Finland: Cyber Resilience Act enters into force. Traficom's NCSC-FI will enforce Finland's new Cyber Resilience Act, imposing strict product cybersecurity, rapid incident reporting, and updated NIS2-aligned domain name obligations. Learn more: https://bit.ly/4flSk8K

Florida: AG files lawsuit against OpenAI for alleged deceptive practices and child safety risks. The lawsuit alleges deceptive ChatGPT marketing violated the Florida Deceptive and Unfair Trade Practices Act. Read now: https://bit.ly/4a5v8Ie

Singapore: CSA issues advisory on cybersecurity risks of OpenClaw, stressing Zero Trust controls, least-privilege access, and strict oversight of tools and data. Read now: https://bit.ly/4dXPl43

Monaco: APDP urges government to revise draft adequacy list for international data transfers and urged removal of several countries, including the US, Japan, South Korea, Brazil, and Israel. Check it out: https://bit.ly/43s6iPj

Vermont: Bill on consumer data privacy and online surveillance passes legislature, granting residents broad data rights and empowering the AG to enforce breaches. Learn more: https://bit.ly/4o3Rksf

California: Bill on consumer deletion rights passes Senate. The bill expands consumer deletion rights and mandates online submission methods for personal information requests. Learn more: https://bit.ly/4ajLmNZ

France: CNIL fines IQVIA €5M for health data violations. CNIL fined IQVIA €5 million for failing to comply with security and transparency requirements regarding the management of health data warehouses. Read on: https://bit.ly/4vbRYpF

Colombia: Constitutional Court determines Data Protection Law applies to foreign controllers processing data of individuals in Colombia. Learn more: https://bit.ly/4dONcaG

EU: Commission fines Temu €200M for DSA risk assessment failures. The European Commission fined Temu €200 million for failing to meet DSA risk assessment standards and requires a compliance plan by August 28, 2026. Check it out: https://bit.ly/4dHVlgU

California: AG sues Chrome Holding Co. for failure to protect genetic data. The California AG sued Chrome Holding Co. for failing to protect genetic data, including ancestry reports and health predispositions, during a 2023 breach affecting nearly 7 million users. Read now: https://bit.ly/4ffhm9w

Vermont: Bill on neurological rights and AI signed by Governor. The bill addresses the collection of neural data to protect neurological rights and regulate AI in health and human services. Learn more: https://bit.ly/4x13GWa

UK: Ofcom fines Youngtek Solutions £600,000 for violations of Online Safety Act. Ofcom fined Youngtek Solutions for failing to prevent children from accessing pornographic content and not responding to statutory information requests on time. Read on: https://bit.ly/4vfbYYC

Australia: ASD's ACSC issues guidance on opportunities for AI in cyber defense. The ASD's ACSC has issued guidance on opportunities and risks of AI use in security and threat environments, advising organizations on safe and responsible deployment. Learn more: https://bit.ly/4dCB3qC

Spain: Council of Ministers approves draft Organic Law on AI governance to align with the #EUAIAct. Spain's Council of Ministers approved a draft Organic Law on AI governance to promote trustworthy AI. Check it out: https://bit.ly/49qSoQP

South Korea: PIPC sanctions five organizations for data safety and trustee supervision failures. The PIPC imposed fines and administrative penalties totaling KRW 558.6 million on four public institutions and one private contractor for violating the PIPA. Read now: https://bit.ly/4nV5g7L

Colombia: SIC publishes adequacy decision for Brazil, Ecuador, Kenya, Panama, and South Africa. The SIC stated that a legal and comparative analysis concluded that the countries' legal frameworks ensure data protection standards are equivalent to Colombian law. Learn more: https://bit.ly/4dONJJA

International: Nordic DPAs sign Stockholm Declaration. The DPAs signed the Stockholm Declaration to enhance cooperation and address privacy challenges from new European digital regulations. Read on: https://bit.ly/4fKZzXK

Hungary: NAIH fines Mediaworks Hungary HUF 50M for publishing links to leaked data map. NAIH found that Mediaworks published links to an interactive map containing leaked personal and sensitive data of nearly 200,000 individuals associated with the Tisza Party. Learn more: https://bit.ly/4dIqwJa

USA: AGs send letter opposing Kids Act calling for stronger online protections for children. The AGs expressed concerns that the Kids Act could restrict state enforcement authority and weaken accountability for online platforms. Check it out: https://bit.ly/4dIwgE9

Spain: AEPD closes €18M fine against Amadeus after €14.4M voluntary payment for profiling-related processing. The AEPD fined Amadeus for GDPR violations related to profiling and lack of transparency. Read now: https://bit.ly/4oc2hbj

Michigan: House of Representatives introduces bill on cybersecurity for solar energy facilities. The bill would impose risk-based cybersecurity, resilience, and incident-reporting requirements on operators of large-scale solar energy facilities. Learn more: https://bit.ly/4fetis9

New Mexico: AG announces second phase of Meta trial. The New Mexico AG has launched the second phase of its lawsuit against Meta, seeking sweeping court-ordered safety and design changes to Meta's services for minors. Read on: https://bit.ly/43rDLcq

EU: Commission publishes 2025 report on DMA implementation. The Commission's third DMA implementation report highlights intensified 2025 enforcement, including noncompliance fines, interoperability mandates, and new investigations in cloud and search ranking. Learn more: https://bit.ly/4dQPFBD

UK: ICO fines Energy Prices Direct Limited £160,000 for making unsolicited marketing calls. The ICO has fined Energy Prices Direct Limited under PECR for making unsolicited marketing calls to TPS/CTPS-registered numbers and failing to identify itself. Check it out: https://bit.ly/3PEqREQ

