Briefing Archive

Daily intelligence briefings,
distilled.

Daily intelligence briefings on privacy and AI governance developments. Each briefing synthesises the past 24 hours of regulatory activity into analyst-grade prose.

June 2026

June 1, 20262026-06-01
legislationEU Interoperability Framework Goes Operational: CIR and Search Portal Activation Dates Set
standardsCISA-NSA Agentic AI Guidance and NY DFS Frontier AI Letters Establish New US Compliance Baseline
enforcementItaly Garante Warns Over AI Emotion-Monitoring in Employment; CNIL Fines IQVIA €5M on Health Data
Read briefing →

May 2026

May 29, 20262026-05-29
enforcementEC Fines Temu €200M Under DSA, Elevating Risk Assessment Methodology to Enforcement Target
legislationDLARA Clears House Committee 23-0, Advancing Federal Data and AI Accountability Framework
legislationForeign Adversary AI Risk Assessment Bill Passes House Committee 45-0
Read briefing →
May 28, 20262026-05-28
enforcementEPIC Coalition FTC Filing Targets Roblox Dark Patterns, Tests Platform Design Enforcement Frontier
analysisEFF Documents Systematic ALPR Mission Creep, Amplifying Pressure for Use-Limitation Legislation
standardsFrance CNIL Revises Health Research Methodologies MR-001 and MR-003, Expanding Cross-Border Scope
Read briefing →
May 27, 20262026-05-27
litigationSeventh Circuit Caps BIPA Damages Retroactively, Reshaping Litigation Reserves
litigationFTC-Kochava Settlement Establishes Consent and Audit Template for Location Data Brokers
litigationMeta Challenges Ofcom's Global-Revenue Penalty Basis Under UK Online Safety Act
Read briefing →
May 26, 20262026-05-26
litigationCoordinated BIPA Suits Target AI Voice Training at Nine Major Tech Firms
litigationSupreme Court Hears Chatrie Geofence Warrant Case; No Binding Standard Yet Exists
litigationTexas AG Sues Meta Over WhatsApp Encryption Claims and Netflix Over Surveillance Design
Read briefing →
May 25, 20262026-05-25
enforcementOfcom Secures Platform Commitments Under UK Online Safety Act, Establishing Enforcement Baseline
legislationNew York High-Risk AI Bill Proposes Private Right of Action and Independent Audit Mandate
legislationSEC Regulation S-P Deadline for Smaller Entities Arrives June 3, 2026
Read briefing →
May 22, 20262026-05-22
enforcementTexas AG Issues CID to Meta Over Ray-Ban AI Smart Glasses Biometric Collection
legislationColorado Enacts New ADMT Law, Superseding and Replacing Prior AI Act
enforcementFTC Settles AI 'Active Listening' Adtech Case for $930K, Reinforcing Capability Misrepresentation Risk
Read briefing →
May 21, 20262026-05-21
enforcementFTC Moves to Active Enforcement on TAKE IT DOWN Act With Warning Letters and Complaint Portal
legislationEU-US Biometric Database Access Demand Creates Direct GDPR and ECJ Conflict
legislationOfcom Mandates Hash-Matching for Deepfake Detection; UK Nudification Ban Forthcoming
Read briefing →
May 20, 20262026-05-20
standardsEU AI Act Classification Guidelines Open for Comment: June 23 Deadline
enforcementFTC Activates TAKE IT DOWN Act Enforcement Against Non-Compliant Platforms
legislationNew York AG Campaigns for Surveillance Pricing Ban Amid Maryland Precedent
Read briefing →
May 19, 20262026-05-19
legislationEU AI Act First Amendments Agreed: New Timelines and Prohibitions Confirmed
enforcementEU DPA Coalition Prepares Joint ChatGPT Enforcement Findings Under GDPR
legislationMaryland Enacts First U.S. State Law Restricting Algorithmic Personalized Pricing in Essential Goods
Read briefing →
May 18, 20262026-05-18
enforcement/analysisUK Commissioner Warns of Legal Exposure as Met Deploys LFR at Protest — No Statutory Framework in Place
