UNITED STATES (FEDERAL)

High Proposed regulation Proposed United States (federal) · Oct 19, 2026 · effective Oct 19, 2026

FCC proposes to modify system of records for National Deaf-Blind Equipment Distribution Program

The Federal Communications Commission proposes amendments to the FCC/CGB-3 system of records, updating its purposes, categories of individuals and records, and adding two new routine uses. The changes are intended to meet Privacy Act…

Federal Communications Commission · Privacy Act of 1974

High Final regulation In effect United States (federal) · Oct 19, 2026 · effective Oct 19, 2026

FCC modifies Lifeline Program system of records (FCC/WCB-1) under the Privacy Act

The Federal Communications Commission is amending the FCC/WCB-1 system of records that supports the Lifeline Program, which provides discounted voice and broadband services to low‑income households. The amendment updates the categories of…

Federal Communications Commission · Privacy Act of 1974

Moderate Guidance Published United States (federal) · Oct 19, 2026

Federal Register limits automated scraping with CAPTCHAs and API access

The Federal Register website warns that aggressive automated scraping of FederalRegister.gov and eCFR.gov is restricted. Programmatic access is limited to the agency's developer APIs, and users may be required to complete CAPTCHAs. The…

Federal Register

Moderate Guidance Announced United States (federal) · Oct 16, 2026

FFIEC Extends Regulatory Capital Reporting Collection (FFIEC 101) for Three Years

The Federal Financial Institutions Examination Council (FFIEC) announced a three‑year extension of the Regulatory Capital Reporting collection for institutions subject to the Advanced Capital Adequacy Framework (FFIEC 101). No public…

Federal Financial Institutions Examination Council (FFIEC) · Paperwork Reduction Act of 1995

Low Court ruling Decided New York · Oct 15, 2026

Southern District of New York denies government motion to dismiss lawsuit over Trump admin social media surveillance of noncitizens

A federal district court rejected the government’s arguments that immigration law bars the case and that the unions lack standing, allowing the lawsuit to proceed. The court found that the surveillance program causes concrete injuries…

Immigration and Nationality Act

Moderate Enforcement In effect United States (federal) · Oct 15, 2026

FTC orders Walmart to pay over $9.8M to consumers harmed by wire‑transfer scams

The Federal Trade Commission is sending payments totaling more than $9.8 million to consumers harmed by Walmart’s alleged failure to stop scammers that used its wire transfer services to defraud U.S. customers. The restitution follows FTC…

Federal Trade Commission

Moderate Proposed regulation Proposed United States (federal) · Oct 15, 2026

DOJ proposes to exempt EOIR "Fraud and Abuse Prevention Program Records" from certain Privacy Act provisions

The Executive Office for Immigration Review (EOIR) announced a new system of records titled "Fraud and Abuse Prevention Program Records" (JUSTICE/EOIR-006). EOIR proposes to exempt this system from specific provisions of the Privacy Act to…

Executive Office for Immigration Review · Privacy Act of 1974

Moderate Proposed regulation Proposed United States (federal) · Oct 15, 2026

DOJ EOIR proposes new system of records for Fraud and Abuse Prevention Program

The Executive Office for Immigration Review (EOIR) intends to create a new system of records notice, JUSTICE/EOIR-006, to cover all Fraud and Abuse Prevention Program records. The new notice would replace partial coverage under the…

Department of Justice · Privacy Act of 1974

Moderate Proposed regulation Proposed United States (federal) · Oct 15, 2026

DOJ proposes exemption for BJS statistical data system from certain Privacy Act provisions

The Office of Justice Programs announced a notice of a new system of records, BJS Statistical Data (JUSTICE/OJP-017), covering data collected under 34 U.S.C. 10132. The agency proposes to exempt this system from specific Privacy Act…

U.S. Department of Justice, Office of Justice Programs · Privacy Act of 1974

High Guidance In effect United States (federal) · Oct 15, 2026 · effective Nov 24, 2026

Farm Credit Administration amends employee payroll system of records under Privacy Act, effective Nov 24, 2026

