Vietnam: MST announces AI Law establishing national governance framework.
Vietnam's new AI law has taken effect, introducing a risk‑based framework with human oversight requirements and transparency obligations for AI systems.
Read now: https://bit.ly/3P8T0TN
Canada: Bill on respecting lawful access introduced to Parliament.
The bill would introduce a lawful access framework in Canada, expanding authorities' powers to obtain subscriber and transmission data from service providers.
Learn more: https://bit.ly/46ZFdF9
EU: Council agrees on position on Digital Omnibus on AI Regulation Proposal, proposing new prohibited AI practices, registration obligations, and revised timelines under the AI Act.
Check it out: https://bit.ly/3NxnqP4
Spain: CCN publishes infographics on NIS2 compliance.
The CCN has published new infographics to help organizations understand and comply with the NIS2 Directive, highlighting the role of Spain's National Security Scheme.
Learn more: https://bit.ly/4uFSr4e
USA: COPPA 2.0 passes Senate with amendments.
The bill would expand COPPA protections to cover teens, strengthen consent and deletion rights, and restrict targeted advertising to children and teens.
Check it out: https://bit.ly/46YUvdn
France: Council of State upholds €40 million CNIL fine against Criteo.
The French Council of State has upheld the CNIL's €40 million fine against Criteo, confirming GDPR breaches related to consent, transparency, and ad‑tracking practices.
Read now: https://bit.ly/4s1D58l
New Zealand: OPC publishes new privacy guidance for education sector.
The OPC has published new privacy guidance to help education staff protect children's personal information, with practical advice on digital tools and real‑world scenarios.
Read now: https://bit.ly/40Yrz1z
Singapore: MOH and HSA publish updated AI in healthcare guidelines, setting out governance and risk controls for the responsible use of AI in the healthcare sector.
Read now: https://bit.ly/4blh90G
Australia: ACMA fines Lululemon AUD 702,900 for direct marketing violations.
The ACMA has fined Lululemon for sending marketing emails without a functional unsubscribe option, breaching spam laws.
Learn more: https://bit.ly/3Ne0JiQ
New York: Bill for generative AI notices passes Senate.
The bill would require generative AI systems in New York to display clear notices warning users that AI‑generated outputs may be inaccurate.
Learn more: https://bit.ly/4rm3UCY
International: COMESA investigates Meta for alleged abuse of dominant position over alleged anti‑competitive changes restricting AI providers' access to WhatsApp's Business API.
Read now: https://bit.ly/46UeOsm
California: CalPrivacy fines Ford Motor Company $375,703 for opt-out process.
CalPrivacy has fined Ford for unlawfully requiring email verification before consumers could opt out of data sales and sharing under the CCPA.
Read now: https://bit.ly/4sCHiPK
Malta: MFSA issues a circular concerning DORA.
MFSA has issued guidance on new DORA data quality checks for Register of Information submissions in the 2026 reporting cycle.
Learn more: https://bit.ly/4ssDgcy
South Korea: PIPC issues standard draft personal information processing policies.
The data protection authority has released ready‑to‑use privacy policy templates for real estate agents, travel agencies, and senior welfare centers.
Read on: https://bit.ly/4ljAp3q
Georgia: Bill on surveillance pricing read for second time in the House.
The bill would restrict surveillance‑based pricing by large grocery retailers in Georgia and limit how electronic shelf labels and personal data can be used to adjust prices.
Learn more: https://bit.ly/4sBhgwd
Finland: NCSC-FI publishes guide on quantum-secure encryption.
NCSC-FI has published new guidance to help organizations transition to quantum‑secure encryption methods.
Check it out: https://bit.ly/4daWdvY
UK: ICO launches consultation on draft guidance on research, archiving, and statistical provisions.
The ICO has launched a public consultation on updated guidance for research, archiving, and statistical processing under data protection law.
Read now: https://bit.ly/4lkrgaS
USA: House Energy and Commerce Committee advances KIDS Act and others to the full House of Representatives.
A total of eight pieces of legislation were reported to the full House of Representatives.
Explore more: https://bit.ly/3P1wg83
Ecuador: The SPDP issued a draft regulation on the complaints procedure for DPOs who believe their independence has been undermined through unjustified dismissal, sanction, or reprisal.
Learn more: https://bit.ly/4rjanyy
Oregon: Bill on AI companions passes both houses.
The Senate agreed to the House amendments and repassed the bill, defining AI companions and platforms, setting requirements, and allowing individuals to seek damages for violations.
Read now: https://bit.ly/4beSY4h
Virginia: Bill prohibiting sale of geolocation data passes both houses.
The bill amends the CDPA to prohibit controllers from selling precise geolocation data and removes Attorney General enforcement provisions for violations.
Explore more: https://bit.ly/40hDGXg
Illinois: Bill on AI deception amended in the House.
The bill makes it unlawful for businesses to use chatbots or AI that could mislead consumers into thinking they're human without clear disclosure.
Read now: https://bit.ly/4sMou0H
Georgia: Bill on AI safety read for second time in Senate.
The bill applies to operators of conversational AI services and requires the disclosure of AI interactions to users, as well as safeguards for minors.
Check it out: https://bit.ly/4b67JGt
Michigan: Bill on use of automated decisions and electronic monitoring referred to Committee.
The bill regulates the use of automated decision tools and electronic monitoring in employment to protect employees and job applicants.
Read more: https://bit.ly/3MLvzzb
New York: Bill on generative AI notices read for second time in Senate.
The bill mandates clear and conspicuous notices on generative AI systems about potential inaccuracies, with penalties for noncompliance.
Read more: https://bit.ly/4rdji4F
California: CalPrivacy fines PlayOn Sports $1.10M for use of tracking technologies.
CalPrivacy fined PlayOn Sports $1.10 million for CCPA violations related to tracking technologies and inadequate opt-out mechanisms.
Check it out: https://bit.ly/4aZR2MF
Connecticut: Online Safety Bill introduced to Senate
The bill introduces requirements regarding AI and automated employment-related decision processes, establishes an AI Policy Office, and mandates workforce development programs in Connecticut
Read more: https://bit.ly/403dvnb
Spain: AEPD issues recommendations on data sovereignty.
The recommendations aim to enhance data sovereignty and operational resilience following a major cloud service disruption in 2025.
Explore more: https://bit.ly/4rNncST
Vietnam: AI Law comes into effect.
Vietnam's new AI law took effect on March 1, 2026, introducing a comprehensive, risk-based framework that regulates the development, deployment, and use of AI in Vietnam.
Check it out: https://bit.ly/4r1lhJ3
EU: CJEU publishes AG Opinion in Meta antitrust cases.
The Advocate General of the CJEU supported the European Commission's authority to request information from Meta for antitrust investigations and proposed dismissing Meta's appeals.
Learn more: https://bit.ly/4rJtPFz
