Briefing Archive

Daily intelligence briefings,
distilled.

Daily intelligence briefings on privacy and AI governance developments. Each briefing synthesises the past 24 hours of regulatory activity into analyst-grade prose.

July 2026

July 24, 20262026-07-24
litigationCJEU Coyote System Ruling Extends Platform Liability to Content Organization and Presentation
litigationFourth Circuit Permits Warrantless Manual Phone Searches at US Border
standardsEDPB Finalizes Anonymisation and Web Scraping Standards for Generative AI
Read briefing →
July 23, 20262026-07-23
litigationSupreme Court Ruling Threatens EU-US Data Privacy Framework Adequacy
enforcementEuropean Commission Fines AliExpress €550M; Finds Meta in Preliminary DSA Breach
standardsEU AI Act Article 50 Transparency Guidelines Finalized; August 2 Enforcement Date Imminent
Read briefing →
July 22, 20262026-07-22
legislationKIDS Act Reaches Senate with Biometric Age-Verification Mandate in Play
standardsEDPB Finalizes Blockchain GDPR Guidelines Alongside AI Scraping Guidance
enforcementFTC $2.25M RentGrow Settlement Targets Systemic FCRA Accuracy Failures
Read briefing →
July 21, 20262026-07-21
legislationKIDS Act Moves to Senate with Age-Verification Compliance Clock Running
standardsEDPB Sets GDPR Standards for AI Training Data Anonymisation and Web Scraping
standardsEDPB-AMLA Joint Guidelines to Formalize AML-GDPR Compliance Framework
Read briefing →
July 20, 20262026-07-20
standardsEDPB Finalizes Blockchain Guidelines Alongside AI Data-Sourcing Rules
standardsEDPB-AMLA Joint Guidelines to Merge Privacy and AML Supervisory Frameworks
legislationKIDS Act Clears US House; Senate Vote to Set Age-Verification Compliance Scope
Read briefing →
July 17, 20262026-07-17
legislationKIDS Act Passes House; Senate Vote to Determine Scale of Age-Verification Compliance Burden
standardsEDPB Anonymisation and Web Scraping Guidance Now Authoritative for AI Training Data
enforcementFTC RentGrow Settlement Sets FCRA Benchmark for Tenant-Screening Data Quality
Read briefing →
July 16, 20262026-07-16
legislationKIDS Act Reaches Senate With Structural Age-Verification Privacy Risk Unresolved
enforcementFTC Settles RentGrow FCRA Case, Signaling Tenant-Screening Sector Scrutiny
standardsEDPB Anonymisation and Web Scraping Guidance Now Operative for AI Developers
Read briefing →
July 15, 20262026-07-15
legislationKIDS Act Heads to Senate With Intensified Civil Liberties Opposition
standardsEDPB Anonymisation and Web Scraping Guidance Now Operative for AI Developers
standardsEDPB–AMLA Joint Guidelines to Govern Financial Information-Sharing Under Dual Regime
Read briefing →
July 14, 20262026-07-14
standardsEDPB Anonymisation and Web Scraping Guidance Sets AI Training Data Compliance Bar
legislationUS House Passes KIDS Act 267–117, Age-Verification Mandates Move to Senate
enforcementFTC Settles with RentGrow for $2.25M Over FCRA Accuracy and Disclosure Failures
Read briefing →
July 13, 20262026-07-13
litigationEU Refers Ireland, Spain, France, Netherlands to CJEU Over NIS2 Failures
litigationSCOTUS Permits Texas App Store Age Verification Law to Take Effect
enforcementGarante Fines Character.AI as EDPB Finalises AI Training Data Guidelines
Read briefing →
July 10, 20262026-07-10
standardsEDPB Finalises AI Web Scraping and Anonymisation Guidelines Under GDPR
legislationEuropean Parliament Reinstates Voluntary CSAM Scanning Derogation Under ePrivacy Directive
legislationUS House Passes KIDS Act; Senate Opposition Signals Contested Path
Read briefing →
July 9, 20262026-07-09
legislationSenate Introduces Broadest-Ever Federal AI Workplace Surveillance Bills
litigationEU General Court Upholds DMA Gatekeeper Designation Against Apple
legislationEU Commission Opens Data Sovereignty Consultation Through September 8
Read briefing →
July 8, 20262026-07-08
litigationSupreme Court Allows Texas App Store Age Verification Law to Take Effect Pending Litigation
