Moderate
Guidance
Published
United States (federal) · Oct 19, 2026
Federal Register limits automated scraping with CAPTCHAs and API access
The Federal Register website warns that aggressive automated scraping of FederalRegister.gov and eCFR.gov is restricted. Programmatic access is limited to the agency's developer APIs, and users may be required to complete CAPTCHAs. The…
Federal Register
Moderate
Guidance
Published
France · Oct 16, 2026
CNIL guidance on reconstituting professional email addresses and data subject rights
The CNIL explains that organisations may deduce a professional email address from publicly available information, but must comply with the GDPR and specific commercial prospecting rules. Data subjects must be informed clearly about the…
CNIL · RGPD
Moderate
Guidance
Announced
United States (federal) · Oct 16, 2026
FFIEC Extends Regulatory Capital Reporting Collection (FFIEC 101) for Three Years
The Federal Financial Institutions Examination Council (FFIEC) announced a three‑year extension of the Regulatory Capital Reporting collection for institutions subject to the Advanced Capital Adequacy Framework (FFIEC 101). No public…
Federal Financial Institutions Examination Council (FFIEC) · Paperwork Reduction Act of 1995
Moderate
Guidance
Published
New York · Oct 14, 2026
NY Attorney General releases updated guide on AI-generated election misinformation
The New York Attorney General's Office issued an updated guide to help voters identify and report AI‑generated election misinformation ahead of the November 3, 2026 general election. The guide advises checking official sources, not relying…
New York Attorney General's Office · New York law requiring labeling of AI‑generated political communications as manipulated
Moderate
Guidance
Published
European Union · Oct 14, 2026
Eurobarometer survey shows increasing AI adoption by European companies
A Eurobarometer survey released by the European Commission indicates that the use of artificial intelligence is growing among companies across Europe. The findings highlight trends in AI deployment and potential implications for the…
European Commission
Moderate
Guidance
Published
European Union · Oct 14, 2026
AI adoption more than doubles in EU strategic sectors, JRC report shows
A Joint Research Centre analysis finds AI use in EU strategic sectors rose from 7% in 2021 to 18% in 2025, driven mainly by large language models. The report highlights sector‑specific barriers, especially lack of expertise and regulatory…
European Commission
Moderate
Guidance
Proposed
United States (federal) · Oct 14, 2026
Agency limits programmatic access to FederalRegister.gov and eCFR.gov, requiring API use and CAPTCHA verification
The agency states that due to aggressive automated scraping, programmatic access to FederalRegister.gov and eCFR.gov is restricted to its developer APIs. Users must complete a CAPTCHA to verify they are human and may request a wider IP…
U.S. Federal Government · Paperwork Reduction Act
Moderate
Guidance
Published
United States (federal) · Oct 14, 2026
DoD establishes new matching program to compare TRICARE pharmacy records with Treasury's Do Not Pay system
The Department of Defense announced a new computer‑matching program that will compare its TRICARE Pharmacy Program records with the Treasury's Do Not Pay Working System. The program is established under the Privacy Act of 1974 and the…
Department of Defense · Privacy Act of 1974
Moderate
Guidance
Proposed
United States (federal) · Oct 14, 2026
Federal Register proposes reorganization limiting programmatic access to its sites
The Division of Program Coordination, Planning, and Strategic Initiatives issued a notice proposing a reorganization that will limit programmatic access to FederalRegister.gov and eCFR.gov due to aggressive automated scraping. Access will…
Division of Program Coordination, Planning, and Strategic Initiatives, Office of the Director
Moderate
Guidance
Published
European Union · Oct 13, 2026
CEPD issues guidance on data protection challenges of smart glasses
The European Data Protection Board adopted a declaration on connected glasses and released a report outlining privacy risks. It clarifies when users act as data controllers under the GDPR and stresses that manufacturers and service…