The Farm Credit Administration announced an amendment to its FCA-1 system of records covering employee attendance, leave, and payroll. The amendment updates the categories of individuals and records maintained and revises the policies and…

Farm Credit Administration · Privacy Act of 1974

Low Lawsuit filed Filed Wisconsin · Oct 14, 2026

EFF and ACLU file petition to Wisconsin Supreme Court seeking warrant for ALPR database searches

The Electronic Frontier Foundation and the ACLU of Wisconsin have filed a petition with the Wisconsin Supreme Court asking the court to require a warrant for retrospective searches of Automated License Plate Reader (ALPR) databases. The…

Low Enforcement Published United States (federal) · Oct 14, 2026

DHS OIG audit finds TSA failed to safeguard passenger facial recognition data

The DHS Office of Inspector General reported a significant weakness in TSA's facial recognition system, noting that the vendor could access and extract sensitive driver’s license and passport images without TSA’s knowledge. The audit found…

Department of Homeland Security Office of Inspector General (DHS OIG)

Moderate New law Signed California · Oct 14, 2026 · effective Jan 1, 2027

California Governor signs SB 1050 requiring AI synthetic performer disclosures in ads

Governor Gavin Newsom signed SB 1050, a California law that bans publishing advertisements with a synthetic performer unless a clear and conspicuous disclosure is provided. The law defines a synthetic performer as a digital figure, voice…

FTC · FTC Act Section 5

Low Court ruling Decided United States (federal) · Oct 14, 2026

Court allows lawsuit against government surveillance program "Catch and Revoke" to proceed

A court issued a ruling permitting the EFF‑led lawsuit challenging the "Catch and Revoke" mass surveillance program to move forward. The program is alleged to use AI to suppress protected speech online. The decision is viewed as a win for…

Moderate New law Signed California · Oct 14, 2026

California Governor signs four privacy bills expanding deletion rights, privacy settings, data‑broker rules and limiting CIPA lawsuits

Governor Gavin Newsom signed SB 923, AB 2561, AB 883 and SB 690 into law during the 2026 session. SB 923 broadens CCPA deletion rights and requires online request mechanisms; AB 2561 bars operating systems and apps from changing privacy…

CPPA · California Consumer Privacy Act (as amended by CPRA)

Moderate Guidance Published New York · Oct 14, 2026

NY Attorney General releases updated guide on AI-generated election misinformation

The New York Attorney General's Office issued an updated guide to help voters identify and report AI‑generated election misinformation ahead of the November 3, 2026 general election. The guide advises checking official sources, not relying…

New York Attorney General's Office · New York law requiring labeling of AI‑generated political communications as manipulated

Moderate Attorney General action Filed New York · Oct 14, 2026

NY Attorney General urges bankruptcy court to protect children and consumers in Character.AI sale

New York Attorney General Letitia James and a coalition of 39 state AGs filed a motion in the Character Technologies bankruptcy court demanding strong protections for children and users before any sale of Character.AI. The filing cites…

New York Attorney General's Office

Moderate Guidance Proposed United States (federal) · Oct 14, 2026

Federal Register proposes reorganization limiting programmatic access to its sites

The Division of Program Coordination, Planning, and Strategic Initiatives issued a notice proposing a reorganization that will limit programmatic access to FederalRegister.gov and eCFR.gov due to aggressive automated scraping. Access will…

Division of Program Coordination, Planning, and Strategic Initiatives, Office of the Director

Moderate Guidance Published United States (federal) · Oct 14, 2026

DoD establishes new matching program to compare TRICARE pharmacy records with Treasury's Do Not Pay system

The Department of Defense announced a new computer‑matching program that will compare its TRICARE Pharmacy Program records with the Treasury's Do Not Pay Working System. The program is established under the Privacy Act of 1974 and the…

Department of Defense · Privacy Act of 1974

Moderate Guidance Proposed United States (federal) · Oct 14, 2026

Agency limits programmatic access to FederalRegister.gov and eCFR.gov, requiring API use and CAPTCHA verification

