APAC
- The Reserve Bank of India consulted global regulators to assess the potential cybersecurity risks of an AI model.
- China’s CAC announced interim measures regulating AI-powered humanized interactive services.
- South Korea’s Communications Commission imposed fines on 373 location information service providers for regulatory violations.
- Vietnam’s Ministry of Science and Technology issued circular on identity verification requirements for mobile subscribers.
- Australia’s Communication and Media Authority fined a financial services company AUD 3.96 million for direct marketing violations.
- South Korea’s PIPC released administrative notice on draft amendments to penalty surcharge criteria under data protection law.
EMEA
- The European Data Protection Board adopted and launched a public consultation on a Data Protection Impact Assessment (DPIA) template.
- UK’s ICO and Belgium’s DPA signed MoU to strengthen cross-border data protection cooperation.
- CNIL, France released recommendations on the use of tracking pixels in emails to enhance privacy compliance.
- UK’s Department of Science sent open letter urging business leaders to strengthen defences against AI driven cyber threats.
- Italy’s Cybersecurity Agency published a resolution outlining compliance requirement under the NIS2 Directive.
- The European Commission issued a statement on digital age verification app to improve children’s online safety.
- Belgium’s Centre for Cybersecurity released requisites for essential entities to ensure NIS2 compliance before deadline.
- The Netherlands Cyber Security Centre confirmed parliamentary approval of Cybersecurity Act and Critical Entities Resilience Act.
- Latvia Data State Inspectorate published its operational strategy for 2026–2030, outlining priorities for data protection.
- Poland’s amendments to the Cybersecurity Act implementing NIS2 Directive came into effect.
- Kenya’s Office of Data Protection Commissioner published draft guidance notes on data transfers, transport sector, DPO and data protection policy.
Americas
- U.S. House Committees announced joint effort to advance the GUARD Financial Data Act and SECURE Data Act.
- Kentucky legislation regulating the use of Automatic Content Recognition (ACR) data signed into law by the Governor.
- Iowa Attorney General amended lawsuit against a social media platform to add more privacy violations.
- Alabama’s comprehensive consumer data privacy bill signed into law.
- Colombia Ministry of ICT launched a consultation on a draft decree aimed at creating safe and healthy digital environments for children and adolescents.
- A bill to amend the Personal Data Privacy Act introduced in Delaware.