We share daily regulatory updates on AI, privacy, and cybersecurity from OneTrust DataGuidance, backed by 20+ years of expertise.
London
Joined May 2009
- Tweets13.3K
- Following788
- Followers6.7K
- Likes93
🇳🇴 Norway’s Datatilsynet says AI minute-takers can be used in child welfare services under GDPR and the Child Welfare Act, but trust, transparency, data minimization, and prompt deletion are essential.
Check it out: dataguidance.com/news/norway…
🇩🇪 Germany’s Bundestag adopted the EU Cyber Resilience Act bill.
The BSI will oversee market surveillance and support businesses as rules roll out; remaining provisions take effect Dec. 11, 2027.
Read on: dataguidance.com/news/german…
💬 Brazil’s ANPD is seeking input on draft sanctions rules that would expand digital protections for children, adolescents, and women.
Comments close Nov. 30, 2026; an online hearing is set for Oct. 29.
Learn more: dataguidance.com/news/brazil…
⚖️ Montana’s AG is suing OpenAI, alleging ChatGPT endangers kids and teens with harmful advice and no age checks.
Montana law requires notice and parental consent before processing children’s data.
Read now: dataguidance.com/news/montan…
40 state AGs filed a notice in Character.AI’s bankruptcy.
They’re urging safeguards for children and sensitive user data in any asset sale or transfer.
Check it out: dataguidance.com/news/usa-40…
High-risk AI providers now have a harmonized quality-management standard: EN 18286:2026.
Compliance supports a presumption of conformity under the EU AI Act. The decision took effect Oct. 14, 2026.
Learn more: dataguidance.com/news/eu-com…
South Korea: PIPC guide outlines criteria for reducing fines based on investments in data protection measures.
They must be made within three years before a violation; intentional or grossly negligent violations are excluded.
Learn more: dataguidance.com/news/south-…
Turkey requires social networks to verify age, block users under 15, and add safeguards for older minors. Existing accounts must be verified by Mar. 31, 2027; the rules take effect Nov. 1, 2026.
See what changes: dataguidance.com/news/turkey…
The EDPB’s statement on smart glasses flags privacy risks and urges clear recording indicators, transparency, and safeguards. GDPR applies, and some data collection may also trigger ePrivacy rules.
🕶️
Learn more: dataguidance.com/news/eu-edp…
🇮🇳 MeitY’s DPDPA amendment clarifies:
🧒 Consent requirements for children
♿ Consent for people with disabilities
🔎 Section 10 audits mean “data audits”
bit.ly/4ibJGue
🦷 OCR settled potential HIPAA Privacy Rule violations with Shen Smiles for $140K.
After a former patient complained about delayed PHI access, OCR cited missing policies and no formal staff training.
bit.ly/4dwtGjV
🇬🇷 Greece’s HDPA fined the ministry and E.E.T.A.A. €350K after a breach exposed personal, financial, and health data.
Findings cited weak security and gaps in their controller-processor agreement.
bit.ly/4yhikYH
🇪🇺 EU Council authorized signing a South Korea PNR agreement for terrorism and serious-crime cases.
Safeguards must protect personal data and fundamental rights; formal conclusion is pending.
bit.ly/4AR54wt
🇳🇱 Dutch regulators and the NCSC signed cooperation agreements under the Cybersecurity Act.
For covered organizations:
📝 Register with the NCSC
🚨 Report cyber incidents
🛡️ Meet digital resilience standards
bit.ly/4ek42iA
🧭 APDCAT launched a local, multilingual tool for AI rights impact assessments, based on Catalonia’s FRIA model.
It guides planning, scope, and risk scoring, and was piloted at Cruïlla Festival 2026.
bit.ly/4ek42iA
🇲🇾 Malaysia’s PDP seeks feedback on a proposed AI and personal data framework through Oct. 23, 2026.
🧠 AI and data processing
🌍 Transfers and data subject rights
📋 Governance, audits, lifecycle records
bit.ly/4zjQKuA
⚖️ Senators Hawley and Murphy proposed the AI Agent Accountability Act.
It could hold AI developers and operators civilly and criminally liable for hacking incidents, and require reasonable safeguards.
bit.ly/4zefaWm
🏥 Senate passed S. 3315, the Health Care Cybersecurity and Resiliency Act.
It would update HIPAA, mandate cyber safeguards and breach transparency, strengthen HHS-CISA coordination, and fund rural training.
Learn more: bit.ly/471SDQJ
🚗 Sen. Jeff Merkley reintroduced the Car Privacy Rights Act of 2026.
If passed, it would require:
✅ Consumer consent to collect, share, or sell car data
👁️ Access and collection confirmation
🏛️ FTC reporting
bit.ly/47FajSi
🔎 30 days: South Carolina AG Alan Wilson wants Flock Safety’s answers on AI use, data access, sharing, and retention.
The inquiry tests whether the company’s privacy and security claims comply with state law.
bit.ly/4j2QpaX