litigationDC Judge Orders Clearview AI Disclosure, Extending Judicial Biometric Transparency Pattern
industryUS Builds Federated Biometric Screening Network Across Central America Without Full Public Legal Framework
Read briefing →
July 7, 20262026-07-07
litigationSupreme Court Extends Fourth Amendment Protection to Short-Term Location Data, Threatening Geofence Warrants
legislationFederal AI Preemption Impasse Deepens as Illinois Enacts Frontier Model Audit Law
legislationWhite House Quantum EOs Signal Post-Quantum Migration Urgency for Critical Infrastructure
Read briefing →
July 6, 20262026-07-06
litigationEU Commission Reviewing DPF Adequacy in Light of US Agency-Independence Ruling
legislationAgentic AI Emerges as Discrete Regulatory Category Across HK, California, and Michigan Simultaneously
industrySainsbury's Facewatch Rollout Expands to 200+ UK Stores Amid Oversight Gap
Read briefing →
July 3, 20262026-07-03
litigationSchrems Formally Notifies Intent to Challenge EU-US Data Privacy Framework
litigationUS Supreme Court Agency Independence Ruling Threatens DPF Adequacy Foundations
industryClearview AI FedRAMP High Review Signals Structural Shift in Federal Facial Recognition Procurement
Read briefing →
July 2, 20262026-07-02
legislationRhode Island Enacts Genetic Privacy Law — Fifth State in 2024
standardsCNIL Dual Publication Elevates Connected Vehicle Location Data Risk
legislationEU LED Evaluation: Member State DPA Submissions Now with Commission
Read briefing →
July 1, 20262026-07-01
standardsCNIL Issues Sectoral Recommendations on Connected Vehicle Location Data
legislationEU Member State DPAs Submit LED Evaluation Responses, Signaling Revision Cycle
legislationUS House Bill Proposes MFA Mandate for Healthcare.gov Access
Read briefing →

June 2026

June 30, 20262026-06-30
standardsICO Guidance Clarifies Recognized Legitimate Interest as Distinct Lawful Basis
legislationRhode Island Enacts DTC Genetic Privacy Law, Fifth State in Pattern
legislationUS House Voluntary AI Disclosure Pilot Bill Enters Committee Review
Read briefing →
June 29, 20262026-06-29
standardsG7 DPAs Issue Joint Principles on Child Privacy and AI Governance
legislationDual US House AI Bills Propose Mandatory Developer Reporting and Voluntary Disclosure Pilot
legislationHR 9482 Would Ban Data Broker Sales of Sensitive Personal Data
Read briefing →
June 26, 20262026-06-26
legislationHouse Floor Sprint: KIDS Act, Purchase Privacy, NO FAKES Act Advance Simultaneously
legislationEU AI Act Article 50 Deadline Is Six Weeks Out — No Omnibus Extension Applies
enforcementTexas AG Pursues Carnival Cruise Line Post-Breach, Confirming Enforcement Pattern
Read briefing →
June 25, 20262026-06-25
legislationEU AI Act Article 50 transparency obligations take effect 2 August 2026 — compliance window closing
analysisSection 702 surveillance authority lapses after Congress fails to reauthorize
legislationHouse KIDS Act package advances toward floor vote; Senate passage uncertain
Read briefing →
June 24, 20262026-06-24
legislationWhite House mandates federal post-quantum cryptography transition
legislationEUDI Wallet biometric portrait made optional by member state, fracturing compliance landscape
litigationArkansas AG sues Roblox and Discord as two-stage child exploitation pipeline
Read briefing →
June 23, 20262026-06-23
legislationEU Digital Omnibus confirms AI Act compliance delays; Council approval pending
litigationSixth Circuit reinstates Ohio age assurance law, deepens circuit split toward SCOTUS
litigationMSG biometric breach class action tests liability for persistent facial recognition infrastructure
Read briefing →
June 22, 20262026-06-22
litigationFlorida FRT liability dispute sets national precedent framing: vendor insulation, officer responsibility
legislationOfcom flags enforcement unreadiness for UK under-16 social media ban before rollout begins
