Insights
Weekly regulatory analysis, reviewed by our team before publishing.
Draft summaries are generated from official regulator sources and always reviewed by a DPOBOARD team member before appearing here.
European Commission to Host Data Union Conference on EU Data Policy and AI
The European Commission has announced a Data Union Conference for 12 January 2027 in Brussels, focused on simplifying EU data rules, improving data access for industrial AI, and promoting trusted international data flows.
Read MoreEU AI Office to Host Apply AI Summit on 17 November 2026
The EU AI Office has announced the Apply AI Summit, an event bringing together industry, policymakers, and startups in Brussels to accelerate AI implementation in strategic sectors.
Read MoreState of the Union 2026: What the Upcoming EU Address May Signal for Digital and AI Policy
The European Commission has announced the 2026 State of the Union address, scheduled for 16 September 2026, with related topics spanning artificial intelligence, data policy, and digital sovereignty. This post outlines what is known so far and why organizations should watch the livestream.
Read MoreFTC Seeks Public Comment on Proposed Enforcement Policy Statement on Personalized Pricing
The FTC has opened a comment period on a proposed enforcement policy statement addressing legal concerns raised by personalized pricing—the use of personal data to set prices based on what a company believes an individual consumer is willing to pay.
Read MoreMeta to Pay Over $17 Billion in Nationwide Child-Safety Settlement
Colorado AG Phil Weiser announced a multistate settlement requiring Meta Platforms to pay over $17 billion and implement sweeping child-safety reforms on Instagram and Facebook.
Read MoreOPC's Annual Report Spotlights Privacy Protection Efforts in the Age of AI
The Privacy Commissioner of Canada's annual report, released June 4, 2026, highlights actions taken to protect Canadians' privacy amid the growth of AI technologies. The source excerpt provided is limited to the news release header.
Read MoreOPC to Release Investigation Findings on Grok Chatbot and Sexualized Deepfakes
The Office of the Privacy Commissioner of Canada has announced it will release findings from its investigation into the Grok chatbot and sexualized deepfakes. Details of the investigation's substance were not included in the media advisory.
Read MoreOPC Finds Grok Chatbot Violated Canadian Privacy Law in Sexualized Deepfakes Investigation
The Office of the Privacy Commissioner of Canada announced findings from its investigation into the Grok chatbot and sexualized deepfakes, concluding that the companies involved violated Canadian privacy law.
Read MoreOPC Investigating Grok Chatbot Over Sexualized Deepfakes
The Privacy Commissioner of Canada has issued a statement confirming an investigation into the Grok chatbot in connection with sexualized deepfakes. Details of the investigation's scope remain forthcoming.
Read MoreOPC Issues Statement on Bill C-36, the Protecting Privacy and Consumer Data Act
The Privacy Commissioner of Canada has released a statement on Bill C-36, the proposed Protecting Privacy and Consumer Data Act. The excerpt available identifies the statement's existence but does not detail its substantive content.
Read MoreOPC Highlights International Cooperation at 2026 G7 Data Protection Roundtable
The Privacy Commissioner of Canada announced participation in the 2026 G7 Data Protection and Privacy Authorities Roundtable, framing it as an effort to strengthen international cooperation among privacy regulators.
Read MoreOPC Publishes New Guidance for Financial Reporting Entities on Submitting Codes of Practice
The Privacy Commissioner of Canada has issued new guidance directed at financial reporting entities on the process for submitting codes of practice. Details of the guidance's substantive requirements were not included in the available excerpt.
Read MoreOPC Funds Research Into Canadians' Privacy in Online Gaming
Canada's Office of the Privacy Commissioner has announced funding for research projects examining privacy issues affecting Canadians in online gaming environments, per a July 13, 2026 news release.
Read MoreOPC Canada: WestJet Commits to Enhanced Security Measures Following Data Breach
The Office of the Privacy Commissioner of Canada announced that WestJet has committed to improving its security measures following a data breach investigation. Details of the underlying breach and remediation commitments were not included in the available excerpt.
Read MoreOPC to Present 2026 Global Privacy and Human Rights Award to Canadian Health Research Laboratory
The Office of the Privacy Commissioner of Canada issued a media advisory announcing that the Privacy Commissioner will present the 2026 global Privacy and Human Rights Award to a Canadian health research laboratory.
Read MoreOPC Presents Global Privacy and Human Rights Award to Canadian Health Research Lab
The Office of the Privacy Commissioner of Canada issued a news release announcing that it presented its global Privacy and Human Rights Award to a Canadian health research lab, though the excerpt provided contains no further substantive detail.
Read MoreEU AI Office to Host Pitching Day for Apply AI Startup Award Finalists
The EU AI Office has announced a pitching day on 20 October 2026 for the top 10 finalists of the Apply AI Startup Award, part of the broader Apply AI Strategy supporting European AI innovation.
