Briefing Archive

Daily intelligence briefings,
distilled.

Daily intelligence briefings on privacy and AI governance developments. Each briefing synthesises the past 24 hours of regulatory activity into analyst-grade prose.

April 2026

April 9, 20262026-04-09
breachMercor biometric and ID document breach: active supply chain compromise via LiteLLM affects Anthropic, OpenAI, and Meta vendor
legislationEU e-Privacy derogation lapse: platforms face enforcement exposure for continued voluntary CSAM scanning
standardsEU AI Act energy consultation opens: GPAI model compliance methodology now in active formation
Read briefing →
April 8, 20262026-04-08
legislation/enforcementEU e-Privacy derogation lapses; platforms scanning CSAM without legal basis
enforcementAEPD applies Article 6 lawful basis — not Article 32 — to SIM-swap fraud liability
legislationIllinois HB5521 would ban law enforcement biometric surveillance with private right of action
Read briefing →
April 7, 20262026-04-07
industryVoluntary CSAM Scanning in EU Lacks Legal Basis — Exposure Risk for Platforms
standardsENISA EUDI Wallet Certification Comment Window Closes April 30 — Act Before Deadline
enforcement4chan Defies Ofcom Fines — OSA Extraterritorial Enforcement Limits Now Explicit
Read briefing →
April 6, 20262026-04-06
legislationEU CSAM Scanning Interim Regulation Expires — Platforms Lose Legal Basis This Weekend
enforcementFTC Bars OkCupid from Biometric Data Misrepresentation — Permanent Injunction Filed
enforcementAustralia eSafety Flags Enforcement Action Against Five Major Platforms — Mid-2026 Target
Read briefing →
April 3, 20262026-04-03
legislationOklahoma Data Privacy Act Signed — VCDPA-Aligned, Effective January 1, 2027
enforcementGarante Fines Intesa Sanpaolo €36M for Article 32 Security Failures
legislationWhite House Issues Federal AI Legislative Recommendations Amid Colorado Act Replacement Proposal
Read briefing →
April 2, 20262026-04-02
legislationVirginia AI Verification Bills Head to Governor After Near-Unanimous Votes
legislationWashington HB1170 AI Content Disclosure Bill Delivered to Governor
legislationNew York AI Training Data Transparency Bills Reach Third Reading in Both Chambers
Read briefing →
April 1, 20262026-04-01
legislationOregon SB1546 Signed: First State Law Directly Regulating AI Companion Systems
legislationColorado HB1139 Advances Health Care AI Oversight, Stacking on SB205
legislationUtah HB0450 Enrolled: Privacy Act Amendments at Governor's Desk
Read briefing →

