REGULATORY WATCH

Privacy, AI governance and data protection developments across the US and the EU, from regulators, legislatures and courts.

⚖️ Latest developments 🌐 Jurisdictions 📚 Law library
148
Last 30 days
19
High or critical
32
Enforcement actions
72
Laws tracked
All types Enforcement Legislation Rulemaking Guidance Litigation
Any impact Critical High Moderate Any time 7 days 30 days 90 days
Topic: security · clear
6 developments
Low Court ruling Decided New York · Oct 2, 2026
Federal judge rejects motion to dismiss social media surveillance lawsuit against Trump administration
A U.S. District Court in New York denied the government’s motion to dismiss a lawsuit filed by three labor unions alleging viewpoint‑based social media surveillance of noncitizens. The case, filed in October 2025, targets the Departments…
Administrative Procedure Act
Low Court ruling In effect United States (federal) · Oct 1, 2026
Court order forces Google to allow third‑party app stores on Play Store
A court order stemming from Epic Games v. Google requires Google to permit rival Android app stores to be listed in the Play Store and to let developers direct users to alternative payment and distribution options. The change expands user…
Low Court ruling In effect Utah · Oct 1, 2026
Federal judge blocks Utah's anti-VPN age‑verification law (SB 73) with preliminary injunction
A U.S. federal judge issued a preliminary injunction halting enforcement of Utah's SB 73, which required adult websites to block VPN users or determine their physical location for age verification. The court found the statute imposes a…
Utah SB 73
Low Court ruling Pending United States (federal) · Sep 21, 2026
D.C. Circuit urged to vacate FAA drone restriction that criminalized recording immigration agents
EFF and co‑plaintiffs filed an amicus brief in Levine v. FAA asking the D.C. Circuit to void an FAA rule that barred drones from recording DHS immigration agents. The FAA rescinded the rule in April, but pilots could still be punished for…
Federal Aviation Administration
Low Court ruling Decided United States (federal) · Sep 2, 2026
Federal judge rules DoD illegally retaliated against Anthropic for refusing mass surveillance use
Anthropic sued the Department of Defense after being labeled a “supply chain risk” for refusing to let its AI be used for mass surveillance of U.S. persons. A federal judge held that the designation was unlawful retaliation in violation of…
First Amendment
Moderate Court ruling Decided France · Aug 26, 2026
French Constitutional Council strikes down law banning social media for under‑15s
France’s top court invalidated the legislation that prohibited people under 15 from using social media. The Council found the ban infringed freedom of expression and the right to private life by imposing mandatory age verification. The…
Coming up
Oct 2026
13
FHFA proposes to rescind SORN FHFA-12 and consolidate records under SORN FHFA-11
United States (federal) · effective
Oct 2026
26
Peace Corps announces new CRM system of records (PC 38) effective Oct 26, 2026
United States (federal) · effective
Oct 2026
28
HHS modifies ORR Unaccompanied Children system of records, effective Oct 28, 2026
United States (federal) · effective
Nov 2026
2
DOI establishes new matching program under Privacy Act of 1974
United States (federal) · effective
Nov 2026
5
Treasury exempts new tip intake records from certain Privacy Act provisions
United States (federal) · effective
Nov 2026
6
Treasury proposes new system of records for federal student aid data
United States (federal) · effective
Nov 2026
16
NARA proposes revisions to System of Records NARA 44 for reasonable accommodation requests
United States (federal) · effective
Jan 2027
1
Colorado governor signs SB 26-189, revising AI Act to regulate ADMT in employment
Colorado · effective
Jan 2027
1
NY Attorney General urges workers to file whistleblower complaints on unsafe AI development
New York · effective
Jan 2027
1
Delaware Governor signs HB 380, amending the DPDPA effective Jan 1 2027
Delaware · effective
Jan 2027
1
California Legislature passes SB 690 to limit pen register lawsuits under CIPA
California · effective
Jan 2027
1
Colorado AI Act (SB 26-189, replacing SB 24-205)
Colorado · law takes effect
By jurisdiction
United States (federal)66 new · 16 laws European Union18 new · 14 laws California14 new · 5 laws France12 new · 0 laws New York6 new · 2 laws Global6 new · 0 laws Italy4 new · 0 laws Spain4 new · 0 laws Texas2 new · 3 laws Vermont2 new · 2 laws Ireland2 new · 0 laws Utah1 new · 2 laws
All jurisdictions →
Topics this month
privacy · 107security · 59ai governance · 46transparency · 29data minimization · 27children · 26profiling · 24automated decision making · 22cybersecurity · 16consent · 14targeted advertising · 14data governance · 13