APAC
- India’s Computer Emergency Response Team released a blueprint to reduce exposure to AI-assisted vulnerabilities in digital infrastructure.
- Australia’s Cyber Security Centre published a guidance on leveraging AI to enhance cyber defence capabilities.
- South Korea’s PIPC proposed amendments to enforcement decree of the Personal Information Protection Act to strengthen personal data breach prevention measures.
- Malaysia’s Child Protection Code and Risk Mitigation Code under the Online Safety Act came into effect.
- Singapore’s PDPC launched public consultation on proposed guidelines governing the use of personal data in generative AI.
EMEA
- European Commission imposed a fine of EUR 200 million on an e-commerce platform for risk assessment failures under the Digital Services Act.
- UK’s ICO published guidance explaining process and requirements for submitting data protection complaints.
- Spain’s Council of Ministers advanced draft legislation on AI governance in alignment with the EU AI Act.
- Belgium’s DPA published report highlighting data protection risks and compliance challenges associated with AI chatbots.
- Slovenia’s Information Commissioner adopted its 2025 Annual Report, highlighting increased data protection and transparency oversight activities.
- Norwegian Consumer Council and NOYB filed complaint against a media company over its ‘pay or okay’ consent model.
- EU General Court annulled a technology company’s gatekeeper designation in marketplace under the Digital Services Act.
- Poland’s Council of Ministers adopted draft law to protect minors from accessing adult content online.
- Malta’s Financial Services Authority issued letter to CEOs outlining AI governance and risk management expectations.
- Turkey’s KVKK published guidance on the lawful use of security camera systems in workplaces.
Americas
- A coalition of U.S. Attorneys General opposed the proposed Kids Act and called for stronger online protections for children.
- New York Legislature passed the One Fair Price Act regulating algorithmic pricing practices.
- Texas’ AG launched investigation into a technology company’s AI glasses over unlawful collection of facial data.
- A California bill expanding personal information deletion rights under the Consumer Privacy Act passed by the State Senate.
- Vermont’s Consumer Data Privacy and Online Surveillance bill was approved by the State Legislature.
- Connecticut Governor signed a bill amending the Connecticut Data Privacy Act and establishing a data broker framework.
- Louisiana Data Privacy Act introducing new consumer privacy protections was signed into law by the Governor.
- Canada’s Privacy Commissioner presented annual report to Parliament highlighting AI-era privacy priorities and rising complaint volumes.