The UK government has published its Smart Data 2035 Strategy, setting a target of five or more active smart data schemes by 2030 and 20 or more by 2035, backed by at least £36 million in public investment over four years.
Continue Reading UK Smart Data and the Data (Use and Access) Act 2025: Considerations for Businesses
The European Commission’s draft guidelines on Article 50 of the EU AI Act clarify how transparency and disclosure obligations apply to interactive AI systems, synthetic content, deepfakes, and AI-generated text on matters of public interest. With the rules taking effect 2 August 2026, organizations should act now to assess their AI governance frameworks, labeling practices, and editorial workflows.
On June 2, 2026, the White House issued an Executive Order designed to bolster U.S. cybersecurity through AI-enabled defenses and a voluntary collaboration framework between federal agencies and private AI developers. The Order also directs the Attorney General to prioritize prosecution of AI-assisted cyber offenses under existing federal law.
Continue Reading White House Issues Executive Order Targeting Frontier AI Models
Colorado’s newly signed AI Act replaces the state’s 2024 comprehensive AI regulation with a more targeted framework governing automated decision-making technologies used in high-stakes decisions involving employment, healthcare, and financial services, with a compliance deadline of January 1, 2027.
Continue Reading Colorado Repeals and Replaces the Colorado AI Act
The CJEU’s March 19, 2026, judgment in Case C-526/24 marks a significant development in GDPR enforcement, holding for the first time that even a single data access request may be refused as “excessive” under Article 12(5) GDPR if made in bad faith, while also confirming that an unjustified refusal to comply with such a request can itself give rise to damages liability under Article 82(1) GDPR.
Continue Reading CJEU: First Request for Access May Be Rejected as Abusive Under GDPR
The Federal Trade Commission remains focused on children’s privacy and the Children’s Online Privacy Protection Act.
Continue Reading FTC Signals Relaxed COPPA Enforcement for Age-Verification Technologies
The amended Cybersecurity Law of China (CSL) entered into force on Jan. 1, 2026. These amendments, officially approved by China’s top legislature in October 2025, mark the first major changes to the law since it took effect in 2017.
Continue Reading China’s Amended Cybersecurity Law Takes Effect
On Dec. 5, 2025, the German act implementing the EU NIS 2 Directive was published.
Continue Reading NIS2 in Germany: The New BSI Act Makes Cybersecurity a Board-Level Issue
The last remaining provisions of the amendments to the New York Department of Financial Services’ (DFS) cybersecurity regulation called Part 500 came into effect Nov. 1, 2025.
Continue Reading NYDFS Final Cybersecurity Rules – MFA, Asset Inventory, and Third-Party Risk
The German data protection supervisory authorities have released their take on international data transfers in medical research.
Continue Reading New DSK Guidelines Aim to Set the Standard for International Research Collaborations