Read MoreCNIL Reminds Schools: Data Protection Rules Apply to Online Collaborative Tools
The CNIL has issued guidance reminding primary and secondary schools to remain vigilant about personal data protection when adopting online collaborative tools, restating the applicable rules for their implementation.
Read MoreCNIL Reminds Higher Education Institutions of Data Protection Rules for Online Collaborative Tools
CNIL has published guidance reminding French higher education institutions to remain vigilant about personal data protection when deploying online collaborative tools, and reiterates the applicable rules for their implementation.
Read MoreOPC Weighs In on Canada's Proposed Consumer-Driven Banking Regulations
The Office of the Privacy Commissioner of Canada has submitted comments on proposed Consumer-Driven Banking Regulations, signaling regulatory attention to privacy implications of the open banking framework.
Read MoreEU Commission Designates ChatGPT, Reddit, and Roblox as VLOPs/VLOSE Under the DSA
The European Commission has designated ChatGPT as a Very Large Online Search Engine, and Reddit and Roblox as Very Large Online Platforms, under the Digital Services Act, triggering enhanced systemic risk obligations by January 2027.
Read MoreCNIL to Host Second "Rencontres Informatique & Libertés" on 29 September 2026
The French CNIL announced the second edition of its "Rencontres Informatique & Libertés" event on 29 September 2026, featuring discussions on connected glasses and the role of sanctions in data protection enforcement.
Read MoreCNIL Publishes Resources from Data Protection Awareness Project for Primary School Students
The CNIL has shared teaching materials from a 2026 initiative that raised data protection awareness among 2,500 CM2 (fifth-grade) students in the Oise department, inviting teachers to replicate the program.
Read MoreUber Fined Nearly €825 Million Over Automated Decisions Affecting Drivers
The Dutch data protection authority, acting in cooperation with the CNIL, has fined Uber B.V. and Uber Technologies Inc. approximately €824,990,000 for taking automated individual decisions concerning drivers on its platform.
Read MoreCNIL Clarifies Right to Erasure for Personal Data in Online Press Articles
CNIL confirms individuals may request erasure of personal data from online press articles, but this is not an absolute right and requires balancing competing interests.
Read MoreEU Launches Call for AI Gigafactories, Targeting €30 Billion+ in Compute Investment
The EU AI Office has opened a call for tenders to build up to seven AI Gigafactories, backed by up to €10 billion in public funding and expected to unlock at least €20 billion in private investment to expand Europe's AI computing capacity.
Read MoreEU Launches D-TECT Forum to Coordinate Drone and Counter-Drone Technology Industry
The European Commission is convening the inaugural D-TECT Forum on 11 November 2026, an industrial coordination mechanism for drone and counter-drone technologies, including AI-enabled autonomy and navigation systems.
Read MoreCNIL Guidance: Identifying and Managing DPO Conflicts of Interest
CNIL has issued guidance addressing how organizations can identify and remedy conflicts of interest when their Data Protection Officer holds additional roles, as permitted under the GDPR.
Read MoreOPC Welcomes Government Consultation on Modernizing Canada's Privacy Act
The Privacy Commissioner of Canada has submitted a response to a government consultation on modernizing the Privacy Act, signaling continued momentum toward reform of federal public sector privacy law.
Read MoreCNIL Webinar Recap: Updates to Reference Methodologies MR-001 and MR-003 for 2026
CNIL has published a webinar replay explaining upcoming changes to its health-data reference methodologies MR-001 and MR-003, part of its ongoing series decoding data protection topics.
Read MoreEU AI Act Enforcement and New Transparency Rules Begin 2 August 2026
From 2 August 2026, the EU AI Office and national authorities begin enforcing the AI Act, including new rules requiring AI systems to disclose AI interaction and label AI-generated or altered content.
Read MoreEU to Convene Policymakers and Industry on AI-Powered Robotics Strategy
The European Parliament will host an invitation-only event on 2 September 2026 featuring live robot demonstrations and strategic discussion on a coordinated European initiative for AI-powered robotics, organized by the euROBIN network.
Read MoreFTC and States Sue Hims & Hers Over Alleged Sharing of Sensitive Health Data
The FTC, joined by Utah and California (via LA County Counsel), has sued telehealth provider Hims & Hers, alleging it shared consumers' sensitive medical condition data with third-party ad platforms despite privacy promises, and misled users on billing and cancellation.
Read MoreEU AI Office to Launch Three GenAI Pilots for Public Administration
The European Commission is hosting a 14 September 2026 kick-off event for three Digital Europe Programme-funded generative AI pilots for public administrations, paired with an Apply AI stakeholder meeting on scaling trustworthy European AI solutions.
Read MoreCNIL Webinar Addresses Implementation of Its Tracking Pixel Recommendation for Vendors and Service Providers
CNIL published a webinar aimed at vendors and service providers in the "tracking pixel" ecosystem, explaining how to implement its recommendation on tracking pixels.
Read More