We share daily regulatory updates on AI, privacy, and cybersecurity from OneTrust DataGuidance, backed by 20+ years of expertise.
London
Joined May 2009
- Tweets13.3K
- Following787
- Followers6.7K
- Likes93
⚠️ Texas AG sued OpenAI, alleging deceptive AI practices and failures to protect children, including inadequate age checks and risk disclosures.
The AG seeks injunctions and civil penalties.
bit.ly/4igRVnM
🍁 Canada’s OPC’s AI transparency submission calls for clear information on:
🤖 AI-generated content and interactions
🧩 Systems and incidents
🕵️ AI agents
bit.ly/4jGDwUn
🇪🇺 Council’s proposed GDPR Article 88bis would allow AI data processing on legitimate-interest grounds, with safeguards.
noyb warns of an advantage for major tech developers. Trilogues are still ahead.
bit.ly/4iGcWtl
⚖️ A New Mexico court ordered Meta to pay $25B over deceptive data practices linked to Cambridge Analytica.
The judgment cites 43.9M state-law violations, with interest accruing at 15% annually.
bit.ly/4dWzXFL
🇨🇦 Canada’s OPC launched a Children’s Privacy Code.
👪 Parental consent under 13
⚙️ Privacy by default
🚫 No commercial profiling or AI decisions for minors
💬 Comments open until Jan. 20, 2027
bit.ly/4z3QH6l
🇪🇺 EU Council agreed its negotiating position on the Digital Omnibus proposal.
It would clarify GDPR, AI data-processing, cookie, and incident-reporting rules. Final law is still pending.
bit.ly/4jD1EqP
🇨🇳 China’s CAC launched recognition for platforms influential among minors.
Platforms with 10M+ registered or 1M+ active minor users must submit applications and self-assessments within 20 working days.
bit.ly/4zF6OHw
🇧🇷 Brazil’s ANPD gave Meta five business days to explain account suspensions and content removals across its platforms.
It cited unclear criteria, weak explanations, and improper blocks under Brazilian rules.
bit.ly/47y5kmA
🇸🇪 Sweden’s PTS supports the proposed EU Cloud and AI Act’s capacity goals.
⚠️ It warns of higher costs and urges market analysis plus recognition of domestic cloud services.
bit.ly/3U5q5Ty
🧬 HHS reached a $700K HIPAA settlement with Ambry Genetics after phishing exposed PHI of 225,370 people.
The two-year plan covers risk analysis, access controls, policy updates, and workforce training.
bit.ly/4BhVzGG
⚖️ California AG Rob Bonta secured a $6M settlement with Chrome Holding over the 23andMe breach and genetic-record transfers.
The deal preserves consumer rights and restricts data handling for five years.
bit.ly/4itwrFs
🇸🇪 Sweden’s PTS backed the proposed EU Cloud and AI Development Act’s goals but warned of higher costs for companies and public authorities.
It urged market analysis and recognition of domestic cloud services.
bit.ly/4zzWAbi
Missouri AG Catherine Hanaway is investigating TikTok’s impact on children, including its algorithms, recommendations, and retention strategies.
Read on: dataguidance.com/news/missou…
🔬 The European Commission updated the ERA Living Guidelines for generative AI in research, adding guidance on agentic AI, peer review, and funding evaluations. Accountability and oversight remain central.
Check it out: dataguidance.com/news/eu-com…
Romania’s ANSPDCP fined MYCONNECTOR PLATFORM RON 31,451 after a cyberattack exposed personal data on a test server using real data. 🧪
Companies should use fictitious data in testing environments to prevent similar breaches.
Learn more: bit.ly/3UAuSMP
🇳🇴 Norway’s Datatilsynet says AI minute-takers can be used in child welfare services under GDPR and the Child Welfare Act, but trust, transparency, data minimization, and prompt deletion are essential.
Check it out: dataguidance.com/news/norway…
🇩🇪 Germany’s Bundestag adopted the EU Cyber Resilience Act bill.
The BSI will oversee market surveillance and support businesses as rules roll out; remaining provisions take effect Dec. 11, 2027.
Read on: dataguidance.com/news/german…
💬 Brazil’s ANPD is seeking input on draft sanctions rules that would expand digital protections for children, adolescents, and women.
Comments close Nov. 30, 2026; an online hearing is set for Oct. 29.
Learn more: dataguidance.com/news/brazil…
⚖️ Montana’s AG is suing OpenAI, alleging ChatGPT endangers kids and teens with harmful advice and no age checks.
Montana law requires notice and parental consent before processing children’s data.
Read now: dataguidance.com/news/montan…
40 state AGs filed a notice in Character.AI’s bankruptcy.
They’re urging safeguards for children and sensitive user data in any asset sale or transfer.
Check it out: dataguidance.com/news/usa-40…
