REGULATORY WATCH

Privacy, AI governance and data protection developments across the US and the EU, from regulators, legislatures and courts.

⚖️ Latest developments 🌐 Jurisdictions 📚 Law library
159
Last 30 days
24
High or critical
30
Enforcement actions
72
Laws tracked
All types Enforcement Legislation Rulemaking Guidance Litigation
Any impact Critical High Moderate Any time 7 days 30 days 90 days
31 developments
Moderate New law Signed California · Sep 10, 2026
California AB 1709, a ban on social media for under‑16, signed into law
AB 1709 was signed into law by Governor Gavin Newsom. The law imposes a functional ban on social media use for people under the age of 16 and requires age‑verification. Critics say the ban will increase data collection and limit free…
AB 1709
High Amendment Signed Delaware · Sep 3, 2026 · effective Jan 1, 2027
Delaware Governor signs HB 380, amending the DPDPA effective Jan 1 2027
Governor Meyer signed HB 380 on September 2, amending the Delaware Personal Data Privacy Act. The amendment expands the definition of sensitive data, lowers applicability thresholds, adds new contractual and due‑diligence requirements for…
CFPB · Fair Credit Reporting Act
Moderate Proposed bill Passed one chamber California · Aug 31, 2026
California Assembly Bill 1709 passed, bans social media recommendation features for users under 16
The California legislature passed Assembly Bill 1709, which would prohibit platforms from providing recommendation algorithms and related features to users under 16. The bill would require age‑verification methods that could involve…
AB 1709
Moderate New law In effect United States (federal) · Aug 31, 2026
Five US states enact location privacy laws banning sale of precise geolocation data
Connecticut, Maryland, New Jersey, Oregon, and Virginia have enacted new consumer privacy statutes that prohibit the sale of precise geolocation data. The laws vary in their consent and minimization requirements, but all share a ban on…
MD AG · Maryland Online Data Privacy Act
Low Proposed bill Proposed Global · Aug 18, 2026
US federal age‑verification proposals KIDS Act and KOSA face privacy criticism over ZKP use
The article notes that federal proposals such as the KIDS Act and the Kids Online Safety Act (KOSA) are advancing despite concerns that zero‑knowledge proof (ZKP) based age‑verification systems threaten privacy and create centralized…
KIDS Act
Moderate New law Signed New Jersey · Aug 18, 2026 · effective Aug 1, 2027
New Jersey Governor signs Fair Price Protection Act prohibiting surveillance pricing of groceries
On July 23, Governor Mikie Sherrill signed the Fair Price Protection Act (FPPA) (A4085/4523), which bans surveillance pricing for groceries and other foodstuffs. The law takes effect on August 1, 2027, includes a one‑year moratorium on new…
New Jersey Attorney General · FTC Act Section 5
Moderate New law Signed Colorado · Aug 17, 2026 · effective Jan 1, 2027
Colorado governor signs SB 26-189, revising AI Act to regulate ADMT in employment
On May 14, 2026, Colorado Governor signed SB 26-189, repealing and replacing the 2024 Artificial Intelligence Act. The new law, effective January 1, 2027, targets automated decision‑making technology (ADMT) that materially influences…
DE DOJ · Delaware Personal Data Privacy Act
High New law Signed New Jersey · Aug 12, 2026 · effective Sep 1, 2027
New Jersey enacts Age-Appropriate Design Code (A4015) signed by Governor Sherrill
On August 11, Governor Sherrill signed A4015, the New Jersey Age-Appropriate Design Code (NJAADC). The law, effective September 1, 2027, imposes safety defaults, bans dark patterns, and creates a private right of action. It applies to…
New Jersey Attorney General · Connecticut Data Privacy Act
Moderate Proposed bill Announced European Union · Aug 6, 2026
EU proposes Cloud and AI Development Act (CADA) to boost AI and cloud sovereignty
The European Commission released the Cloud and AI Development Act (CADA) proposal in June 2026, aiming to enhance EU competitiveness in AI and cloud technologies. The draft sets up Cloud and AI Leadership Initiatives, national AI…
European Commission · General Data Protection Regulation
Moderate Proposed bill Introduced United States (federal) · Aug 5, 2026
Senator Mark Kelly introduces Senior Chatbot Protection Act
Future of Privacy Forum notes the bipartisan Senior Chatbot Protection Act was introduced to establish baseline consumer protections and transparency for AI chatbots used by older adults. The statement welcomes the effort to create clear…
Delaware Personal Data Privacy Act
Moderate Proposed bill In committee United States (federal) · Aug 5, 2026
Senate Commerce Committee to vote on four privacy‑invasive bills (KOSA, SCREEN Act, Youth AI Privacy Act, CHATBOT Act)
The Senate Commerce Committee will vote this week on four bills: KOSA, the SCREEN Act, the Youth AI Privacy Act, and the CHATBOT Act. The bills are presented as child‑protection measures but are criticized for creating new privacy and…
U.S. Senate Commerce Committee · KOSA
← Newer
Coming up
Oct 2026
19
FCC proposes to modify system of records for National Deaf-Blind Equipment Distribution Program
United States (federal) · effective
Oct 2026
19
FCC modifies Lifeline Program system of records (FCC/WCB-1) under the Privacy Act
United States (federal) · effective
Oct 2026
26
Peace Corps announces new CRM system of records (PC 38) effective Oct 26, 2026
United States (federal) · effective
Oct 2026
28
HHS modifies ORR Unaccompanied Children system of records, effective Oct 28, 2026
United States (federal) · effective
Oct 2026
29
Italian Garante's tracking-pixel guidelines become effective Oct 29, 2026
Italy · effective
Oct 2026
29
Italian Garante's tracking-pixel guidelines become effective Oct 29, 2026
Italy · compliance deadline
Nov 2026
2
DOI establishes new matching program under Privacy Act of 1974
United States (federal) · effective
Nov 2026
5
Treasury exempts new tip intake records from certain Privacy Act provisions
United States (federal) · effective
Nov 2026
6
Treasury proposes new system of records for federal student aid data
United States (federal) · effective
Nov 2026
16
NARA proposes revisions to System of Records NARA 44 for reasonable accommodation requests
United States (federal) · effective
Nov 2026
24
Farm Credit Administration amends employee payroll system of records under Privacy Act, effective Nov 24, 2026
United States (federal) · effective
Dec 2026
20
AEPD launches call for articles for third issue of Revista PIT on GDPR and emerging regulations
Spain · compliance deadline
By jurisdiction
United States (federal)67 new · 16 laws European Union23 new · 14 laws California14 new · 5 laws France14 new · 0 laws New York9 new · 2 laws Italy6 new · 0 laws Spain5 new · 0 laws Global3 new · 0 laws Texas2 new · 3 laws Vermont2 new · 2 laws EU-GB2 new · 0 laws Ireland2 new · 0 laws
All jurisdictions →
Topics this month
privacy · 113security · 67ai governance · 53transparency · 34data minimization · 31children · 28profiling · 27automated decision making · 26consent · 21targeted advertising · 19access · 17data governance · 16