USA: House Energy and Commerce Committee advances KIDS Act and others to the full House of Representatives.
A total of eight pieces of legislation were reported to the full House of Representatives.
Explore more: https://bit.ly/3P1wg83
Ecuador: The SPDP issued a draft regulation on the complaints procedure for DPOs who believe their independence has been undermined through unjustified dismissal, sanction, or reprisal.
Learn more: https://bit.ly/4rjanyy
Oregon: Bill on AI companions passes both houses.
The Senate agreed to the House amendments and repassed the bill, defining AI companions and platforms, setting requirements, and allowing individuals to seek damages for violations.
Read now: https://bit.ly/4beSY4h
Virginia: Bill prohibiting sale of geolocation data passes both houses.
The bill amends the CDPA to prohibit controllers from selling precise geolocation data and removes Attorney General enforcement provisions for violations.
Explore more: https://bit.ly/40hDGXg
Illinois: Bill on AI deception amended in the House.
The bill makes it unlawful for businesses to use chatbots or AI that could mislead consumers into thinking they're human without clear disclosure.
Read now: https://bit.ly/4sMou0H
Georgia: Bill on AI safety read for second time in Senate.
The bill applies to operators of conversational AI services and requires the disclosure of AI interactions to users, as well as safeguards for minors.
Check it out: https://bit.ly/4b67JGt
Michigan: Bill on use of automated decisions and electronic monitoring referred to Committee.
The bill regulates the use of automated decision tools and electronic monitoring in employment to protect employees and job applicants.
Read more: https://bit.ly/3MLvzzb
New York: Bill on generative AI notices read for second time in Senate.
The bill mandates clear and conspicuous notices on generative AI systems about potential inaccuracies, with penalties for noncompliance.
Read more: https://bit.ly/4rdji4F
California: CalPrivacy fines PlayOn Sports $1.10M for use of tracking technologies.
CalPrivacy fined PlayOn Sports $1.10 million for CCPA violations related to tracking technologies and inadequate opt-out mechanisms.
Check it out: https://bit.ly/4aZR2MF
Connecticut: Online Safety Bill introduced to Senate
The bill introduces requirements regarding AI and automated employment-related decision processes, establishes an AI Policy Office, and mandates workforce development programs in Connecticut
Read more: https://bit.ly/403dvnb
Spain: AEPD issues recommendations on data sovereignty.
The recommendations aim to enhance data sovereignty and operational resilience following a major cloud service disruption in 2025.
Explore more: https://bit.ly/4rNncST
Vietnam: AI Law comes into effect.
Vietnam's new AI law took effect on March 1, 2026, introducing a comprehensive, risk-based framework that regulates the development, deployment, and use of AI in Vietnam.
Check it out: https://bit.ly/4r1lhJ3
EU: CJEU publishes AG Opinion in Meta antitrust cases.
The Advocate General of the CJEU supported the European Commission's authority to request information from Meta for antitrust investigations and proposed dismissing Meta's appeals.
Learn more: https://bit.ly/4rJtPFz
Portugal: CNPD issues Opinion on bill for protecting minors online
The CNPD stressed that the processing of children's personal data must comply with #GDPR principles and issued recommendations.
Learn more: https://bit.ly/47mhrmP
Germany: Bundestag announces first reading of bill modernizing product liability law, seeking to reform the existing framework, on March 4, 2026.
Check it out: https://bit.ly/4ra1yqB
Israel: PPA issues Opinion on valid consent.
The PPA issued guidance clarifying when consent is valid under privacy law, emphasizing informed, freely given, and active consent.
Learn more: https://bit.ly/4kUwUA4
Poland: UODO fines DPD Polska PLN 11M for GDPR violations.
The fine follows findings that DPD Polska failed to put required GDPR safeguards in place when external carriers accessed personal data during courier operations.
Read on: https://bit.ly/3OBRR6Z
Thailand: PDPC issues rules on Binding Corporate Rules.
Thailand has issued new regulations establishing a framework for approving BCRs to enable lawful cross‑border data transfers under the PDPA.
Learn more: https://bit.ly/4liCuwF
USA: Treasury publishes resources on AI use in financial sector.
The U.S. Department of Treasury has released new AI guidance for the financial sector, including a common AI lexicon and a tailored AI risk management framework.
Check it out: https://bit.ly/4tTqGod
California: Bill on whistleblower protection introduced to State Assembly.
The bill would add whistleblower protections to the CCPA, including financial incentives for reporting privacy violations.
Explore more: https://bit.ly/40x7XkR
France: CNIL launches public consultation on draft recommendation for session replay tools.
France's CNIL has opened a public consultation on draft GDPR guidance for session replay tools used to track user behavior online.
Check it out: https://bit.ly/4tZhi2n
USA: FTC issues COPPA policy statement to incentivize age verification technologies.
The FTC announced it will exercise enforcement discretion under COPPA when personal data is used solely for age verification, subject to strict safeguards.
Read now: https://bit.ly/3OuFCcq
Connecticut: OAG releases memorandum on application of existing laws to artificial intelligence.
Connecticut's AG has issued guidance explaining how existing state laws apply to AI systems, covering civil rights, privacy, consumer protection, and competition risks.
Read now: https://bit.ly/4sfvSBl
West Virginia: Bill proposing Biometric Information Privacy Act introduced.
The bill would introduce a comprehensive biometric privacy framework in West Virginia, regulating how private entities collect and use biometric data.
Check it out: https://bit.ly/4cKchob
Utah: Bill amending App Store Accountability Act passes third reading in House.
Utah lawmakers advance a bill tightening app store rules on minors, age verification, and parental consent.
Learn more: https://bit.ly/4aDUhuk
UK: ICO fines Reddit £14.47 million for children's privacy failures.
The ICO found Reddit processed data relating to children under the age of 13 without a lawful basis, exposing them to potential harm.
Check it out: https://bit.ly/4aSRfBo
California: Bill on privacy settings introduced to Assembly.
The bill requires apps and operating systems in California to use the strongest default privacy settings and obtain user consent before any changes.
Read more: https://bit.ly/4kTGIKQ
Kansas: Bill on App Store Accountability Act passes Senate.
The bill requires app stores to verify users' ages, link minor accounts to parents, and obtain parental consent for downloads and purchases.
Explore more: https://bit.ly/472ASAT
New York: Bill for the New York Health Information Privacy Act introduced in Senate.
The bill introduces strict protections for individuals' health information in New York, limiting how regulated entities can use or share it.
Check it out: https://bit.ly/4s1Noc2
California: Bill amending time period to process deletion requests introduced and read for first time.
The bill would require data brokers to complete consumer deletion requests in 30 days instead of 45.
Explore more: https://bit.ly/4tWlIHy
