Moderate
Guidance
Published
European Union · Oct 13, 2026
CEPD issues guidance on data protection challenges of smart glasses
The European Data Protection Board adopted a declaration on connected glasses and released a report outlining privacy risks. It clarifies when users act as data controllers under the GDPR and stresses that manufacturers and service…
European Data Protection Board (CEPD) · RGPD
Moderate
Guidance
Published
European Union · Oct 13, 2026
EDPB issues guidance on privacy challenges of smart glasses
The European Data Protection Board adopted statement 1/2026 on smart glasses, highlighting serious privacy concerns and the need for transparency. It clarifies when users act as data controllers and stresses that manufacturers and service…
European Data Protection Board · General Data Protection Regulation
Moderate
Guidance
Signed
European Union · Oct 13, 2026
EU and Ukraine sign administrative arrangement between CERT-EU and CERT-UA at 5th Cyber Dialogue
During the 5th EU‑Ukraine Cyber Dialogue on 9 October, the EU and Ukraine signed an administrative arrangement to enable information exchange between CERT‑EU and its Ukrainian counterpart, CERT‑UA. The dialogue also covered alignment with…
CERT-EU · NIS2 Directive
Moderate
Proposed regulation
Announced
European Union · Oct 13, 2026
EU Commission references forthcoming EU KIDS Act during EU Code Week 2026 launch
At the EU Code Week 2026 opening, the European Commission highlighted several AI‑related initiatives, including the AI Act, the Digital Education Action Plan, the BIK+ strategy, and the forthcoming EU KIDS Act. The event underscored the…
European Commission · EU AI Act
Moderate
Fine
In effect
France · Oct 13, 2026
French DPA fines Google €325 million for spam emails in Gmail
The French data protection authority imposed a €325 million administrative fine on Google for sending spam emails through Gmail, citing violations of the GDPR.
French Data Protection Authority · General Data Protection Regulation
Moderate
Guidance
Announced
European Union · Oct 12, 2026
Future of Privacy Forum Announces 2026 Award Recipients Honoring Data Protection Leadership in Europe
The Future of Privacy Forum announced the winners of its 2026 Awards, recognizing the European Data Protection Supervisor, scholar Christopher Kuner, and SAP executive Corinna Cellarius for their contributions to data protection and…
EDPB · General Data Protection Regulation
Moderate
Guidance
Published
European Union · Oct 12, 2026
noyb ranks EU Parliament members on their stance toward GDPR and ePrivacy amendments
noyb analysed over 1,000 amendments to the GDPR and ePrivacy Directive linked to the Digital Omnibus reform, grading each MEP on whether their changes strengthen or weaken privacy protections. The report finds the European People’s Party…
ePrivacy Directive
Moderate
Executive order
Signed
United States (federal) · Oct 9, 2026
President Trump issues executive order creating federal voter eligibility list
In March 2026, President Trump issued an executive order directing DHS to compile a list of U.S. citizens 18 years or older and directing DOJ to prosecute officials who provide ballots to ineligible voters. The order has been challenged by…
Privacy Act of 1974
Moderate
Fine
In effect
Italy · Oct 9, 2026 · effective Aug 6, 2026
Italian DPA fines security firm €39,000 for employee data violations
The Italian Data Protection Authority (Garante) imposed a total administrative fine of EUR 39,000 on La Patria S.p.A. for failing to respond to employee access requests and for inadequate information about GPS‑derived geolocation data. The…
Garante – Italian Data Protection Authority · General Data Protection Regulation
Moderate
Guidance
Published
France · Oct 9, 2026
CNIL hosts 2nd Rencontres Informatique & Libertés on connected glasses and data‑sanctions
The French data‑protection authority CNIL held its second Rencontres Informatique & Libertés on 29 September 2026, featuring panels on the privacy impact of connected glasses and the role of sanctions under the GDPR. The event gathered…
CNIL · RGPD
Moderate
Guidance
Published
European Union · Oct 9, 2026
EU AI Scientific Panel holds special meeting on frontier AI safety and loss-of-control incidents