legislationSenate Democrats Demand DHS Abandon Covert Biometric Smart Glasses for ICE/CBP
legislationMulti-State Algorithmic Accountability Wave: CT, NY, TX Advance AI Employment and Lending Bills
Read briefing →
May 15, 20262026-05-15
legislationEU Commission Advances Binding Teen Social Media Age Law Backed by Seven States
legislationEU Council Concludes Council of Europe AI Convention, Binding Treaty Now in Effect
legislationDHS Appropriations Act Quietly Embeds Autonomous Surveillance and Biometric Collection Authority
Read briefing →
May 14, 20262026-05-14
enforcementFTC Bans Kochava Sensitive Location Data Sales Under FTC Act Authority
industryICE Sole-Source Iris Database Contract Signals Federal Biometric Expansion
legislationEU Commission Eyes Summer Social Media Age Minimum Legislation
Read briefing →
May 13, 20262026-05-13
legislationEU Ratifies Council of Europe AI Convention, Creating Binding Multilateral AI Obligations
enforcementFTC Sets Firm May 19 Take It Down Act Deadline for Major Platforms
legislationEU AI Act Deal Extends High-Risk Deadlines to 2027, Accelerates Nudification Ban to 2026
Read briefing →
May 12, 20262026-05-12
legislationEU AI Act High-Risk Deadline Extended to 2027; Deepfake Ban Set for 2026
enforcementParis Prosecutors Seek Criminal Indictment of X, xAI Over Deepfakes and CSAM
enforcementCalifornia Secures Record $12M CCPA Settlement Against GM for Driver Data Misuse
Read briefing →
May 11, 20262026-05-11
enforcementEU Regulators Press Anthropic for Mythos Model Access Under AI Act Oversight Provisions
legislationGUARD Act Clears Senate Committee, Targeting AI Chatbot Access for Minors
legislationEU AI Act Simplification Deal Rejected as Insufficient by Lawmakers and Industry
Read briefing →
May 8, 20262026-05-08
enforcementFTC Bans Kochava from Selling Sensitive Location Data, Sets Consent Standard for Data Brokers
industryMeta AI Age Profiling Across EU, US, and Brazil Triggers Multi-Jurisdictional Compliance Risk
legislationGermany Industry Exemption Push Signals Material Revision Risk to EU AI Act Compliance Architecture
Read briefing →
May 6, 20262026-05-06
enforcementEC Preliminary DSA Finding Against Meta Sets Binding Age-Assurance Standard for All VLOPs
legislationGUARD Act Clears Senate Judiciary Committee, Moving AI Age-Gating Toward Floor Vote
legislationGermany Revives Police Facial Recognition on Social Media, Triggering EU AI Act Conflict
Read briefing →
May 5, 20262026-05-05
enforcementEC Formalizes DSA Evidentiary Record Against Meta, Setting Sector-Wide Age-Assurance Standard
legislationGUARD Act Advances With Definitions Broad Enough to Capture Routine AI Services
legislationCalifornia AB-1709 Nears Vote on Universal Biometric Age Verification for Social Media
Read briefing →
May 4, 20262026-05-04
enforcementEC Formally Accuses Meta of DSA Breach Over Under-13 Access Controls
legislationGermany Proposes Social Media Facial Recognition Powers, Testing EU AI Act Limits
legislationGUARD Act Advances With Overbroad Scope as FISA 702 Reauthorization Lacks Warrant Protections
Read briefing →
May 3, 20262026-05-03
enforcementEC Preliminary DSA Finding Against Meta Redefines Age-Assurance Standards for VLOPs
legislationUS GUARD Act Advances With Overbroad AI Age-Gating Scope, Federal Floor Vote Approaching
legislationCalifornia AB-1709 Nears Floor Vote on Under-16 Social Media Ban and Universal ID Verification
Read briefing →
May 1, 20262026-05-01
enforcementOfcom Crystallizes Criminal Liability Threat for Executives on AI Nudification
legislationAlabama APDPA: Narrow Sale Definition Limits Enforcement Exposure
legislationNorth Carolina Minor Social Media Bill Stalls in Multi-Committee Review
Read briefing →

