REGULATORY WATCH

Privacy, AI governance and data protection developments across the US and the EU, from regulators, legislatures and courts.

⚖️ Latest developments 🌐 Jurisdictions 📚 Law library
159
Last 30 days
24
High or critical
30
Enforcement actions
72
Laws tracked
All types Enforcement Legislation Rulemaking Guidance Litigation
Any impact Critical High Moderate Any time 7 days 30 days 90 days
26 developments
Moderate Guidance Published United States (federal) · Oct 19, 2026
Federal Register limits automated scraping with CAPTCHAs and API access
The Federal Register website warns that aggressive automated scraping of FederalRegister.gov and eCFR.gov is restricted. Programmatic access is limited to the agency's developer APIs, and users may be required to complete CAPTCHAs. The…
Federal Register
Moderate FRAMEWORK UPDATE Announced European Union · Oct 16, 2026
Commission launches RAISE pledging initiative to boost AI support for researchers across Europe
The European Commission announced the launch of the RAISE pledging initiative, aimed at providing AI support to researchers across Europe. The program seeks to foster AI research, facilitate access to AI tools, and encourage collaboration…
European Commission
Moderate Guidance Published France · Oct 16, 2026
CNIL guidance on reconstituting professional email addresses and data subject rights
The CNIL explains that organisations may deduce a professional email address from publicly available information, but must comply with the GDPR and specific commercial prospecting rules. Data subjects must be informed clearly about the…
CNIL · RGPD
Moderate Guidance Announced United States (federal) · Oct 16, 2026
FFIEC Extends Regulatory Capital Reporting Collection (FFIEC 101) for Three Years
The Federal Financial Institutions Examination Council (FFIEC) announced a three‑year extension of the Regulatory Capital Reporting collection for institutions subject to the Advanced Capital Adequacy Framework (FFIEC 101). No public…
Federal Financial Institutions Examination Council (FFIEC) · Paperwork Reduction Act of 1995
Moderate Proposed regulation Proposed France · Oct 15, 2026
CNIL examines draft decree on real‑time audio capture by public transport operators
The CNIL plenary session on 15 October 2026 will examine a draft deliberation providing an opinion on a draft decree concerning the experimentation of real‑time sound capture and transmission systems by bus and coach operators. The agenda…
Commission nationale de l'informatique et des libertés (CNIL) · décret n° 2022‑377 du 17 mars 2022
Moderate Enforcement In effect United States (federal) · Oct 15, 2026
FTC orders Walmart to pay over $9.8M to consumers harmed by wire‑transfer scams
The Federal Trade Commission is sending payments totaling more than $9.8 million to consumers harmed by Walmart’s alleged failure to stop scammers that used its wire transfer services to defraud U.S. customers. The restitution follows FTC…
Federal Trade Commission
Moderate Proposed regulation Proposed United States (federal) · Oct 15, 2026
DOJ proposes exemption for BJS statistical data system from certain Privacy Act provisions
The Office of Justice Programs announced a notice of a new system of records, BJS Statistical Data (JUSTICE/OJP-017), covering data collected under 34 U.S.C. 10132. The agency proposes to exempt this system from specific Privacy Act…
U.S. Department of Justice, Office of Justice Programs · Privacy Act of 1974
Moderate Proposed regulation Proposed United States (federal) · Oct 15, 2026
DOJ EOIR proposes new system of records for Fraud and Abuse Prevention Program
The Executive Office for Immigration Review (EOIR) intends to create a new system of records notice, JUSTICE/EOIR-006, to cover all Fraud and Abuse Prevention Program records. The new notice would replace partial coverage under the…
Department of Justice · Privacy Act of 1974
Moderate Proposed regulation Proposed United States (federal) · Oct 15, 2026
DOJ proposes to exempt EOIR "Fraud and Abuse Prevention Program Records" from certain Privacy Act provisions
The Executive Office for Immigration Review (EOIR) announced a new system of records titled "Fraud and Abuse Prevention Program Records" (JUSTICE/EOIR-006). EOIR proposes to exempt this system from specific provisions of the Privacy Act to…
Executive Office for Immigration Review · Privacy Act of 1974
Moderate New law Signed California · Oct 14, 2026 · effective Jan 1, 2027
California Governor signs SB 1050 requiring AI synthetic performer disclosures in ads
Governor Gavin Newsom signed SB 1050, a California law that bans publishing advertisements with a synthetic performer unless a clear and conspicuous disclosure is provided. The law defines a synthetic performer as a digital figure, voice…
FTC · FTC Act Section 5
Moderate New law Signed California · Oct 14, 2026
California Governor signs four privacy bills expanding deletion rights, privacy settings, data‑broker rules and limiting CIPA lawsuits
Governor Gavin Newsom signed SB 923, AB 2561, AB 883 and SB 690 into law during the 2026 session. SB 923 broadens CCPA deletion rights and requires online request mechanisms; AB 2561 bars operating systems and apps from changing privacy…
CPPA · California Consumer Privacy Act (as amended by CPRA)
Moderate Attorney General action Filed New York · Oct 14, 2026
NY Attorney General urges bankruptcy court to protect children and consumers in Character.AI sale
New York Attorney General Letitia James and a coalition of 39 state AGs filed a motion in the Character Technologies bankruptcy court demanding strong protections for children and users before any sale of Character.AI. The filing cites…