legislationJAWBONE Act targets government speech coercion of platforms and AI providers
Read briefing →
June 19, 20262026-06-19
legislationCanada's Bill C-22 encryption backdoor mandate heads to vote, platform exits threatened
industryICE plans facial recognition app rollout to 1,100+ local law enforcement agencies
litigationEFF amicus challenges Anthropic sanctions as First Amendment retaliation; export controls follow
Read briefing →
June 18, 20262026-06-18
legislationEU Parliament adopts AI Omnibus, weakening AI Act fundamental rights provisions ahead of enforcement
enforcementAEPD fines Amadeus €18M for PNR repurposing, sharpening GDPR risk for data intermediary platforms
legislationVermont enacts comprehensive privacy law, becoming fourth US state to do so in 2026
Read briefing →
June 17, 20262026-06-17
enforcementTAKE IT DOWN Act in force: FTC actively enforcing 48-hour NCII removal mandate
industrySecret Service deploys facial recognition app contradicting its own published Privacy Impact Assessment
legislationEU biometric governance acceleration: Eurodac live, cross-border sharing consultation open, Germany proposes mass facial matching
Read briefing →
June 16, 20262026-06-16
enforcementUS government invokes national security authority to disable Anthropic AI models — first model-level export control action
legislationUK announces under-16 social media ban targeting algorithmic platforms, aiming to exceed Australia's framework
standardsEU AI Act high-risk classification guidelines published; Digital Omnibus provisional agreement reached
Read briefing →
June 15, 20262026-06-15
legislationFISA Section 702 Expires, Creating Immediate US Surveillance Authority Gap
enforcementSouth Korea PIPC Issues Record $409M Fine Against Coupang
legislationEU Age Verification Architecture Solidifies Around EUDI Wallet
Read briefing →
June 12, 20262026-06-12
legislationFederal AI Preemption Revived via Children's Safety Legislative Vehicle
enforcementCanada OPC Finds Grok Operators Violated Privacy Law Over Deepfakes
standardsEDPB Adopts Breach Notification Template, Warns Against Personal Data Definition Changes
Read briefing →
June 11, 20262026-06-11
standardsUS Multi-Agency Guidance Sets Security Baseline for Agentic AI Systems
legislationFISA Section 702 Faces Expiration as Warrant Requirement Standoff Deepens
legislationMassachusetts Passes Privacy Bill with Private Right of Action
Read briefing →
June 10, 20262026-06-10
enforcementFTC Orders Illuminate Education Security Overhaul After 10M-Student Breach
legislationUK OS-Level Nudity Detection Proposal Would Displace DVS Market and Impose Three-Month Deadline
legislationeIDAS 2.0 IAD Certification Now Mandatory as QTSP Deadline Passes
Read briefing →
June 9, 20262026-06-09
standardsEU AI Act High-Risk Classification Guidelines Published by Commission
industryMeta Removes Facial Recognition from Smart Glasses After Public Disclosure
legislationCalifornia Digital Age Assurance Act Shifts Compliance Burden to Device and App Store Operators
Read briefing →
June 8, 20262026-06-08
legislationConnecticut Omnibus AI Law: Broadest US State AI Governance Framework Enacted
enforcementFTC Finalizes Operational Controls Against Illuminate Education Over Student Data Failures
legislationEU Cloud and AI Development Act: New Procurement and Localization Risk for Non-EU Vendors
Read briefing →
June 5, 20262026-06-05
legislationTrump AI Executive Order and Imminent CISA Binding Directive Set Federal AI Security Baseline
litigationSupreme Court Affirms FCC Authority to Fine Telecoms for Unauthorized Location Data Sharing
enforcementFTC Opens Comment Period on X Corp. Bid to Vacate Twitter Consent Order — M&A Precedent at Stake
Read briefing →
June 4, 20262026-06-04
legislationCISA Binding AI Directive Imminent — Federal Vulnerability Management Requirements Incoming
legislationEU Technological Sovereignty Package Introduces Mandatory Cloud and AI Procurement Framework