April 2026

April 30, 20262026-04-30
enforcementOfcom Advances Criminal Liability for Executives Over AI Nudification Failures
legislationAlabama APDPA in Effect: Asymmetric Thresholds Create Multi-State Compliance Audit Need
legislationNorth Carolina Minor Social Media Bill Faces Multi-Committee Hurdle
Read briefing →
April 29, 20262026-04-29
enforcementOfcom Signals Criminal Liability for Executives Over AI Nudification Failures
legislationAlabama Becomes 21st State with Comprehensive Privacy Law
legislationNorth Carolina Bill Advances Minor Social Media Protections Through Committee
Read briefing →
April 24, 20262026-04-24
legislationWhite House AI Framework Proposes Federal Preemption of State AI Laws
enforcementEFF Complaints Allege Google Violated User Notification Policy in ICE Disclosure
legislationVirginia Enacts Categorical Ban on Sale of Precise Geolocation Data
Read briefing →
April 23, 20262026-04-23
enforcementFlorida AG Opens Formal Probe into OpenAI, Signaling State-Level AI Enforcement Model
standardsEDPB Adopts Standardized DPIA Template and Advances Scientific Research Guidelines
legislationCongress Demands DHS Account for Palantir and Biometric Surveillance Tools in Immigration Enforcement
Read briefing →
April 22, 20262026-04-22
legislationWhite House Federal AI Framework Targets State Law Preemption
legislationVirginia Enacts Categorical Ban on Sale of Precise Geolocation Data
enforcementEFF Files AG Complaints Over Google Disclosure of User Data to ICE Without Notice
Read briefing →
April 21, 20262026-04-21
legislationColorado Psychotherapy AI Bill Passes House, Enactment Closer
legislationKansas App Store Accountability Act Clears Committee with Dual Enforcement Mechanism
legislationTexas Bill Extends Child Protection Statutes to AI-Generated CSAM
Read briefing →
April 20, 20262026-04-20
legislationColorado and Maine Pass AI Restrictions Targeting Mental Health Applications
legislationIndia Parliamentary Committee Recommends Mandatory KYC and Age Verification for Platforms
legislationKansas App Store Accountability Act Advances with Dual Private and Regulatory Enforcement
Read briefing →
April 16, 20262026-04-16
enforcement / litigationDutch Court Sets High Bar for Platform Access to DPA Investigation Files
analysisMinnesota Names New State CIO — Continuity Signaled in IT Governance
analysisGovernment AI Scaling Failures Highlight Governance Framework Gaps
Read briefing →
April 15, 20262026-04-15
enforcementANSPDCP fines Your Consulting SRL ~€3,000 for web app security failures under Articles 25 and 32 GDPR
enforcementObstruction-plus-DSR-failure pattern applied consistently by HDPA and ANSPDCP across two separate decisions
enforcementBelgian APD confirms email reproduction satisfies Article 15(3) copy obligation — practical guidance for workplace DSR programs
Read briefing →
April 14, 20262026-04-14
enforcementRomania ANSPDCP compounds Altex fine for DSR failure plus DPA obstruction
enforcementGreece HDPA fines tutoring center for blocking parental access to children's data
