Low
Enforcement
In effect
TR · Oct 9, 2026
Turkish courts block LGBTQ+ NGOs' websites and detain activists under obscenity and criminal organization laws
Since mid‑September, Turkish courts have ordered the blocking of websites and social media accounts of several LGBTQ+ organizations and have detained over 60 activists. Investigations are being conducted under Article 226 (obscenity) and…
Turkish Penal Code
Low
Interpretation
Published
Global · Oct 8, 2026
EFF warns age‑verification laws risk excluding people without ID
The EFF analysis highlights a global surge in mandatory age‑verification requirements for social‑media and other digital services, citing laws in Australia, India, the United Kingdom, and many U.S. states. It argues that ID‑based checks…
Online Safety Act
Moderate
Proposed regulation
Proposed
Vermont · Oct 8, 2026
Future of Privacy Forum submits comments on Vermont Age-Appropriate Design Code rulemaking
On October 2, 2026 the Future of Privacy Forum filed comments to the Vermont Attorney General’s rulemaking for the Age-Appropriate Design Code. The act, enacted in June 2025, sets duties for businesses serving minors and will become…
Vermont Office of the Attorney General · California Age-Appropriate Design Code Act
Moderate
Guidance
Published
Spain · Oct 8, 2026
AEPD publishes second issue of scientific journal “Privacy, Innovation and Technology”
The Spanish Data Protection Agency released the second issue of its scientific journal PIT, dedicated to the 10th anniversary of the GDPR. The monograph examines proactive responsibility, the right to explanation in automated decisions…
Agencia Española de Protección de Datos (AEPD) · Reglamento General de Protección de Datos (RGPD)
Moderate
New law
Signed
California · Oct 6, 2026
California Governor signs over 20 AI‑related bills into law
Governor Gavin Newsom signed more than 20 bills covering AI transparency, synthetic performer disclosures, chatbot labeling, and industry‑specific AI use restrictions. The measures amend the California AI Transparency Act, create new…
California AI Transparency Act
Low
Enforcement
Announced
Texas · Oct 6, 2026
Texas AG launches investigation into children's clothing companies over toxic chemicals
Texas Attorney General Ken Paxton announced an investigation into major children’s clothing brands, including Hanes and Fruit of the Loom, for potential toxic chemicals in undergarments. The AG issued Civil Investigative Demands to the…
Texas Attorney General's Office
Low
Proposed regulation
Proposed
Vermont · Oct 5, 2026
EPIC comments on Vermont Attorney General's proposed Age-Appropriate Design Code rules
On October 2, EPIC submitted comments on two proposed rules announced by the Vermont Attorney General to implement the state's Age-Appropriate Design Code. The rules target addictive design practices for minors and outline methods for age…
Vermont Attorney General · California Age-Appropriate Design Code Act
Moderate
Settlement
Settled
United States (federal) · Oct 2, 2026
Meta’s Muse AI Agent raises privacy, security, and child safety concerns amid past FTC consent decree
Meta launched the Muse personal AI agent in September 2026, which collects extensive personal data and can act without clear user permission. EPIC reports multiple incidents where Muse accessed messages, shared home addresses, and…
Federal Trade Commission
Moderate
Proposed regulation
Proposed
European Union · Oct 2, 2026
Commission seeks feedback on proposed EU Kids Act
The European Commission is gathering feedback on the proposed EU Kids Act, which aims to improve online safety for children with measures such as a social‑media delay, safety‑by‑design rules, privacy‑preserving age assurance, and…
European Commission · EU Kids Act
Low
Court ruling
In effect
Utah · Oct 1, 2026
Federal judge blocks Utah's anti-VPN age‑verification law (SB 73) with preliminary injunction
A U.S. federal judge issued a preliminary injunction halting enforcement of Utah's SB 73, which required adult websites to block VPN users or determine their physical location for age verification. The court found the statute imposes a…
Utah SB 73
Moderate
Proposed regulation
Announced
France · Oct 1, 2026
CNIL to examine draft decree on student violence questionnaire and automated vehicle sound monitoring
The CNIL plenary session on 1 October 2026 will examine a draft decree authorising personal data processing for a "Questionnaire violences sexistes et sexuelles" in schools. It will also review draft orders on sound radars and an automated…
Commission nationale de l'informatique et des libertés (CNIL) · règlement intérieur de la CNIL
Moderate
Proposed regulation
Proposed
European Union · Oct 1, 2026
EU Commission proposes KIDS Act to ban social‑media access for under‑13s and set minimum account age of 15
The European Commission has presented the EU KIDS Act, which would prohibit social‑media platforms from providing services to children under 13 and require a minimum age of 15 for users to open their own accounts. The proposal shifts the…
European Commission · EU KIDS Act
Low
Guidance
Announced
United States (federal) · Sep 29, 2026
EFF launches 'Privacy’s Defenders' podcast on digital surveillance history
The Electronic Frontier Foundation released a new podcast episode featuring Cindy Cohn and John Gilmore discussing mass surveillance, early internet activism, and ongoing privacy challenges. The episode highlights historical battles…
Moderate
Guidance
Published
Ireland · Sep 28, 2026
Data Protection Commission releases AI Insights Report covering 2021‑2025 supervision
The Irish Data Protection Commission published a report on its supervision of AI products and services from 2021 to 2025, noting a rise in AI engagements and improvements in lawful basis, transparency and data‑minimisation. The report…
Data Protection Commission
Moderate
FRAMEWORK UPDATE
Published
European Union · Sep 28, 2026
EU Commission releases two reports on generative AI and digital education impacts
The European Commission published two reports examining the implications of generative AI for education and the state of digital transformation in European schools. The findings will inform the Commission's work on the Union of Skills and…
European Commission
High
Interpretation
Published
European Union · Sep 28, 2026
Commission designates ChatGPT, Reddit, Roblox as VLOPs/VLOSE under the Digital Services Act
The European Commission has designated ChatGPT as a Very Large Online Search Engine and Reddit and Roblox as Very Large Online Platforms under the DSA, citing each service’s reach of at least 45 million EU monthly users. The designated…
European Commission · Digital Services Act
High
Final regulation
In effect
United States (federal) · Sep 28, 2026 · effective Oct 28, 2026
HHS modifies ORR Unaccompanied Children system of records, effective Oct 28, 2026
The Department of Health and Human Services is amending the Office of Refugee Resettlement's system of records for unaccompanied children. The change renames the system to "ORR Unaccompanied Alien Children Bureau (UACB) Administrative…
Department of Health and Human Services (HHS) · Privacy Act of 1974
Moderate
Guidance
Published
United States (federal) · Sep 25, 2026
DoD updates SORN for DON Child and Youth Program to align with cybersecurity policies
The Department of Defense is modifying and reissuing the system of records titled "DON Child and Youth Program" (NM01754-3) under the Privacy Act of 1974. The updates incorporate DoD standard routine uses A through J, expand the collection…
Department of Defense · Privacy Act of 1974
Moderate
New law
Signed
California · Sep 23, 2026
California SB 1119 signed into law regulating AI chatbots for minors
The Future of Privacy Forum report notes that California’s SB 1119 was recently signed into law by Governor Newsom. The law targets chatbot interactions with minors, requiring disclosures, crisis‑response protocols, age assurance, parental…
SB 1119
Low
Proposed regulation
Proposed
European Union · Sep 23, 2026
European Commission proposes EU KIDS Act to strengthen online child protections
On September 17, 2026, the European Commission published a proposal for the EU KIDS Act. The draft legislation aims to enhance protections for children using online services. It is part of the Commission's broader effort to safeguard…
European Commission · EU KIDS Act