legislationConnecticut SB 4 and SB 5 Signed — Broad Privacy and AI Accountability Rules Take Effect July
Read briefing →
June 3, 20262026-06-03
enforcementAEPD Biometric Consent Ruling Creates Structural Conflict for EU Digital Identity Wallet
legislationWhite House Revised AI Executive Order Narrows Federal Governance to Security and IP Controls
analysisNYDFS Industry Letters Formally Name Frontier AI as Cybersecurity Threat Under Part 500
Read briefing →
June 2, 20262026-06-02
legislationConnecticut SB 4 Creates Four-Surface Compliance Obligation: Data Brokers, Genetic Data, Pricing Algorithms, CTDPA Amendments
enforcementOCR's Four Ransomware Settlements Signal Risk Analysis as Primary HIPAA Enforcement Mechanism Ahead of Security Rule Amendments
enforcementNYDFS Delta Dental Settlement Confirms Procedural Cybersecurity Gaps — Not Just Breaches — Carry Material Financial Exposure Under Part 500
Read briefing →
June 1, 20262026-06-01
legislationEU Interoperability Framework Goes Operational: CIR and Search Portal Activation Dates Set
standardsCISA-NSA Agentic AI Guidance and NY DFS Frontier AI Letters Establish New US Compliance Baseline
enforcementItaly Garante Warns Over AI Emotion-Monitoring in Employment; CNIL Fines IQVIA €5M on Health Data
Read briefing →

May 2026

May 29, 20262026-05-29
enforcementEC Fines Temu €200M Under DSA, Elevating Risk Assessment Methodology to Enforcement Target
legislationDLARA Clears House Committee 23-0, Advancing Federal Data and AI Accountability Framework
legislationForeign Adversary AI Risk Assessment Bill Passes House Committee 45-0
Read briefing →
May 28, 20262026-05-28
enforcementEPIC Coalition FTC Filing Targets Roblox Dark Patterns, Tests Platform Design Enforcement Frontier
analysisEFF Documents Systematic ALPR Mission Creep, Amplifying Pressure for Use-Limitation Legislation
standardsFrance CNIL Revises Health Research Methodologies MR-001 and MR-003, Expanding Cross-Border Scope
Read briefing →
May 27, 20262026-05-27
litigationSeventh Circuit Caps BIPA Damages Retroactively, Reshaping Litigation Reserves
litigationFTC-Kochava Settlement Establishes Consent and Audit Template for Location Data Brokers
litigationMeta Challenges Ofcom's Global-Revenue Penalty Basis Under UK Online Safety Act
Read briefing →
May 26, 20262026-05-26
litigationCoordinated BIPA Suits Target AI Voice Training at Nine Major Tech Firms
litigationSupreme Court Hears Chatrie Geofence Warrant Case; No Binding Standard Yet Exists
litigationTexas AG Sues Meta Over WhatsApp Encryption Claims and Netflix Over Surveillance Design
Read briefing →
May 25, 20262026-05-25
enforcementOfcom Secures Platform Commitments Under UK Online Safety Act, Establishing Enforcement Baseline
legislationNew York High-Risk AI Bill Proposes Private Right of Action and Independent Audit Mandate
legislationSEC Regulation S-P Deadline for Smaller Entities Arrives June 3, 2026
Read briefing →
May 22, 20262026-05-22
enforcementTexas AG Issues CID to Meta Over Ray-Ban AI Smart Glasses Biometric Collection
legislationColorado Enacts New ADMT Law, Superseding and Replacing Prior AI Act
enforcementFTC Settles AI 'Active Listening' Adtech Case for $930K, Reinforcing Capability Misrepresentation Risk
Read briefing →
May 21, 20262026-05-21
enforcementFTC Moves to Active Enforcement on TAKE IT DOWN Act With Warning Letters and Complaint Portal
legislationEU-US Biometric Database Access Demand Creates Direct GDPR and ECJ Conflict
legislationOfcom Mandates Hash-Matching for Deepfake Detection; UK Nudification Ban Forthcoming
Read briefing →
May 20, 20262026-05-20
standardsEU AI Act Classification Guidelines Open for Comment: June 23 Deadline
enforcementFTC Activates TAKE IT DOWN Act Enforcement Against Non-Compliant Platforms
legislationNew York AG Campaigns for Surveillance Pricing Ban Amid Maryland Precedent
Read briefing →
May 19, 20262026-05-19