New York Attorney General's Office
Moderate Guidance Published New York · Oct 14, 2026
NY Attorney General releases updated guide on AI-generated election misinformation
The New York Attorney General's Office issued an updated guide to help voters identify and report AI‑generated election misinformation ahead of the November 3, 2026 general election. The guide advises checking official sources, not relying…
New York Attorney General's Office · New York law requiring labeling of AI‑generated political communications as manipulated
Moderate Enforcement In effect France · Oct 14, 2026 · effective Sep 23, 2026
CNIL closes injunction against Google after compliance on cookie and Gmail ad consent
On 23 September 2026 the CNIL's restricted formation closed the injunction issued on 1 September 2025 against Google LLC and Google Ireland Limited. The companies complied by adding clear information about advertising cookies during…
CNIL · Article L.34-5 du code des postes et des communications électroniques
Moderate Guidance Published European Union · Oct 14, 2026
Eurobarometer survey shows increasing AI adoption by European companies
A Eurobarometer survey released by the European Commission indicates that the use of artificial intelligence is growing among companies across Europe. The findings highlight trends in AI deployment and potential implications for the…
European Commission
Moderate Guidance Published European Union · Oct 14, 2026
AI adoption more than doubles in EU strategic sectors, JRC report shows
A Joint Research Centre analysis finds AI use in EU strategic sectors rose from 7% in 2021 to 18% in 2025, driven mainly by large language models. The report highlights sector‑specific barriers, especially lack of expertise and regulatory…
European Commission
Moderate Guidance Proposed United States (federal) · Oct 14, 2026
Agency limits programmatic access to FederalRegister.gov and eCFR.gov, requiring API use and CAPTCHA verification
The agency states that due to aggressive automated scraping, programmatic access to FederalRegister.gov and eCFR.gov is restricted to its developer APIs. Users must complete a CAPTCHA to verify they are human and may request a wider IP…
U.S. Federal Government · Paperwork Reduction Act
Moderate Guidance Published United States (federal) · Oct 14, 2026
DoD establishes new matching program to compare TRICARE pharmacy records with Treasury's Do Not Pay system
The Department of Defense announced a new computer‑matching program that will compare its TRICARE Pharmacy Program records with the Treasury's Do Not Pay Working System. The program is established under the Privacy Act of 1974 and the…
Department of Defense · Privacy Act of 1974
Moderate Guidance Proposed United States (federal) · Oct 14, 2026
Federal Register proposes reorganization limiting programmatic access to its sites
The Division of Program Coordination, Planning, and Strategic Initiatives issued a notice proposing a reorganization that will limit programmatic access to FederalRegister.gov and eCFR.gov due to aggressive automated scraping. Access will…
Division of Program Coordination, Planning, and Strategic Initiatives, Office of the Director
Moderate Court ruling Decided United States (federal) · Oct 13, 2026
Bernstein v. DOJ ruling holds encryption code is protected speech
The podcast notes that the 1995 case Bernstein v. Department of Justice held that code is speech protected by the First Amendment. This precedent underpins modern internet privacy and encryption. The case was brought by Dan Bernstein with…
CPPA · California Delete Act
Older →
Coming up
Oct 2026
19
FCC proposes to modify system of records for National Deaf-Blind Equipment Distribution Program
United States (federal) · effective
Oct 2026
19
FCC modifies Lifeline Program system of records (FCC/WCB-1) under the Privacy Act
United States (federal) · effective
Oct 2026
26
Peace Corps announces new CRM system of records (PC 38) effective Oct 26, 2026
United States (federal) · effective
Oct 2026
28
HHS modifies ORR Unaccompanied Children system of records, effective Oct 28, 2026
United States (federal) · effective
Oct 2026
29
Italian Garante's tracking-pixel guidelines become effective Oct 29, 2026
Italy · effective
Oct 2026
29
Italian Garante's tracking-pixel guidelines become effective Oct 29, 2026
Italy · compliance deadline
Nov 2026
2
DOI establishes new matching program under Privacy Act of 1974
United States (federal) · effective
Nov 2026
5
Treasury exempts new tip intake records from certain Privacy Act provisions
United States (federal) · effective
Nov 2026
6
Treasury proposes new system of records for federal student aid data
United States (federal) · effective
Nov 2026
16
NARA proposes revisions to System of Records NARA 44 for reasonable accommodation requests
United States (federal) · effective
Nov 2026
24
Farm Credit Administration amends employee payroll system of records under Privacy Act, effective Nov 24, 2026
United States (federal) · effective
Dec 2026
20
AEPD launches call for articles for third issue of Revista PIT on GDPR and emerging regulations
Spain · compliance deadline
By jurisdiction
United States (federal)67 new · 16 laws European Union23 new · 14 laws California14 new · 5 laws France14 new · 0 laws New York9 new · 2 laws Italy6 new · 0 laws Spain5 new · 0 laws Global3 new · 0 laws Texas2 new · 3 laws Vermont2 new · 2 laws EU-GB2 new · 0 laws Ireland2 new · 0 laws
All jurisdictions →
Topics this month
privacy · 113security · 67ai governance · 53transparency · 34data minimization · 31children · 28profiling · 27automated decision making · 26consent · 21targeted advertising · 19access · 17data governance · 16