New York: NYDFS issues Guidance on cybersecurity in heightened threat environments. The DFS has issued guidance urging regulated entities to enhance cybersecurity controls and resilience during periods of heightened risk, including around frontier AI developments. Read now: https://bit.ly/4uAjgq0

Brazil: ANPD announces President signed decrees expanding Internet Bill of Rights. The Brazilian President signed decrees expanding the Internet Bill of Rights, imposing new platform duties and granting the ANPD oversight powers. Learn more: https://bit.ly/4dwSt84

Texas: AG sues Discord for allegedly deceiving parents and exposing children to predators. The AG has sued Discord for allegedly deceiving parents and failing to protect minors from harmful content on its platform. Read on: https://bit.ly/4wQvL29

Brazil: ANPD calls for contributions on Age Verification Mechanisms Guide. The ANPD has launched a public consultation seeking contributions on age-verification mechanisms for children and adolescents in digital environments. Learn more: https://bit.ly/4fG2cds

Australia: OAIC publishes Issues Paper on automated decision-making transparency obligations. The OAIC has published an issues paper outlining how organizations should prepare for new automated decision-making transparency obligations. Check it out: https://bit.ly/3PKAuSd

Ireland: High Court publishes decision on DPC decision against Meta. The Irish High Court has upheld the DPC's decision against Meta, confirming the regulator's broad powers to investigate systemic GDPR infringements and impose EU-wide fines. Read now: https://bit.ly/4ux3lc4

Texas: AG sues Meta and WhatsApp over privacy and security misrepresentations. The AG has filed a lawsuit against Meta and WhatsApp alleging deceptive practices related to the privacy and security of user communications. Explore more: https://bit.ly/4dDSypb

USA: FTC reaches $930,000 settlement with Cox Media Group and others over deceptive AI marketing claims about using AI to capture voice data for targeted advertising. Read now: https://bit.ly/3PZBB0x

Louisiana: Data Privacy Act enacted. The Act establishes a comprehensive data privacy framework in Louisiana, granting consumer rights and imposing obligations on businesses, with enforcement by the AG starting in 2027. Learn more: https://bit.ly/4tOXzkC

USA: FTC begins enforcing the TAKE IT DOWN Act, requiring platforms to enable removal requests and delete nonconsensual intimate content and duplicates within 48 hours. Explore more: https://bit.ly/3PDufQe

UK: ICO reminds businesses of upcoming data protection complaints process requirements. The ICO has reminded UK organizations to implement a formal data protection complaints process before new rules take effect on June 19, 2026. Read now: https://bit.ly/3Rl4wMZ

Texas: AG launches investigation into Meta's AI Glasses over concerns they may misrepresent privacy protections and unlawfully collect Texans' data, including recordings and facial geometry. Check it out: https://bit.ly/4eVnfZf

Netherlands: AP fines Yango €100M for unlawful data transfers. The AP has fined Yango €100 million for GDPR breaches related to unlawful transfers of personal data from the EU to Russia. Check it out: https://bit.ly/4uV9YVe

Oklahoma: AG sues Roblox over alleged child safety failures and deceptive practices. The Oklahoma AG has filed a lawsuit against Roblox, alleging deceptive practices and inadequate protections for children on its platform. Learn more: https://bit.ly/4dnfUAA

Oklahoma: AG sues Temu over alleged unlawful data collection and deceptive practices. The Oklahoma AG has filed a lawsuit against Temu alleging unlawful data collection and deceptive practices involving consumer data. Learn more: https://bit.ly/4umRtcp

China: TC260 issues Ethics-Safety Guidelines for Artificial Intelligence Applications, setting core principles and requirements to ensure responsible development and use of AI systems. Read now: https://bit.ly/4tQZR2W

EU: Commission publishes draft guidelines on classifying high-risk AI systems under Article 6 of the EU AI Act and opens consultation. Check it out: https://bit.ly/3RgSRPj

California: DOJ releases proposed regulations for Protecting Our Kids from Social Media Addiction Act, focusing on age assurance and parental consent requirements, and opened them for public consultation. Read now: https://bit.ly/3RyDwcN

UK: The ICO has advised the UK Government that some low‑risk online advertising practices could be allowed without consent, while maintaining protections for more intrusive tracking. Learn more: https://bit.ly/499SvA0

Australia: The OAIC has published an Issues Paper seeking feedback to support upcoming guidance on transparency obligations for automated decision‑making using personal data. Read now: https://bit.ly/4uPYEK6

Colorado: Bill on ADMT signed by Governor. Colorado has enacted a new law regulating automated decision‑making, introducing transparency, documentation, and consumer rights requirements for high‑impact decisions. Learn more: https://bit.ly/495kwc4

International: G7 and EU Commission publish guideline on SBOM for AI minimum elements to improve transparency and security across the AI supply chain. Read now: https://bit.ly/4dUrCll

USA: CISA launches CI Fortify to strengthen critical infrastructure resilience, focusing on maintaining essential services through isolation and recovery measures. Learn more: https://bit.ly/4dOZq49

Vietnam: Government approves National Standards Strategy for 2026-2035 to modernize its standards system and support innovation, digital transformation, and emerging technologies. Check it out: https://bit.ly/4dxb4PU

UK: ICO publishes guidance on protecting organizations from AI-powered cyber threats, urging organizations to strengthen security measures and resilience when handling personal data. Read now: https://bit.ly/4tM8wUn

Texas: AG secures settlement preventing LG from collecting personal data. The Texas AG secured a settlement with LG Electronics to prevent unauthorized collection of personal data through ACR technology. Check it out: https://bit.ly/4ntIBPy