High
Proposed regulation
Proposed
United States (federal) · Oct 19, 2026 · effective Oct 19, 2026
FCC proposes to modify system of records for National Deaf-Blind Equipment Distribution Program
The Federal Communications Commission proposes amendments to the FCC/CGB-3 system of records, updating its purposes, categories of individuals and records, and adding two new routine uses. The changes are intended to meet Privacy Act…
Federal Communications Commission · Privacy Act of 1974
High
Final regulation
In effect
United States (federal) · Oct 19, 2026 · effective Oct 19, 2026
FCC modifies Lifeline Program system of records (FCC/WCB-1) under the Privacy Act
The Federal Communications Commission is amending the FCC/WCB-1 system of records that supports the Lifeline Program, which provides discounted voice and broadband services to low‑income households. The amendment updates the categories of…
Federal Communications Commission · Privacy Act of 1974
High
Guidance
Published
France · Oct 16, 2026 · effective Oct 16, 2026
CNIL guidance on lawful reconstitution of professional email addresses
The CNIL explains that reconstructing professional email addresses from publicly available data must comply with the GDPR and can rely on legitimate interest only if specific conditions are met. Organizations must assess the visibility of…
CNIL · RGPD
Low
Court ruling
Decided
New York · Oct 15, 2026
Southern District of New York denies government motion to dismiss lawsuit over Trump admin social media surveillance of noncitizens
A federal district court rejected the government’s arguments that immigration law bars the case and that the unions lack standing, allowing the lawsuit to proceed. The court found that the surveillance program causes concrete injuries…
Immigration and Nationality Act
Moderate
Proposed regulation
Proposed
France · Oct 15, 2026
CNIL examines draft decree on real‑time audio capture by public transport operators
The CNIL plenary session on 15 October 2026 will examine a draft deliberation providing an opinion on a draft decree concerning the experimentation of real‑time sound capture and transmission systems by bus and coach operators. The agenda…
Commission nationale de l'informatique et des libertés (CNIL) · décret n° 2022‑377 du 17 mars 2022
High
Guidance
Published
Spain · Oct 15, 2026 · deadline Dec 20, 2026
AEPD launches call for articles for third issue of Revista PIT on GDPR and emerging regulations
The Spanish Data Protection Agency (AEPD) announced a call for original research articles for the third issue of its scientific journal "Privacidad, Innovación y Tecnología (PIT)". Submissions are accepted from 1 November to 20 December…
Agencia Española de Protección de Datos (AEPD) · Reglamento General de Protección de Datos (RGPD)
Moderate
Proposed regulation
Proposed
United States (federal) · Oct 15, 2026
DOJ proposes exemption for BJS statistical data system from certain Privacy Act provisions
The Office of Justice Programs announced a notice of a new system of records, BJS Statistical Data (JUSTICE/OJP-017), covering data collected under 34 U.S.C. 10132. The agency proposes to exempt this system from specific Privacy Act…
U.S. Department of Justice, Office of Justice Programs · Privacy Act of 1974
Moderate
Proposed regulation
Proposed
United States (federal) · Oct 15, 2026
DOJ EOIR proposes new system of records for Fraud and Abuse Prevention Program
The Executive Office for Immigration Review (EOIR) intends to create a new system of records notice, JUSTICE/EOIR-006, to cover all Fraud and Abuse Prevention Program records. The new notice would replace partial coverage under the…
Department of Justice · Privacy Act of 1974
Moderate
Proposed regulation
Proposed
United States (federal) · Oct 15, 2026
DOJ proposes to exempt EOIR "Fraud and Abuse Prevention Program Records" from certain Privacy Act provisions
The Executive Office for Immigration Review (EOIR) announced a new system of records titled "Fraud and Abuse Prevention Program Records" (JUSTICE/EOIR-006). EOIR proposes to exempt this system from specific provisions of the Privacy Act to…
Executive Office for Immigration Review · Privacy Act of 1974
High
Guidance
In effect
United States (federal) · Oct 15, 2026 · effective Nov 24, 2026
Farm Credit Administration amends employee payroll system of records under Privacy Act, effective Nov 24, 2026
The Farm Credit Administration announced an amendment to its FCA-1 system of records covering employee attendance, leave, and payroll. The amendment updates the categories of individuals and records maintained and revises the policies and…