legislationEU AI Act First Amendments Agreed: New Timelines and Prohibitions Confirmed
enforcementEU DPA Coalition Prepares Joint ChatGPT Enforcement Findings Under GDPR
legislationMaryland Enacts First U.S. State Law Restricting Algorithmic Personalized Pricing in Essential Goods
Read briefing →
May 18, 20262026-05-18
enforcement/analysisUK Commissioner Warns of Legal Exposure as Met Deploys LFR at Protest — No Statutory Framework in Place
legislationSenate Democrats Demand DHS Abandon Covert Biometric Smart Glasses for ICE/CBP
legislationMulti-State Algorithmic Accountability Wave: CT, NY, TX Advance AI Employment and Lending Bills
Read briefing →
May 15, 20262026-05-15
legislationEU Commission Advances Binding Teen Social Media Age Law Backed by Seven States
legislationEU Council Concludes Council of Europe AI Convention, Binding Treaty Now in Effect
legislationDHS Appropriations Act Quietly Embeds Autonomous Surveillance and Biometric Collection Authority
Read briefing →
May 14, 20262026-05-14
enforcementFTC Bans Kochava Sensitive Location Data Sales Under FTC Act Authority
industryICE Sole-Source Iris Database Contract Signals Federal Biometric Expansion
legislationEU Commission Eyes Summer Social Media Age Minimum Legislation
Read briefing →
May 13, 20262026-05-13
legislationEU Ratifies Council of Europe AI Convention, Creating Binding Multilateral AI Obligations
enforcementFTC Sets Firm May 19 Take It Down Act Deadline for Major Platforms
legislationEU AI Act Deal Extends High-Risk Deadlines to 2027, Accelerates Nudification Ban to 2026
Read briefing →
May 12, 20262026-05-12
legislationEU AI Act High-Risk Deadline Extended to 2027; Deepfake Ban Set for 2026
enforcementParis Prosecutors Seek Criminal Indictment of X, xAI Over Deepfakes and CSAM
enforcementCalifornia Secures Record $12M CCPA Settlement Against GM for Driver Data Misuse
Read briefing →
May 11, 20262026-05-11
enforcementEU Regulators Press Anthropic for Mythos Model Access Under AI Act Oversight Provisions
legislationGUARD Act Clears Senate Committee, Targeting AI Chatbot Access for Minors
legislationEU AI Act Simplification Deal Rejected as Insufficient by Lawmakers and Industry
Read briefing →
May 8, 20262026-05-08
enforcementFTC Bans Kochava from Selling Sensitive Location Data, Sets Consent Standard for Data Brokers
industryMeta AI Age Profiling Across EU, US, and Brazil Triggers Multi-Jurisdictional Compliance Risk
legislationGermany Industry Exemption Push Signals Material Revision Risk to EU AI Act Compliance Architecture
Read briefing →
May 6, 20262026-05-06
enforcementEC Preliminary DSA Finding Against Meta Sets Binding Age-Assurance Standard for All VLOPs
legislationGUARD Act Clears Senate Judiciary Committee, Moving AI Age-Gating Toward Floor Vote
legislationGermany Revives Police Facial Recognition on Social Media, Triggering EU AI Act Conflict
Read briefing →
May 5, 20262026-05-05
enforcementEC Formalizes DSA Evidentiary Record Against Meta, Setting Sector-Wide Age-Assurance Standard
legislationGUARD Act Advances With Definitions Broad Enough to Capture Routine AI Services
legislationCalifornia AB-1709 Nears Vote on Universal Biometric Age Verification for Social Media
Read briefing →
May 4, 20262026-05-04
enforcementEC Formally Accuses Meta of DSA Breach Over Under-13 Access Controls
legislationGermany Proposes Social Media Facial Recognition Powers, Testing EU AI Act Limits
legislationGUARD Act Advances With Overbroad Scope as FISA 702 Reauthorization Lacks Warrant Protections
Read briefing →
May 3, 20262026-05-03
enforcementEC Preliminary DSA Finding Against Meta Redefines Age-Assurance Standards for VLOPs
legislationUS GUARD Act Advances With Overbroad AI Age-Gating Scope, Federal Floor Vote Approaching
legislationCalifornia AB-1709 Nears Floor Vote on Under-16 Social Media Ban and Universal ID Verification
Read briefing →
May 1, 20262026-05-01
