures is close to enactment, but the Data BRIDGE Act's subcommittee advancement warrants closer tracking by data governance teams assessing federal legislative risk alongside state-level frameworks.

Watch level: MONITOR (platform operators, algorithmic decision-making vendors, federal legislative counsel)

The UK National Audit Office's assessment of the country's digital identity infrastructure reinforces that technical foundations exist but institutional prerequisites for scaling remain unmet. The NAO's 48-page report concludes that the GOV.UK app, DVS Trust Framework, and mobile driver's license provide sufficient building blocks, provided that any successor program defines objectives, use cases, funding models, and public-private roles before committing to technical delivery. The report follows Prime Minister Burnham's July cancellation of the prior digital identity scheme, which left certified DVS providers in regulatory limbo and contributed to at least one market exit. The ICO's parallel findings on facial recognition oversight gaps in UK policing — identifying absent policy frameworks, inadequate data retention practices, and the failure to treat FRT as a standing oversight-board item — compound the governance deficit the NAO identifies, together pointing to a structural accountability gap in how biometric and digital identity systems are being deployed across UK public institutions.

Watch level: MONITOR (UK DVS-certified providers, police accountability bodies, UK public-sector digital identity programs)

Still developing: Federal Court ruling that DOD unlawfully retaliated against Anthropic over surveillance refusal — no material change since last reported; case remains pending on the unresolved question of whether technology-use restrictions constitute protected speech. OMB Login.gov mandate (M-26-18) — no material change since last reported; agency CIO inventory deadline of 60 days and NIST SP 800-63-4 guidance deadline of 120 days continue to run. Meta-State AG settlement criticism — no material change since last reported; settlement terms and EFF objections remain as previously covered. House Intelligence Committee CBP biometrics recommendation — no material change since last reported; recommendation stands as published.