Farm Credit Administration · Privacy Act of 1974
Low
Lawsuit filed
Filed
Wisconsin · Oct 14, 2026
EFF and ACLU file petition to Wisconsin Supreme Court seeking warrant for ALPR database searches
The Electronic Frontier Foundation and the ACLU of Wisconsin have filed a petition with the Wisconsin Supreme Court asking the court to require a warrant for retrospective searches of Automated License Plate Reader (ALPR) databases. The…
Low
Enforcement
Published
United States (federal) · Oct 14, 2026
DHS OIG audit finds TSA failed to safeguard passenger facial recognition data
The DHS Office of Inspector General reported a significant weakness in TSA's facial recognition system, noting that the vendor could access and extract sensitive driver’s license and passport images without TSA’s knowledge. The audit found…
Department of Homeland Security Office of Inspector General (DHS OIG)
Low
Court ruling
Decided
United States (federal) · Oct 14, 2026
Court allows lawsuit against government surveillance program "Catch and Revoke" to proceed
A court issued a ruling permitting the EFF‑led lawsuit challenging the "Catch and Revoke" mass surveillance program to move forward. The program is alleged to use AI to suppress protected speech online. The decision is viewed as a win for…
Moderate
New law
Signed
California · Oct 14, 2026
California Governor signs four privacy bills expanding deletion rights, privacy settings, data‑broker rules and limiting CIPA lawsuits
Governor Gavin Newsom signed SB 923, AB 2561, AB 883 and SB 690 into law during the 2026 session. SB 923 broadens CCPA deletion rights and requires online request mechanisms; AB 2561 bars operating systems and apps from changing privacy…
CPPA · California Consumer Privacy Act (as amended by CPRA)
Low
Guidance
Published
EU-GB · Oct 14, 2026
UK ICO publishes report on data protection challenges in AI and launches Agentic AI Project
The Information Commissioner’s Office released a report after scrutinising ten of the world’s largest artificial intelligence foundation model developers operating in the UK. The report highlights data protection challenges associated with…
Information Commissioner’s Office
Moderate
Attorney General action
Filed
New York · Oct 14, 2026
NY Attorney General urges bankruptcy court to protect children and consumers in Character.AI sale
New York Attorney General Letitia James and a coalition of 39 state AGs filed a motion in the Character Technologies bankruptcy court demanding strong protections for children and users before any sale of Character.AI. The filing cites…
New York Attorney General's Office
Moderate
Guidance
Published
New York · Oct 14, 2026
NY Attorney General releases updated guide on AI-generated election misinformation
The New York Attorney General's Office issued an updated guide to help voters identify and report AI‑generated election misinformation ahead of the November 3, 2026 general election. The guide advises checking official sources, not relying…
New York Attorney General's Office · New York law requiring labeling of AI‑generated political communications as manipulated
Moderate
Enforcement
In effect
France · Oct 14, 2026 · effective Sep 23, 2026
CNIL closes injunction against Google after compliance on cookie and Gmail ad consent
On 23 September 2026 the CNIL's restricted formation closed the injunction issued on 1 September 2025 against Google LLC and Google Ireland Limited. The companies complied by adding clear information about advertising cookies during…
CNIL · Article L.34-5 du code des postes et des communications électroniques
Moderate
Guidance
Published
European Union · Oct 14, 2026
AI adoption more than doubles in EU strategic sectors, JRC report shows
A Joint Research Centre analysis finds AI use in EU strategic sectors rose from 7% in 2021 to 18% in 2025, driven mainly by large language models. The report highlights sector‑specific barriers, especially lack of expertise and regulatory…
European Commission
Moderate
Guidance
Published
United States (federal) · Oct 14, 2026
DoD establishes new matching program to compare TRICARE pharmacy records with Treasury's Do Not Pay system
The Department of Defense announced a new computer‑matching program that will compare its TRICARE Pharmacy Program records with the Treasury's Do Not Pay Working System. The program is established under the Privacy Act of 1974 and the…
Department of Defense · Privacy Act of 1974