enforcementOfcom Crystallizes Criminal Liability Threat for Executives on AI Nudification
legislationAlabama APDPA: Narrow Sale Definition Limits Enforcement Exposure
legislationNorth Carolina Minor Social Media Bill Stalls in Multi-Committee Review
Read briefing →

April 2026

April 30, 20262026-04-30
enforcementOfcom Advances Criminal Liability for Executives Over AI Nudification Failures
legislationAlabama APDPA in Effect: Asymmetric Thresholds Create Multi-State Compliance Audit Need
legislationNorth Carolina Minor Social Media Bill Faces Multi-Committee Hurdle
Read briefing →
April 29, 20262026-04-29
enforcementOfcom Signals Criminal Liability for Executives Over AI Nudification Failures
legislationAlabama Becomes 21st State with Comprehensive Privacy Law
legislationNorth Carolina Bill Advances Minor Social Media Protections Through Committee
Read briefing →
April 24, 20262026-04-24
legislationWhite House AI Framework Proposes Federal Preemption of State AI Laws
enforcementEFF Complaints Allege Google Violated User Notification Policy in ICE Disclosure
legislationVirginia Enacts Categorical Ban on Sale of Precise Geolocation Data
Read briefing →
April 23, 20262026-04-23
enforcementFlorida AG Opens Formal Probe into OpenAI, Signaling State-Level AI Enforcement Model
standardsEDPB Adopts Standardized DPIA Template and Advances Scientific Research Guidelines
legislationCongress Demands DHS Account for Palantir and Biometric Surveillance Tools in Immigration Enforcement
Read briefing →
April 22, 20262026-04-22
legislationWhite House Federal AI Framework Targets State Law Preemption
legislationVirginia Enacts Categorical Ban on Sale of Precise Geolocation Data
enforcementEFF Files AG Complaints Over Google Disclosure of User Data to ICE Without Notice
Read briefing →
April 21, 20262026-04-21
legislationColorado Psychotherapy AI Bill Passes House, Enactment Closer
legislationKansas App Store Accountability Act Clears Committee with Dual Enforcement Mechanism
legislationTexas Bill Extends Child Protection Statutes to AI-Generated CSAM
Read briefing →
April 20, 20262026-04-20
legislationColorado and Maine Pass AI Restrictions Targeting Mental Health Applications
legislationIndia Parliamentary Committee Recommends Mandatory KYC and Age Verification for Platforms
legislationKansas App Store Accountability Act Advances with Dual Private and Regulatory Enforcement
Read briefing →
April 16, 20262026-04-16
enforcement / litigationDutch Court Sets High Bar for Platform Access to DPA Investigation Files
analysisMinnesota Names New State CIO — Continuity Signaled in IT Governance
analysisGovernment AI Scaling Failures Highlight Governance Framework Gaps
Read briefing →
April 15, 20262026-04-15
enforcementANSPDCP fines Your Consulting SRL ~€3,000 for web app security failures under Articles 25 and 32 GDPR
enforcementObstruction-plus-DSR-failure pattern applied consistently by HDPA and ANSPDCP across two separate decisions
enforcementBelgian APD confirms email reproduction satisfies Article 15(3) copy obligation — practical guidance for workplace DSR programs
Read briefing →
April 14, 20262026-04-14
enforcementRomania ANSPDCP compounds Altex fine for DSR failure plus DPA obstruction
enforcementGreece HDPA fines tutoring center for blocking parental access to children's data
enforcementBelgian APD: email reproduction satisfies GDPR Article 15 access obligation
Read briefing →
April 13, 20262026-04-13
breachMercor biometric breach confirmed; deepfake fraud risk is concrete and downstream exposure is broad
breachEurail passport breach: 300,000+ affected, GDPR notification obligations likely triggered
enforcementRomania ANSPDCP compounds fine for DPA obstruction alongside access rights failure
Read briefing →
April 10, 20262026-04-10
breachMeta suspends Mercor engagement as LiteLLM breach escalates toward extortion campaign
enforcementFinland DPA rules repeat DSAR fees unlawful; portal-only fulfillment insufficient