enforcementBelgian APD: email reproduction satisfies GDPR Article 15 access obligation
Read briefing →
April 13, 20262026-04-13
breachMercor biometric breach confirmed; deepfake fraud risk is concrete and downstream exposure is broad
breachEurail passport breach: 300,000+ affected, GDPR notification obligations likely triggered
enforcementRomania ANSPDCP compounds fine for DPA obstruction alongside access rights failure
Read briefing →
April 10, 20262026-04-10
breachMeta suspends Mercor engagement as LiteLLM breach escalates toward extortion campaign
enforcementFinland DPA rules repeat DSAR fees unlawful; portal-only fulfillment insufficient
legislationChina CAC draft rules require consent and labeling for AI virtual humans; consultation closes May 6
Read briefing →
April 9, 20262026-04-09
breachMercor biometric and ID document breach: active supply chain compromise via LiteLLM affects Anthropic, OpenAI, and Meta vendor
legislationEU e-Privacy derogation lapse: platforms face enforcement exposure for continued voluntary CSAM scanning
standardsEU AI Act energy consultation opens: GPAI model compliance methodology now in active formation
Read briefing →
April 8, 20262026-04-08
legislation/enforcementEU e-Privacy derogation lapses; platforms scanning CSAM without legal basis
enforcementAEPD applies Article 6 lawful basis — not Article 32 — to SIM-swap fraud liability
legislationIllinois HB5521 would ban law enforcement biometric surveillance with private right of action
Read briefing →
April 7, 20262026-04-07
industryVoluntary CSAM Scanning in EU Lacks Legal Basis — Exposure Risk for Platforms
standardsENISA EUDI Wallet Certification Comment Window Closes April 30 — Act Before Deadline
enforcement4chan Defies Ofcom Fines — OSA Extraterritorial Enforcement Limits Now Explicit
Read briefing →
April 6, 20262026-04-06
legislationEU CSAM Scanning Interim Regulation Expires — Platforms Lose Legal Basis This Weekend
enforcementFTC Bars OkCupid from Biometric Data Misrepresentation — Permanent Injunction Filed
enforcementAustralia eSafety Flags Enforcement Action Against Five Major Platforms — Mid-2026 Target
Read briefing →
April 3, 20262026-04-03
legislationOklahoma Data Privacy Act Signed — VCDPA-Aligned, Effective January 1, 2027
enforcementGarante Fines Intesa Sanpaolo €36M for Article 32 Security Failures
legislationWhite House Issues Federal AI Legislative Recommendations Amid Colorado Act Replacement Proposal
Read briefing →
April 2, 20262026-04-02
legislationVirginia AI Verification Bills Head to Governor After Near-Unanimous Votes
legislationWashington HB1170 AI Content Disclosure Bill Delivered to Governor
legislationNew York AI Training Data Transparency Bills Reach Third Reading in Both Chambers
Read briefing →
April 1, 20262026-04-01
legislationOregon SB1546 Signed: First State Law Directly Regulating AI Companion Systems
legislationColorado HB1139 Advances Health Care AI Oversight, Stacking on SB205
legislationUtah HB0450 Enrolled: Privacy Act Amendments at Governor's Desk
Read briefing →