The agency states that due to aggressive automated scraping, programmatic access to FederalRegister.gov and eCFR.gov is restricted to its developer APIs. Users must complete a CAPTCHA to verify they are human and may request a wider IP…

U.S. Federal Government · Paperwork Reduction Act

Low Court ruling Dismissed California · Oct 13, 2026

California trial court dismisses SIREN v. San Jose challenge to warrantless ALPR searches

A California trial court dismissed SIREN v. San Jose, a case brought by EFF and the ACLU challenging the city’s warrantless searches of automated license plate reader data. The court held that drivers have no reasonable expectation of…

California Constitution

Moderate Court ruling Decided United States (federal) · Oct 13, 2026

Bernstein v. DOJ ruling holds encryption code is protected speech

The podcast notes that the 1995 case Bernstein v. Department of Justice held that code is speech protected by the First Amendment. This precedent underpins modern internet privacy and encryption. The case was brought by Dan Bernstein with…

CPPA · California Delete Act

High Proposed regulation Proposed United States (federal) · Oct 13, 2026 · effective Oct 13, 2026

FHFA proposes to rescind SORN FHFA-12 and consolidate records under SORN FHFA-11

The Federal Housing Finance Agency (FHFA) announced a proposal to rescind the existing System of Records Notice (SORN) FHFA-12, which covers parking program records. The agency will consolidate those records with its transit subsidy…

Federal Housing Finance Agency · Privacy Act of 1974

Moderate Executive order Signed United States (federal) · Oct 9, 2026

President Trump issues executive order creating federal voter eligibility list

In March 2026, President Trump issued an executive order directing DHS to compile a list of U.S. citizens 18 years or older and directing DOJ to prosecute officials who provide ballots to ineligible voters. The order has been challenged by…

Privacy Act of 1974

Low Guidance Announced California · Oct 9, 2026

EFF joins Oakland Tech Week to discuss surveillance and AI impacts

The Electronic Frontier Foundation participated in Oakland Tech Week on Sept. 30, co‑presenting an all‑day event with MediaJustice and Upturn. Attendees discussed how technology can empower or oppress communities, focusing on surveillance…

Low Proposed regulation Announced United States (federal) · Oct 9, 2026

CISA submits Final CIRCIA Rule to OIRA for interagency review

On October 1, 2026, CISA submitted a draft of the Final Rule implementing the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) to OIRA. CIRCIA will require covered critical‑infrastructure entities to report…

Cybersecurity and Infrastructure Security Agency (CISA) · Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA)

Moderate Proposed bill Proposed United States (federal) · Oct 8, 2026

EPIC urges Congress to ban CBP's use of financial data in predictive policing

EPIC reports that Customs & Border Patrol's Predictive Intelligence Targeting Teams are using financial records and travel data to target individuals without disclosing how the data was obtained. The article cites past ICE bulk subpoenas…

U.S. Customs and Border Protection (CBP) · Right to Financial Privacy Act

Moderate Proposed regulation Proposed Vermont · Oct 8, 2026

Future of Privacy Forum submits comments on Vermont Age-Appropriate Design Code rulemaking

On October 2, 2026 the Future of Privacy Forum filed comments to the Vermont Attorney General’s rulemaking for the Age-Appropriate Design Code. The act, enacted in June 2025, sets duties for businesses serving minors and will become…

Vermont Office of the Attorney General · California Age-Appropriate Design Code Act

Moderate Proposed bill Introduced United States (federal) · Oct 7, 2026

Sen. Gillibrand reintroduces Data Protection Act to create U.S. Data Protection Agency

U.S. Senator Kirsten Gillibrand (D‑NY) has reintroduced the Data Protection Act, which would establish an independent federal Data Protection Agency. The bill aims to limit collection, use and sharing of personal data, oversee high‑risk…

Low Proposed bill Proposed New York · Oct 7, 2026

EPIC urges NYC Council to adopt AI liability bills Intro 2599 and 2600

EPIC counsel testified before the New York City Council, supporting Intro 2599, which would treat AI chatbots as products with developer liability, and Intro 2600, which would create a private right of action for foreseeable AI harms. The…

People-First Chatbot Bill

Moderate Guidance Announced United States (federal) · Oct 7, 2026

FTC announces new study on personalized pricing under Section 6(b) of the FTC Act

FTC Chair Andrew Ferguson announced plans for a study examining personalized pricing practices. The study will be conducted under the authority of Section 6(b) of the FTC Act.