legislationChina CAC draft rules require consent and labeling for AI virtual humans; consultation closes May 6
Read briefing →
April 9, 20262026-04-09
breachMercor biometric and ID document breach: active supply chain compromise via LiteLLM affects Anthropic, OpenAI, and Meta vendor
legislationEU e-Privacy derogation lapse: platforms face enforcement exposure for continued voluntary CSAM scanning
standardsEU AI Act energy consultation opens: GPAI model compliance methodology now in active formation
Read briefing →
April 8, 20262026-04-08
legislation/enforcementEU e-Privacy derogation lapses; platforms scanning CSAM without legal basis
enforcementAEPD applies Article 6 lawful basis — not Article 32 — to SIM-swap fraud liability
legislationIllinois HB5521 would ban law enforcement biometric surveillance with private right of action
Read briefing →
April 7, 20262026-04-07
industryVoluntary CSAM Scanning in EU Lacks Legal Basis — Exposure Risk for Platforms
standardsENISA EUDI Wallet Certification Comment Window Closes April 30 — Act Before Deadline
enforcement4chan Defies Ofcom Fines — OSA Extraterritorial Enforcement Limits Now Explicit
Read briefing →
April 6, 20262026-04-06
legislationEU CSAM Scanning Interim Regulation Expires — Platforms Lose Legal Basis This Weekend
enforcementFTC Bars OkCupid from Biometric Data Misrepresentation — Permanent Injunction Filed
enforcementAustralia eSafety Flags Enforcement Action Against Five Major Platforms — Mid-2026 Target
Read briefing →
April 3, 20262026-04-03
legislationOklahoma Data Privacy Act Signed — VCDPA-Aligned, Effective January 1, 2027
enforcementGarante Fines Intesa Sanpaolo €36M for Article 32 Security Failures
legislationWhite House Issues Federal AI Legislative Recommendations Amid Colorado Act Replacement Proposal
Read briefing →
April 2, 20262026-04-02
legislationVirginia AI Verification Bills Head to Governor After Near-Unanimous Votes
legislationWashington HB1170 AI Content Disclosure Bill Delivered to Governor
legislationNew York AI Training Data Transparency Bills Reach Third Reading in Both Chambers
Read briefing →
April 1, 20262026-04-01
legislationOregon SB1546 Signed: First State Law Directly Regulating AI Companion Systems
legislationColorado HB1139 Advances Health Care AI Oversight, Stacking on SB205
legislationUtah HB0450 Enrolled: Privacy Act Amendments at Governor's Desk
Read briefing →

March 2026

March 31, 20262026-03-31
legislationWashington HB1170 AI Content Disclosure Bill Delivered to Governor
legislationNew York AI Training Data Transparency Act Advances in Both Chambers
legislationWyoming Enacts AI Deepfake Minor Protection Law (Chapter 91)
Read briefing →
March 30, 20262026-03-30
legislationEU CSAM Scanning Authority Expires After Parliament Rejects Extension
legislationEU AI Act High-Risk Deadline Shifted to December 2027 in Omnibus Package
enforcementCommission Issues Preliminary DSA Breach Findings Against Four Adult Platforms; Probes Snapchat
Read briefing →
March 27, 20262026-03-27
legislationWashington HB1170 Delivered to Governor — AI Content Disclosure Mandate Awaiting Signature
legislationNew York Dual Training Data Transparency Bills Reach Third Reading Simultaneously
legislationVirginia Passes AI Verification Organization Framework Bills with Near-Unanimous Votes
Read briefing →
March 26, 20262026-03-26
legislationVirginia passes dual AI auditing framework bills with near-unanimous votes
legislationWashington AI content disclosure bill delivered to Governor for signature
legislationNew York training data transparency bills reach third reading in both chambers
Read briefing →
March 25, 20262026-03-25
legislationVirginia AI Verification Bills Head to Governor After Near-Unanimous Votes
legislationWashington AI Content Disclosure Bill Delivered to Governor for Signature
legislationNew York Training Data Transparency Bills Advance in Both Chambers
Read briefing →
March 24, 20262026-03-24
