DataGuidance

EU: EDPB and Commission published Guidelines on interplay between DMA and GDPR.

The EDPB and European Commission have issued joint guidelines clarifying how the DMA and #GDPR intersect, outlining key compliance areas, and opening consultation.

Read now: https://bit.ly/3KCH5vk

California: Bill on data broker registration for data collection and deletion signed by Governor.

California has signed SB 361 into law, expanding data broker registration requirements and obligations under the CPPA.

Learn more: https://bit.ly/48ojoAO

Australia: Federal Court fines Australian Clinical Labs AUD 5.8 million due to data breach.

The fine follows a 2022 Medlab Pathology data breach, with Australian Clinical Labs ordered to pay AUD 5.8 million.

Check it out: https://bit.ly/42wrZ0p

California: Bill on opt-out preference signal signed by Governor.

California has signed AB 566 into law, requiring mobile operating systems and browsers to support consumer opt-out preference signals under the CCPA starting January 2027.

Read now: https://bit.ly/3J2zV2K

India: CCI publishes report on #AI and competition.

The CCI's new report warns of AI-related competition risks like dominance and algorithmic collusion, urging self-audits and greater transparency.

Read now: https://bit.ly/3KyNS9k

Switzerland: FDPIC updates cookie guidelines.

The FDPIC updated its cookie guidelines, clarifying consent requirements for personalized advertising, location data, and cookie paywalls.

Learn more: https://bit.ly/3IMBpOL

EU: Commission launches AI Act Service Desk and Single Information Platform to help stakeholders navigate and comply with the #AIAct through expert guidance, tools, and resources.

Check it out: https://bit.ly/46WD109

Netherlands: AP and ACM publish opinion on AI chatbots.

Dutch regulators urge organizations using #AI chatbots to ensure transparency, human oversight, and correctable responses ahead of EU AI Act rules in August 2026.

Learn more: https://bit.ly/3KCMjXQ

Spain: APDCAT updates DPIA online tool and practical guide.

The Catalan data protection authority updated its #DPIA tool, guide, and user manual, adding ENS 2022-aligned measures to help organizations manage data protection risks.

Read now: https://bit.ly/42QihX1

Canada: Bill on cybersecurity passes second reading.

The bill strengthens Canada's cybersecurity by requiring critical system operators to implement security measures and report incidents.

Check it out: https://bit.ly/3KWQxtk

California: Bill on customer notification of data breaches signed by Governor.

The bill requires businesses to notify affected consumers of data breaches within 30 days and report to the AG within 15 days.

Read now: https://bit.ly/3IWJXT8

Pennsylvania: Act amending Breach Act passes House.

The bill updates definitions of personal information and electronic notices, introduces remedies and penalties for violations.

Learn more: https://bit.ly/3Kves3b

International: OECD publishes paper on mapping data collection mechanism for #AI training.

The paper introduces a taxonomy of how data is sourced, from direct user input to third-party providers.

Learn more: https://bit.ly/4mPU8XC

USA: Subpart J of Executive Order 14117 enters into effect.

Subpart J of Executive Order 14117 requires entities involved in restricted data transactions to establish certified compliance programs.

Check it out: https://bit.ly/48iqXsG

USA: CAISI evaluation of DeepSeek AI finds cybersecurity risks

NIST's AI center found #DeepSeek's models highly likely to follow malicious instructions, including phishing, malware use, and credential theft.

Check it out: https://bit.ly/46Apuwt

New York: AG reminds social media companies of obligations under the Stop Hiding Hate Act.

New York's Stop Hiding Hate Act requires social media companies to report content moderation data biannually.

Read now: https://bit.ly/4nwmaIH

USA: Bill for AI LEAD Act referred to Committee.

The AI LEAD Act proposes civil liability for AI developers and deployers who cause harm through unsafe design, misuse, or inadequate warnings.

Learn more: https://bit.ly/488IQKl

USA: DOJ file lawsuit against Iconic Hearts for #COPPA violations.

The DOJ sued Iconic Hearts for violating COPPA, the FTC Act, and ROSCA by mishandling children's data and using deceptive marketing.

Read now: https://bit.ly/3IDLvBr

USA: DOJ file lawsuit against Iconic Hearts for COPPA violations.

The DOJ sued Iconic Hearts for violating #COPPA, the #FTC Act, and ROSCA by mishandling children's data and using deceptive marketing.

Read now: https://bit.ly/3IDLvBr

Montana: Act to revise privacy laws related to biometric, genetic, and neural data enters into effect.

Learn more: https://bit.ly/3WgrPXo

Colorado: Act amending CPA to address minors protection enters into effect.

Colorado strengthens online privacy for minors, banning targeted ads and manipulative design, requiring consent and risk assessments.

Read on: https://bit.ly/3IKZxRM

California: Regulations protecting against AI employment discrimination enter into effect.

The regulations clarify that using AI or automated decision systems in hiring and employment must not discriminate against protected groups.

Learn more: https://bit.ly/46PCM74

USA: FTC issues a proposed order for $1 million against Citizens Disability for telemarketing violations.

The FTC reached a settlement with Citizens Disability over unlawful robocalls, misrepresentations, and Do Not Call violations.

Check it out: https://bit.ly/46B7nqo

Montana: Act to revise privacy laws enters into effect.

Montana's new privacy law strengthens minors' protections, expands consumer rights, and speeds up enforcement.

Read now: https://bit.ly/46Ih6LD

USA: HHS reaches $182,000 settlement with Cadia for disclosure of medical data.

HHS OCR reached a settlement with Cadia Rehabilitation for improperly disclosing patient health information on social media.

Learn more: https://bit.ly/4mLmG4v

UK: NCSC publishes guidance on understanding OT environments.

The guidance from the UK's NCSC outlines how organizations can create and maintain a definitive record of their OT environments.

Read on: https://bit.ly/4mLmlyL

Ecuador: SPDP publishes draft regulation on data transfers.

The SPDP released a draft regulation on national and international personal data transfers, detailing safeguards, authorization procedures, and reporting obligations.

Learn more: https://bit.ly/4nSjrsS

California: CPPA fines Tractor Supply Company $1.35M for CCPA violations.

The company must update policies, contracts, and procedures to ensure compliance and strengthen consumer privacy protections.

Check it out: https://bit.ly/486vU7P

Maryland: MODPA takes effect.

MODPA takes effect October 1, 2025, giving consumers new rights and imposing data protection rules and penalties on businesses handling residents' personal data.

Read now: https://bit.ly/4mNbXXc

Italy: AI Law published in Official Gazette.

Italy's new AI Law aligns AI use with GDPR and national privacy rules, sets sector-specific obligations, and establishes a National AI Strategy under AgID and CAN.

Learn more: https://bit.ly/4mLa9Oq