On 9 October 2026 the European Commission’s AI Scientific Panel met to discuss recent loss-of-control incidents and technical developments that reduce model monitorability. The panel presented recommendations to strengthen EU capabilities…
European Commission · EU AI Act
Moderate
Proposed bill
Proposed
United States (federal) · Oct 8, 2026
EPIC urges Congress to ban CBP's use of financial data in predictive policing
EPIC reports that Customs & Border Patrol's Predictive Intelligence Targeting Teams are using financial records and travel data to target individuals without disclosing how the data was obtained. The article cites past ICE bulk subpoenas…
U.S. Customs and Border Protection (CBP) · Right to Financial Privacy Act
Moderate
Proposed regulation
Proposed
Vermont · Oct 8, 2026
Future of Privacy Forum submits comments on Vermont Age-Appropriate Design Code rulemaking
On October 2, 2026 the Future of Privacy Forum filed comments to the Vermont Attorney General’s rulemaking for the Age-Appropriate Design Code. The act, enacted in June 2025, sets duties for businesses serving minors and will become…
Vermont Office of the Attorney General · California Age-Appropriate Design Code Act
Moderate
Guidance
In effect
Italy · Oct 8, 2026 · effective Oct 29, 2026 · deadline Oct 29, 2026
Italian Garante's tracking-pixel guidelines become effective Oct 29, 2026
The Italian Data Protection Authority (Garante) issued guidelines governing the use of tracking pixels in email communications. Organizations must comply with the guidelines by October 29, 2026. The guidelines are now effective as of that…
Italian Data Protection Authority (Garante)
Moderate
Proposed regulation
Proposed
France · Oct 8, 2026
CNIL examines draft deliberation authorizing BIG DATA SANTE to process personal data for anonymized medical research (ONCOVAL)
During its plenary session on 8 October 2026, the CNIL will consider a draft deliberation that would permit BIG DATA SANTE (Octopize Mimethik Data) to carry out automated processing of personal data to create anonymised datasets for…
Commission nationale de l'informatique et des libertés (CNIL) · Law of 6 January 1978
Moderate
Enforcement
Decided
Greece · Oct 8, 2026 · effective Jul 28, 2026
Hellenic DPA fines Ministry and EETAA for data breach
The Hellenic Data Protection Authority imposed administrative fines of EUR 200,000 on the Ministry of Social Cohesion and Family Affairs and EUR 150,000 on E.E.T.A.A. S.A. for a large‑scale personal data breach. The Authority also ordered…
Hellenic Data Protection Authority · General Data Protection Regulation
Moderate
Enforcement
Decided
France · Oct 8, 2026
CNIL closes injunction against FRANCE TRAVAIL after compliance with data security measures
The French data protection authority (CNIL) closed the injunction issued on 22 January 2026 against FRANCE TRAVAIL, after the organization demonstrated compliance with the security measures required by Article 32 of the GDPR. The original…
CNIL · RGPD
Moderate
Guidance
Published
Spain · Oct 8, 2026
AEPD publishes second issue of scientific journal “Privacy, Innovation and Technology”
The Spanish Data Protection Agency released the second issue of its scientific journal PIT, dedicated to the 10th anniversary of the GDPR. The monograph examines proactive responsibility, the right to explanation in automated decisions…
Agencia Española de Protección de Datos (AEPD) · Reglamento General de Protección de Datos (RGPD)
Moderate
Proposed bill
Introduced
United States (federal) · Oct 7, 2026
Sen. Gillibrand reintroduces Data Protection Act to create U.S. Data Protection Agency
U.S. Senator Kirsten Gillibrand (D‑NY) has reintroduced the Data Protection Act, which would establish an independent federal Data Protection Agency. The bill aims to limit collection, use and sharing of personal data, oversee high‑risk…
Moderate
Guidance
Announced
United States (federal) · Oct 7, 2026
FTC announces new study on personalized pricing under Section 6(b) of the FTC Act
FTC Chair Andrew Ferguson announced plans for a study examining personalized pricing practices. The study will be conducted under the authority of Section 6(b) of the FTC Act.
Federal Trade Commission · FTC Act Section 5