legislationVirginia Passes Dual AI Verification Organization Bills, Institutionalizing Third-Party Audit
legislationWashington AI Content Disclosure Bill Delivered to Governor for Signature
legislationNew York Training Data Transparency Bills Reach Third Reading in Both Chambers
Read briefing →
March 23, 20262026-03-23
legislationWashington HB1170 AI Content Disclosure Bill Delivered to Governor
legislationVirginia Passes Dual Bills Establishing Independent AI Verification Framework
legislationNew York Training Data Transparency Bills Advance in Both Chambers
Read briefing →
March 20, 20262026-03-20
legislationVirginia passes dual AI verification organization bills, framework near enactment
legislationWashington AI content disclosure bill reaches Governor's desk
legislationVermont advances neurological rights bill — first codification of cognitive autonomy in AI health context
Read briefing →
March 19, 20262026-03-19
legislationVirginia passes dual AI verification organization frameworks by near-unanimous margins
legislationNew York AI training data transparency bills reach third reading in both chambers
legislationWashington HB1170 AI content disclosure bill delivered to Governor for executive action
Read briefing →
March 18, 20262026-03-18
legislationVirginia passes dual AI verification organization bills, signaling third-party audit infrastructure becoming law
legislationNew York dual-chamber AI training data transparency bills reach advanced reading, potential de facto national standard
legislationWashington AI content disclosure bill delivered to Governor, imminent enactment decision
Read briefing →
March 17, 20262026-03-17
enforcementNinth Circuit reinstates California CAADC, tightening First Amendment limits on platform regulation
enforcementDutch DPA expands Reddit AI training investigation to GDPR Article 5 foundational principles
analysisSCOTUS grants cert in Salazar v. Paramount Global to define VPPA scope for streaming era
Read briefing →
March 16, 20262026-03-16
enforcementNinth Circuit revives California CAADC, narrows First Amendment shield for platforms
enforcementDutch DPA expands Reddit AI training probe to Article 5 GDPR, escalating structural risk
analysisSCOTUS grants cert in Salazar v. Paramount, setting VPPA scope for streaming era
Read briefing →
March 15, 20262026-03-15
enforcementDutch DPA expands Reddit AI training investigation to Article 5 GDPR principles
enforcementCJEU AG opinion: LED data minimisation bars broad identity profiling in criminal proceedings
analysisCBP confirmed using ad-tech RTB data for warrantless location surveillance
Read briefing →
March 14, 20262026-03-14
enforcementDutch DPA expands Reddit investigation to GDPR Article 5 principles, targeting AI training data pipelines
enforcementCJEU AG: Law Enforcement Directive bars collection of marital status and ethnicity for criminal identity verification
analysisCBP confirmed using ad-tech location data for warrantless surveillance; EFF urges Supreme Court to ban geofence warrants
Read briefing →
March 12, 20262026-03-12
enforcementDutch DPA expands Reddit AI training probe to Article 5 GDPR, escalating to litigation
enforcementCJEU AG opinion: Law Enforcement Directive bars broad identity data collection in criminal proceedings
enforcementFrance's Conseil d'État confirms €40M GDPR fine; rules identifiability need not be controller's direct purpose
Read briefing →
March 11, 20262026-03-11
enforcementDutch DPA expands Reddit AI training investigation to GDPR Article 5, threatening foundational data-licensing models
enforcementCJEU AG opinion: Law Enforcement Directive bars broad identity data collection in national criminal proceedings
enforcementEU Council of State finalizes €40 million advertising fine; broad personal data definition confirmed on appeal
Read briefing →

Policy Signal · policysignalhq.com · Major privacy + AI governance moves, distilled.