REGULATORY WATCH

Privacy, AI governance and data protection developments across the US and the EU, from regulators, legislatures and courts.

⚖️ Latest developments 🌐 Jurisdictions 📚 Law library
159
Last 30 days
24
High or critical
30
Enforcement actions
72
Laws tracked
All types Enforcement Legislation Rulemaking Guidance Litigation
Any impact Critical High Moderate Any time 7 days 30 days 90 days
4 developments
Moderate Enforcement In effect United States (federal) · Oct 15, 2026
FTC orders Walmart to pay over $9.8M to consumers harmed by wire‑transfer scams
The Federal Trade Commission is sending payments totaling more than $9.8 million to consumers harmed by Walmart’s alleged failure to stop scammers that used its wire transfer services to defraud U.S. customers. The restitution follows FTC…
Federal Trade Commission
Moderate Attorney General action Filed New York · Oct 14, 2026
NY Attorney General urges bankruptcy court to protect children and consumers in Character.AI sale
New York Attorney General Letitia James and a coalition of 39 state AGs filed a motion in the Character Technologies bankruptcy court demanding strong protections for children and users before any sale of Character.AI. The filing cites…
New York Attorney General's Office
Moderate Enforcement In effect France · Oct 14, 2026 · effective Sep 23, 2026
CNIL closes injunction against Google after compliance on cookie and Gmail ad consent
On 23 September 2026 the CNIL's restricted formation closed the injunction issued on 1 September 2025 against Google LLC and Google Ireland Limited. The companies complied by adding clear information about advertising cookies during…
CNIL · Article L.34-5 du code des postes et des communications électroniques
Moderate Fine In effect France · Oct 13, 2026
French DPA fines Google €325 million for spam emails in Gmail
The French data protection authority imposed a €325 million administrative fine on Google for sending spam emails through Gmail, citing violations of the GDPR.
French Data Protection Authority · General Data Protection Regulation
Coming up
Oct 2026
19
FCC proposes to modify system of records for National Deaf-Blind Equipment Distribution Program
United States (federal) · effective
Oct 2026
19
FCC modifies Lifeline Program system of records (FCC/WCB-1) under the Privacy Act
United States (federal) · effective
Oct 2026
26
Peace Corps announces new CRM system of records (PC 38) effective Oct 26, 2026
United States (federal) · effective
Oct 2026
28
HHS modifies ORR Unaccompanied Children system of records, effective Oct 28, 2026
United States (federal) · effective
Oct 2026
29
Italian Garante's tracking-pixel guidelines become effective Oct 29, 2026
Italy · effective
Oct 2026
29
Italian Garante's tracking-pixel guidelines become effective Oct 29, 2026
Italy · compliance deadline
Nov 2026
2
DOI establishes new matching program under Privacy Act of 1974
United States (federal) · effective
Nov 2026
5
Treasury exempts new tip intake records from certain Privacy Act provisions
United States (federal) · effective
Nov 2026
6
Treasury proposes new system of records for federal student aid data
United States (federal) · effective
Nov 2026
16
NARA proposes revisions to System of Records NARA 44 for reasonable accommodation requests
United States (federal) · effective
Nov 2026
24
Farm Credit Administration amends employee payroll system of records under Privacy Act, effective Nov 24, 2026
United States (federal) · effective
Dec 2026
20
AEPD launches call for articles for third issue of Revista PIT on GDPR and emerging regulations
Spain · compliance deadline
By jurisdiction
United States (federal)67 new · 16 laws European Union23 new · 14 laws California14 new · 5 laws France14 new · 0 laws New York9 new · 2 laws Italy6 new · 0 laws Spain5 new · 0 laws Global3 new · 0 laws Texas2 new · 3 laws Vermont2 new · 2 laws EU-GB2 new · 0 laws Ireland2 new · 0 laws
All jurisdictions →
Topics this month
privacy · 113security · 67ai governance · 53transparency · 34data minimization · 31children · 28profiling · 27automated decision making · 26consent · 21targeted advertising · 19access · 17data governance · 16