March 2026

March 31, 20262026-03-31
legislationWashington HB1170 AI Content Disclosure Bill Delivered to Governor
legislationNew York AI Training Data Transparency Act Advances in Both Chambers
legislationWyoming Enacts AI Deepfake Minor Protection Law (Chapter 91)
Read briefing →
March 30, 20262026-03-30
legislationEU CSAM Scanning Authority Expires After Parliament Rejects Extension
legislationEU AI Act High-Risk Deadline Shifted to December 2027 in Omnibus Package
enforcementCommission Issues Preliminary DSA Breach Findings Against Four Adult Platforms; Probes Snapchat
Read briefing →
March 27, 20262026-03-27
legislationWashington HB1170 Delivered to Governor — AI Content Disclosure Mandate Awaiting Signature
legislationNew York Dual Training Data Transparency Bills Reach Third Reading Simultaneously
legislationVirginia Passes AI Verification Organization Framework Bills with Near-Unanimous Votes
Read briefing →
March 26, 20262026-03-26
legislationVirginia passes dual AI auditing framework bills with near-unanimous votes
legislationWashington AI content disclosure bill delivered to Governor for signature
legislationNew York training data transparency bills reach third reading in both chambers
Read briefing →
March 25, 20262026-03-25
legislationVirginia AI Verification Bills Head to Governor After Near-Unanimous Votes
legislationWashington AI Content Disclosure Bill Delivered to Governor for Signature
legislationNew York Training Data Transparency Bills Advance in Both Chambers
Read briefing →
March 24, 20262026-03-24
legislationVirginia Passes Dual AI Verification Organization Bills, Institutionalizing Third-Party Audit
legislationWashington AI Content Disclosure Bill Delivered to Governor for Signature
legislationNew York Training Data Transparency Bills Reach Third Reading in Both Chambers
Read briefing →
March 23, 20262026-03-23
legislationWashington HB1170 AI Content Disclosure Bill Delivered to Governor
legislationVirginia Passes Dual Bills Establishing Independent AI Verification Framework
legislationNew York Training Data Transparency Bills Advance in Both Chambers
Read briefing →
March 20, 20262026-03-20
legislationVirginia passes dual AI verification organization bills, framework near enactment
legislationWashington AI content disclosure bill reaches Governor's desk
legislationVermont advances neurological rights bill — first codification of cognitive autonomy in AI health context
Read briefing →
March 19, 20262026-03-19
legislationVirginia passes dual AI verification organization frameworks by near-unanimous margins
legislationNew York AI training data transparency bills reach third reading in both chambers
legislationWashington HB1170 AI content disclosure bill delivered to Governor for executive action
Read briefing →
March 18, 20262026-03-18
legislationVirginia passes dual AI verification organization bills, signaling third-party audit infrastructure becoming law
legislationNew York dual-chamber AI training data transparency bills reach advanced reading, potential de facto national standard
legislationWashington AI content disclosure bill delivered to Governor, imminent enactment decision
Read briefing →
March 17, 20262026-03-17
enforcementNinth Circuit reinstates California CAADC, tightening First Amendment limits on platform regulation
enforcementDutch DPA expands Reddit AI training investigation to GDPR Article 5 foundational principles
analysisSCOTUS grants cert in Salazar v. Paramount Global to define VPPA scope for streaming era
Read briefing →
March 16, 20262026-03-16
enforcementNinth Circuit revives California CAADC, narrows First Amendment shield for platforms
enforcementDutch DPA expands Reddit AI training probe to Article 5 GDPR, escalating structural risk
analysisSCOTUS grants cert in Salazar v. Paramount, setting VPPA scope for streaming era
Read briefing →
March 15, 20262026-03-15
enforcementDutch DPA expands Reddit AI training investigation to Article 5 GDPR principles
enforcementCJEU AG opinion: LED data minimisation bars broad identity profiling in criminal proceedings
analysisCBP confirmed using ad-tech RTB data for warrantless location surveillance
Read briefing →
March 14, 20262026-03-14
enforcementDutch DPA expands Reddit investigation to GDPR Article 5 principles, targeting AI training data pipelines
enforcementCJEU AG: Law Enforcement Directive bars collection of marital status and ethnicity for criminal identity verification
analysisCBP confirmed using ad-tech location data for warrantless surveillance; EFF urges Supreme Court to ban geofence warrants
Read briefing →
March 12, 20262026-03-12
enforcementDutch DPA expands Reddit AI training probe to Article 5 GDPR, escalating to litigation
enforcementCJEU AG opinion: Law Enforcement Directive bars broad identity data collection in criminal proceedings
enforcementFrance's Conseil d'État confirms €40M GDPR fine; rules identifiability need not be controller's direct purpose
Read briefing →
March 11, 20262026-03-11
enforcementDutch DPA expands Reddit AI training investigation to GDPR Article 5, threatening foundational data-licensing models
enforcementCJEU AG opinion: Law Enforcement Directive bars broad identity data collection in national criminal proceedings
enforcementEU Council of State finalizes €40 million advertising fine; broad personal data definition confirmed on appeal
Read briefing →

Policy Signal · policysignalhq.com · Major privacy + AI governance moves, distilled.