Federal Trade Commission · FTC Act Section 5

Moderate New law Signed California · Oct 7, 2026

California Governor Signs AB 2246 Replacing Age-Appropriate Design Code Act

On September 10, 2026, the governor of California signed AB 2246. The bill repeals and replaces the California Age-Appropriate Design Code Act, establishing a new framework for online services accessed by children.

CA AG · California Age-Appropriate Design Code Act

Moderate Proposed regulation Proposed United States (federal) · Oct 7, 2026

DOJ proposes exemption for Firearms Rights Restoration Electronic Records Database from Privacy Act provisions

The Office of the Pardon Attorney within the U.S. Department of Justice announced a notice of a new system of records called the Firearms Rights Restoration Electronic Records Database (FRRERD). The agency proposes to exempt this system…

U.S. Department of Justice · Privacy Act of 1974

Moderate Proposed regulation Proposed United States (federal) · Oct 7, 2026

DEA proposes to modify and republish its Aviation Division system of records notice

The Drug Enforcement Administration (DEA) announced a proposal to update the system of records notice for its Aviation Division, changing the categories of individuals covered, record categories, purpose, routine uses, and storage…

Justice Department · Privacy Act of 1974

High Proposed regulation Proposed United States (federal) · Oct 7, 2026 · effective Nov 6, 2026

Treasury proposes new system of records for federal student aid data

The Department of the Treasury proposes to establish a new system of records titled “Department of the Treasury .033--Federal Student Aid Portfolio Research, Analysis, Oversight, Reporting, and Compliance Records.” The system would allow…

Department of the Treasury · Privacy Act of 1974

Moderate New law Signed California · Oct 6, 2026

California Governor signs over 20 AI‑related bills into law

Governor Gavin Newsom signed more than 20 bills covering AI transparency, synthetic performer disclosures, chatbot labeling, and industry‑specific AI use restrictions. The measures amend the California AI Transparency Act, create new…

California AI Transparency Act

Low Enforcement Announced Texas · Oct 6, 2026

Texas AG launches investigation into children's clothing companies over toxic chemicals

Texas Attorney General Ken Paxton announced an investigation into major children’s clothing brands, including Hanes and Fruit of the Loom, for potential toxic chemicals in undergarments. The AG issued Civil Investigative Demands to the…

Texas Attorney General's Office

Moderate New law Signed California · Oct 6, 2026

California signs law banning AI tools that assess employee emotions or collect neural data

On September 30, 2026, Governor Gavin Newsom signed legislation that prohibits employers from using AI-powered workplace surveillance to evaluate employees' emotional states or gather neural data. The law creates new restrictions on…

High Final regulation Announced United States (federal) · Oct 6, 2026 · effective Nov 5, 2026

Treasury exempts new tip intake records from certain Privacy Act provisions

The Department of the Treasury issued a final rule exempting the system of records titled "Treasury .032--Federal Program Waste, Fraud, and Abuse Tip Intake and Referral Records" from specific provisions of the Privacy Act of 1974. The…

Department of the Treasury · Privacy Act of 1974

High Proposed regulation Proposed United States (federal) · Oct 6, 2026 · effective Nov 16, 2026

NARA proposes revisions to System of Records NARA 44 for reasonable accommodation requests

The National Archives and Records Administration (NARA) proposes to revise its System of Records NARA 44, updating the system manager and location. The revision would expand the record type to include reasonable accommodation requests…

National Archives and Records Administration · Privacy Act of 1974