March 2026

March 31, 20262026-03-31
legislationWashington HB1170 AI Content Disclosure Bill Delivered to Governor
legislationNew York AI Training Data Transparency Act Advances in Both Chambers
legislationWyoming Enacts AI Deepfake Minor Protection Law (Chapter 91)
Read briefing →
March 30, 20262026-03-30
legislationEU CSAM Scanning Authority Expires After Parliament Rejects Extension
legislationEU AI Act High-Risk Deadline Shifted to December 2027 in Omnibus Package
enforcementCommission Issues Preliminary DSA Breach Findings Against Four Adult Platforms; Probes Snapchat
Read briefing →
March 27, 20262026-03-27
legislationWashington HB1170 Delivered to Governor — AI Content Disclosure Mandate Awaiting Signature
legislationNew York Dual Training Data Transparency Bills Reach Third Reading Simultaneously
legislationVirginia Passes AI Verification Organization Framework Bills with Near-Unanimous Votes
Read briefing →
March 26, 20262026-03-26
legislationVirginia passes dual AI auditing framework bills with near-unanimous votes
legislationWashington AI content disclosure bill delivered to Governor for signature
legislationNew York training data transparency bills reach third reading in both chambers
Read briefing →
March 25, 20262026-03-25
legislationVirginia AI Verification Bills Head to Governor After Near-Unanimous Votes
legislationWashington AI Content Disclosure Bill Delivered to Governor for Signature
legislationNew York Training Data Transparency Bills Advance in Both Chambers
Read briefing →
March 24, 20262026-03-24
legislationVirginia Passes Dual AI Verification Organization Bills, Institutionalizing Third-Party Audit
legislationWashington AI Content Disclosure Bill Delivered to Governor for Signature
legislationNew York Training Data Transparency Bills Reach Third Reading in Both Chambers
Read briefing →
March 23, 20262026-03-23
legislationWashington HB1170 AI Content Disclosure Bill Delivered to Governor
legislationVirginia Passes Dual Bills Establishing Independent AI Verification Framework
legislationNew York Training Data Transparency Bills Advance in Both Chambers
Read briefing →
March 20, 20262026-03-20
legislationVirginia passes dual AI verification organization bills, framework near enactment
legislationWashington AI content disclosure bill reaches Governor's desk
legislationVermont advances neurological rights bill — first codification of cognitive autonomy in AI health context
Read briefing →
March 19, 20262026-03-19
legislationVirginia passes dual AI verification organization frameworks by near-unanimous margins
legislationNew York AI training data transparency bills reach third reading in both chambers
legislationWashington HB1170 AI content disclosure bill delivered to Governor for executive action
Read briefing →
March 18, 20262026-03-18
legislationVirginia passes dual AI verification organization bills, signaling third-party audit infrastructure becoming law
legislationNew York dual-chamber AI training data transparency bills reach advanced reading, potential de facto national standard
legislationWashington AI content disclosure bill delivered to Governor, imminent enactment decision
Read briefing →
March 17, 20262026-03-17
enforcementNinth Circuit reinstates California CAADC, tightening First Amendment limits on platform regulation
enforcementDutch DPA expands Reddit AI training investigation to GDPR Article 5 foundational principles
analysisSCOTUS grants cert in Salazar v. Paramount Global to define VPPA scope for streaming era
Read briefing →
March 16, 20262026-03-16
enforcementNinth Circuit revives California CAADC, narrows First Amendment shield for platforms
enforcementDutch DPA expands Reddit AI training probe to Article 5 GDPR, escalating structural risk
analysisSCOTUS grants cert in Salazar v. Paramount, setting VPPA scope for streaming era
Read briefing →
March 15, 20262026-03-15
enforcementDutch DPA expands Reddit AI training investigation to Article 5 GDPR principles
enforcementCJEU AG opinion: LED data minimisation bars broad identity profiling in criminal proceedings
analysisCBP confirmed using ad-tech RTB data for warrantless location surveillance
Read briefing →
March 14, 20262026-03-14
enforcementDutch DPA expands Reddit investigation to GDPR Article 5 principles, targeting AI training data pipelines
enforcementCJEU AG: Law Enforcement Directive bars collection of marital status and ethnicity for criminal identity verification
analysisCBP confirmed using ad-tech location data for warrantless surveillance; EFF urges Supreme Court to ban geofence warrants
Read briefing →
March 12, 20262026-03-12
enforcementDutch DPA expands Reddit AI training probe to Article 5 GDPR, escalating to litigation
enforcementCJEU AG opinion: Law Enforcement Directive bars broad identity data collection in criminal proceedings
enforcementFrance's Conseil d'État confirms €40M GDPR fine; rules identifiability need not be controller's direct purpose
Read briefing →
March 11, 20262026-03-11
enforcementDutch DPA expands Reddit AI training investigation to GDPR Article 5, threatening foundational data-licensing models
enforcementCJEU AG opinion: Law Enforcement Directive bars broad identity data collection in national criminal proceedings
enforcementEU Council of State finalizes €40 million advertising fine; broad personal data definition confirmed on appeal
Read briefing →

Policy Signal · policysignalhq.com · Major privacy + AI governance moves, distilled.