European Data Protection Board (CEPD) · RGPD
Moderate
Guidance
Published
European Union · Oct 13, 2026
EDPB issues guidance on privacy challenges of smart glasses
The European Data Protection Board adopted statement 1/2026 on smart glasses, highlighting serious privacy concerns and the need for transparency. It clarifies when users act as data controllers and stresses that manufacturers and service…
European Data Protection Board · General Data Protection Regulation
Moderate
Guidance
Signed
European Union · Oct 13, 2026
EU and Ukraine sign administrative arrangement between CERT-EU and CERT-UA at 5th Cyber Dialogue
During the 5th EU‑Ukraine Cyber Dialogue on 9 October, the EU and Ukraine signed an administrative arrangement to enable information exchange between CERT‑EU and its Ukrainian counterpart, CERT‑UA. The dialogue also covered alignment with…
CERT-EU · NIS2 Directive
Moderate
Guidance
Announced
European Union · Oct 12, 2026
Future of Privacy Forum Announces 2026 Award Recipients Honoring Data Protection Leadership in Europe
The Future of Privacy Forum announced the winners of its 2026 Awards, recognizing the European Data Protection Supervisor, scholar Christopher Kuner, and SAP executive Corinna Cellarius for their contributions to data protection and…
EDPB · General Data Protection Regulation
Moderate
Guidance
Published
European Union · Oct 12, 2026
noyb ranks EU Parliament members on their stance toward GDPR and ePrivacy amendments
noyb analysed over 1,000 amendments to the GDPR and ePrivacy Directive linked to the Digital Omnibus reform, grading each MEP on whether their changes strengthen or weaken privacy protections. The report finds the European People’s Party…
ePrivacy Directive
Moderate
Guidance
Published
France · Oct 9, 2026
CNIL hosts 2nd Rencontres Informatique & Libertés on connected glasses and data‑sanctions
The French data‑protection authority CNIL held its second Rencontres Informatique & Libertés on 29 September 2026, featuring panels on the privacy impact of connected glasses and the role of sanctions under the GDPR. The event gathered…
CNIL · RGPD
Moderate
Guidance
Published
European Union · Oct 9, 2026
EU AI Scientific Panel holds special meeting on frontier AI safety and loss-of-control incidents
On 9 October 2026 the European Commission’s AI Scientific Panel met to discuss recent loss-of-control incidents and technical developments that reduce model monitorability. The panel presented recommendations to strengthen EU capabilities…
European Commission · EU AI Act
Moderate
Guidance
In effect
Italy · Oct 8, 2026 · effective Oct 29, 2026 · deadline Oct 29, 2026
Italian Garante's tracking-pixel guidelines become effective Oct 29, 2026
The Italian Data Protection Authority (Garante) issued guidelines governing the use of tracking pixels in email communications. Organizations must comply with the guidelines by October 29, 2026. The guidelines are now effective as of that…
Italian Data Protection Authority (Garante)
Moderate
Guidance
Published
Spain · Oct 8, 2026
AEPD publishes second issue of scientific journal “Privacy, Innovation and Technology”
The Spanish Data Protection Agency released the second issue of its scientific journal PIT, dedicated to the 10th anniversary of the GDPR. The monograph examines proactive responsibility, the right to explanation in automated decisions…
Agencia Española de Protección de Datos (AEPD) · Reglamento General de Protección de Datos (RGPD)
Moderate
Guidance
Announced
United States (federal) · Oct 7, 2026
FTC announces new study on personalized pricing under Section 6(b) of the FTC Act
FTC Chair Andrew Ferguson announced plans for a study examining personalized pricing practices. The study will be conducted under the authority of Section 6(b) of the FTC Act.
Federal Trade Commission · FTC Act Section 5
Moderate
Guidance
Published
United States (federal) · Oct 5, 2026
EPIC analysis links pixel‑tracking litigation under ECPA and CIPA to upcoming Supreme Court VPPA case
EPIC outlines how recent court decisions using the Electronic Communications Privacy Act (ECPA) and California Invasion of Privacy Act (CIPA) address non‑consensual pixel tracking and its privacy harms. The analysis cites multiple…
HHS OCR · HIPAA Privacy, Security and Breach Notification Rules
