REGULATORY WATCH

Privacy, AI governance and data protection developments across the US and the EU, from regulators, legislatures and courts.

⚖️ Latest developments 🌐 Jurisdictions 📚 Law library
159
Last 30 days
24
High or critical
30
Enforcement actions
72
Laws tracked
All types Enforcement Legislation Rulemaking Guidance Litigation
Any impact Critical High Moderate Any time 7 days 30 days 90 days
Topic: consent · clear
27 developments
Low Appeal Filed Sweden · Jun 22, 2022
noyb files appeal against Swedish DPA's refusal to treat data subjects as parties in GDPR complaints
The Swedish Data Protection Authority (IMY) rejected a request by a data subject to participate in a GDPR access‑request procedure, stating the subject was not a party to the case. noyb filed an appeal to the administrative court in…
Swedish Data Protection Authority (IMY) · General Data Protection Regulation
Moderate Court ruling Decided Austria · Jul 20, 2021
Austrian Supreme Court refers Facebook case to CJEU over consent vs contract and awards €500 symbolic damages
The Austrian Supreme Court (OGH) referred four questions to the Court of Justice of the EU concerning Facebook's reliance on contract instead of consent under the GDPR. In a partial judgment, the court awarded Max Schrems €500 for lack of…
EDPB · General Data Protection Regulation
Moderate Court ruling Pending Austria · Mar 14, 2021
Austrian Supreme Court to consider referral of Facebook GDPR consent bypass case
The Austrian Supreme Court (OGH) has been asked to refer a case concerning Facebook's alleged bypass of GDPR consent rules to the CJEU. The dispute centers on Facebook's claim that a contractual duty to provide personalized advertising…
EDPB · General Data Protection Regulation
Moderate Court ruling Decided Austria · Dec 29, 2020
Vienna Superior Court orders Facebook to pay €500 and grant full data access
The Viennese Superior Court ruled that Facebook must pay Mr. Schrems €500 in emotional damages and provide him full access to all personal data the company holds about him. The court held that Facebook does not need user consent under GDPR…
EDPB · General Data Protection Regulation
Moderate Court ruling Pending Austria · Feb 26, 2020
Vienna Regional Court closes oral hearing in GDPR case against Facebook, judgment pending
The Vienna Regional Court for Civil Matters (LGfZRS) ended a nine‑hour oral hearing in a data‑protection lawsuit against Facebook. The court will issue a written judgment in the coming months and the case is expected to be appealed to…
EDPB · General Data Protection Regulation
Low Lawsuit filed Pending Austria · Nov 12, 2019
Austrian court hears case accusing Facebook of processing data without consent under GDPR
In proceedings before the Vienna Regional Court, Facebook admitted to collecting and processing user data without consent since the GDPR took effect on May 25, 2018. The plaintiff argues that Facebook cannot rely on an alleged advertising…
EDPB · General Data Protection Regulation
Low Court ruling Decided Austria · Jun 21, 2019
Austrian Supreme Court rejects Facebook's attempt to block GDPR model lawsuit
The Austrian Supreme Court dismissed all of Facebook's efforts to halt a model privacy lawsuit, confirming that any party may bring a claim under the GDPR. The court also ruled that national variations of the GDPR can no longer restrict…
EDPB · General Data Protection Regulation
← Newer
Coming up
Oct 2026
19
FCC proposes to modify system of records for National Deaf-Blind Equipment Distribution Program
United States (federal) · effective
Oct 2026
19
FCC modifies Lifeline Program system of records (FCC/WCB-1) under the Privacy Act
United States (federal) · effective
Oct 2026
26
Peace Corps announces new CRM system of records (PC 38) effective Oct 26, 2026
United States (federal) · effective
Oct 2026
28
HHS modifies ORR Unaccompanied Children system of records, effective Oct 28, 2026
United States (federal) · effective
Oct 2026
29
Italian Garante's tracking-pixel guidelines become effective Oct 29, 2026
Italy · effective
Oct 2026
29
Italian Garante's tracking-pixel guidelines become effective Oct 29, 2026
Italy · compliance deadline
Nov 2026
2
DOI establishes new matching program under Privacy Act of 1974
United States (federal) · effective
Nov 2026
5
Treasury exempts new tip intake records from certain Privacy Act provisions
United States (federal) · effective
Nov 2026
6
Treasury proposes new system of records for federal student aid data
United States (federal) · effective
Nov 2026
16
NARA proposes revisions to System of Records NARA 44 for reasonable accommodation requests
United States (federal) · effective
Nov 2026
24
Farm Credit Administration amends employee payroll system of records under Privacy Act, effective Nov 24, 2026
United States (federal) · effective
Dec 2026
20
AEPD launches call for articles for third issue of Revista PIT on GDPR and emerging regulations
Spain · compliance deadline
By jurisdiction
United States (federal)67 new · 16 laws European Union23 new · 14 laws California14 new · 5 laws France14 new · 0 laws New York9 new · 2 laws Italy6 new · 0 laws Spain5 new · 0 laws Global3 new · 0 laws Texas2 new · 3 laws Vermont2 new · 2 laws EU-GB2 new · 0 laws Ireland2 new · 0 laws
All jurisdictions →
Topics this month
privacy · 113security · 67ai governance · 53transparency · 34data minimization · 31children · 28profiling · 27automated decision making · 26consent · 21targeted advertising · 19access · 17data governance · 16