Moderate
Proposed regulation
Announced
France · Sep 17, 2026
CNIL plenary agenda includes draft decrees on prison camera use, Apple ATT, and data collection in real‑estate rentals
The CNIL plenary session of 17 September 2026 will discuss a draft decree on the use of on‑board cameras by prison surveillance staff, a draft decree amending the 2019 decree that implements the French data protection law, and a…
Commission nationale de l'informatique et des libertés (CNIL) · décret n° 2019-536 du 29 mai 2019
High
Enforcement
Settled
United States (federal) · Sep 17, 2026
FleetCor to Pay $100M to Settle FTC Administrative Action Over Unauthorized Fuel Card Fees
The Federal Trade Commission alleged that FleetCor, now operating as Corpay, charged small‑business customers hidden fees and misrepresented savings from its fuel cards. The company agreed to pay $100 million to resolve the FTC…
Federal Trade Commission · FTC Act Section 5
Moderate
Guidance
Published
France · Sep 17, 2026
CNIL outlines its status, organization and sanction powers
The CNIL, created by the 1978 Loi Informatique et Libertés, is an independent administrative authority composed of a college of 18 members. Its restricted board can impose fines up to €20 million or 4 % of global annual turnover under the…
CNIL · loi Informatique et Libertés
Moderate
Guidance
Announced
New York · Sep 17, 2026 · effective Jan 1, 2027
NY Attorney General urges workers to file whistleblower complaints on unsafe AI development
New York Attorney General Letitia James issued an alert encouraging employees with knowledge of unsafe or illegal AI development to submit confidential whistleblower complaints. The alert references the Responsible AI Safety and Education…
New York Attorney General's Office · New York SHIELD Act
Moderate
FRAMEWORK UPDATE
Published
European Union · Sep 17, 2026 · effective Aug 2, 2026
EU AI Board discusses AI Act implementation and publishes Action Plan on cybersecurity and AI
On 17 September 2026 the EU AI Board met under the Irish Presidency to review priorities for EU AI policy and AI Act enforcement. The meeting included an update on the Commission’s Action Plan on cybersecurity and AI and on transparency…
European Commission · EU AI Act
Low
Court ruling
Decided
United States (federal) · Sep 16, 2026
Ninth Circuit rejects expansive DMCA copyright claim over AI‑generated code
The U.S. Court of Appeals for the Ninth Circuit held that the removal of copyright management information (CMI) from a newly created work does not itself violate DMCA Section 1202. The case involved OpenAI and Microsoft using GitHub code…
Digital Millennium Copyright Act
Low
Court ruling
Decided
Arizona · Sep 16, 2026
Supreme Court ruling allows Arizona mail ballots to proceed as usual
The U.S. Supreme Court issued a decision permitting the continued use of mail ballots in Arizona, which are used by 75% of voters. The ruling was challenged by the League of Women Voters and EPIC, who argued it would give DHS broad…
Moderate
Guidance
Published
United States (federal) · Sep 16, 2026
EPIC report: Data brokers sell personal data to Disney, GM, insurers and banks
EPIC highlights that data brokers collect and sell personal information to major companies such as Disney, General Motors, insurers and banks. The article notes that brokers infer additional characteristics like finance, health…
Low
Guidance
Announced
United States (federal) · Sep 16, 2026
EPIC report finds companies hinder personal data access under state privacy laws
The Electronic Privacy Information Center reports that many large firms make it difficult for consumers to obtain their personal data, despite state privacy statutes. EPIC notes that small fines and warning letters often have limited…
Low
Guidance
Announced
United States (federal) · Sep 16, 2026
EFF appoints former White House official Alexander Macgillivray to Board of Directors
The Electronic Frontier Foundation announced that Alexander "amac" Macgillivray has joined its Board of Directors. Macgillivray previously served as Deputy Assistant to the President and Principal Deputy U.S. Chief Technology Officer and…
Blueprint for an AI Bill of Rights
Moderate
Settlement
Settled
United States (federal) · Sep 16, 2026
Settlement codifies Meta's surveillance practices into law as states move to curb ALPR use
The EFF newsletter reports a settlement that enshrines Meta's harmful surveillance into law. It also notes that several U.S. states are introducing measures to limit the use of automated license plate reader (ALPR) networks, citing police…
Low
Settlement
Settled
United States (federal) · Sep 16, 2026
Meta settles lawsuit with 52 US states imposing age‑gating and time limits on under‑18 users
Meta settled a lawsuit with 52 states and territories that will require age‑gating, a two‑hour daily usage limit, and content restrictions for users under 18. The agreement also pressures other platforms such as TikTok and YouTube to adopt…
Moderate
Guidance
Published
KE · Sep 16, 2026
Kenya publishes new guidance on cross‑border data transfers
On 8 September 2026 Kenya’s Office of the Data Protection Commissioner released detailed Guidance Notes on cross‑border data transfers. The guidance clarifies Kenya’s transfer framework, adds operational detail, and highlights differences…
Office of the Data Protection Commissioner (ODPC) · General Data Protection Regulation
Low
Court ruling
Decided
United States (federal) · Sep 15, 2026
Supreme Court hears challenge to DHS/SSA upgrades to SAVE database
The League of Women Voters and EPIC urged the Supreme Court to deny the administration’s emergency request to stay a Washington, D.C., federal judge’s summary judgment that set aside DHS and SSA upgrades to the Systematic Alien…
Low
Guidance
Announced
United States (federal) · Sep 15, 2026
EPIC senior counsel warns of privacy risks in unproven health technologies
The Washington Post health brief quoted EPIC senior counsel Sara Geoghegan stating that emerging health technologies are unproven and may be riddled with privacy risks. She emphasized that companies must build and demonstrate trust, noting…
Moderate
Proposed bill
Passed
California · Sep 15, 2026
California legislature passes three AI employment bills pending Governor's signature
The California State Legislature approved SB 947, SB 951, and AB 1883, which impose restrictions on automated decision systems, require technology displacement notices under Cal/WARN, and limit workplace surveillance tools. Each bill would…
California Labor Commissioner · SB 947 (No Robo Bosses Act)
Low
Enforcement
Announced
United States (federal) · Sep 15, 2026
DOJ partially confirms DHS whistleblower allegations on SAVE voter eligibility program
The Department of Justice issued a notice to a federal court partially confirming whistleblower allegations that DHS is expanding the SAVE system to check voter eligibility. EPIC and the League of Women Voters argue this violates the U.S.…
Department of Justice (DOJ) · U.S. Constitution
Low
Lawsuit filed
Filed
United States (federal) · Sep 15, 2026
EPIC sues DHS over expansion of SAVE voter eligibility program
The Electronic Privacy Information Center (EPIC) and the League of Women Voters filed a lawsuit challenging DHS’s attempt to expand the SAVE system to check voter eligibility, alleging violations of the U.S. Constitution and federal…
U.S. Constitution
Low
Enforcement
Pending
United States (federal) · Sep 15, 2026
EPIC warns sale of Google’s Spirit Air AI worker data lacks private right of action
EPIC counsel Mayu Tobin‑Miyaji says unions’ concerns are valid and highlights the absence of a private right of action, leaving enforcement of worker data protections dependent on state attorneys general. She notes that without such a…
Moderate
Proposed bill
Announced
European Union · Sep 14, 2026
EU Commission to propose EU-wide minimum age for social media, linked to Digital Fairness Act
The European Commission will release a legislative proposal by the end of 2026 establishing an EU-wide minimum age for social media, building on the Special Panel's age‑tiered framework. The proposal may be incorporated into the Digital…
European Commission · Digital Services Act
