REGULATORY WATCH

Privacy, AI governance and data protection developments across the US and the EU, from regulators, legislatures and courts.

⚖️ Latest developments 🌐 Jurisdictions 📚 Law library
163
Last 30 days
24
High or critical
31
Enforcement actions
72
Laws tracked
All types Enforcement Legislation Rulemaking Guidance Litigation
Any impact Critical High Moderate Any time 7 days 30 days 90 days
547 developments
Low Enforcement Filed Austria · Jan 18, 2019
noyb files GDPR right‑to‑access complaints against eight streaming services
noyb filed formal complaints with the Austrian Data Protection Authority on behalf of ten users, alleging violations of the GDPR right to access by eight major streaming platforms. The complaints claim that the services either failed to…
Austrian Data Protection Authority · General Data Protection Regulation
Low Enforcement Published Austria · Dec 10, 2018
Austrian DSB decision on DerStandard.at ‘pay or okay’ subscription model
The Austrian Data Protection Authority (DSB) ruled that DerStandard.at’s subscription option requiring users to pay €6 per month for privacy instead of giving free consent is not voluntary under the GDPR. The decision sparked criticism…
Austrian Data Protection Authority (DSB) · General Data Protection Regulation
Low Interpretation Announced Austria · Dec 10, 2018
Austrian DSB says “pay or okay” subscription model violates GDPR consent voluntariness
The Austrian Data Protection Authority (DSB) ruled that Der Standard's subscription offering, which ties refusal of consent to a €6 monthly fee, is not a voluntary choice under the GDPR. Max Schrems and other privacy experts criticized the…
Austrian Data Protection Authority · General Data Protection Regulation
Moderate Interpretation Published European Union · Dec 8, 2018
Noyb reports controllers limit GDPR rights to specific request formats
Noyb notes that many data controllers use automated systems that restrict how data subjects can exercise their GDPR rights, often limiting requests to specific formats that may not serve the data subject's interests. The organization…
EDPB · General Data Protection Regulation
Moderate Interpretation Published European Union · Nov 12, 2018
Max Schrems discusses GDPR on CBS 60 Minutes (Nov 11, 2018)
On 11 November 2018, noyb director Max Schrems appeared on CBS's 60 Minutes to explain the benefits and challenges of the GDPR and how the organization enforces it. The interview highlighted the law's role in allowing Europeans to reclaim…
EDPB · General Data Protection Regulation
Low Court ruling Pending Austria · Oct 16, 2018
Austrian bank appeals DPA decision on GDPR access fee
The Austrian Data Protection Authority ruled that a customer must be granted access to his bank account details under the GDPR. The bank appealed, arguing that banking regulations permit a €30 annual fee for information not available…
Austrian Data Protection Authority · General Data Protection Regulation
Moderate Enforcement Filed European Union · May 25, 2018 · effective May 25, 2018
noyb files GDPR complaints against Google, Instagram, WhatsApp and Facebook for forced consent
On 25 May 2018, the privacy NGO noyb filed four complaints with DPAs in France, Belgium, Germany and Austria alleging that Google, Instagram, WhatsApp and Facebook use forced consent that violates GDPR Article 7(4). The complaints argue…
EDPB · General Data Protection Regulation
← Newer
Coming up
Oct 2026
19
FCC proposes to modify system of records for National Deaf-Blind Equipment Distribution Program
United States (federal) · effective
Oct 2026
19
FCC modifies Lifeline Program system of records (FCC/WCB-1) under the Privacy Act
United States (federal) · effective
Oct 2026
19
Spanish AEPD and Luxembourg CNPD sign MoU to strengthen privacy cooperation
European Union · effective
Oct 2026
26
Peace Corps announces new CRM system of records (PC 38) effective Oct 26, 2026
United States (federal) · effective
Oct 2026
28
HHS modifies ORR Unaccompanied Children system of records, effective Oct 28, 2026
United States (federal) · effective
Oct 2026
29
Italian Garante's tracking-pixel guidelines become effective Oct 29, 2026
Italy · effective
Oct 2026
29
Italian Garante's tracking-pixel guidelines become effective Oct 29, 2026
Italy · compliance deadline
Nov 2026
2
DOI establishes new matching program under Privacy Act of 1974
United States (federal) · effective
Nov 2026
5
Treasury exempts new tip intake records from certain Privacy Act provisions
United States (federal) · effective
Nov 2026
6
Treasury proposes new system of records for federal student aid data
United States (federal) · effective
Nov 2026
16
NARA proposes revisions to System of Records NARA 44 for reasonable accommodation requests
United States (federal) · effective
Nov 2026
24
Farm Credit Administration amends employee payroll system of records under Privacy Act, effective Nov 24, 2026
United States (federal) · effective
By jurisdiction
United States (federal)69 new · 16 laws European Union24 new · 14 laws France15 new · 0 laws California14 new · 5 laws New York9 new · 2 laws Italy6 new · 0 laws Spain5 new · 0 laws Global3 new · 0 laws Texas2 new · 3 laws Vermont2 new · 2 laws EU-GB2 new · 0 laws Ireland2 new · 0 laws
All jurisdictions →
Topics this month
privacy · 115security · 67ai governance · 53transparency · 35data minimization · 31children · 28profiling · 28automated decision making · 26consent · 22targeted advertising · 20data governance · 17access · 17