On Sept. 17, 2026, the European Commission proposed the EU KIDS Act, a new regulation intended to strengthen protections for minors using digital services and AI systems. The EU KIDS Act is currently a legislative proposal and not yet applicable law. If adopted, the regulation would introduce EU-wide requirements for age verification, child-safe product design
California’s CCPA cybersecurity audits begin in 2027, with new requirements for covered businesses, annual audits, certifications, and reporting.
Continue Reading The Clock Is Ticking: Preparing for California’s First CCPA Cybersecurity Audits
The EU Cyber Resilience Act (CRA) makes cybersecurity a prerequisite for access to the EU market, not only for hardware products with digital elements, but also for software placed on the market independently. Its core requirements are far-reaching: conformity assessments, European Conformity (CE) marking, and a duty to supply security updates free of charge throughout
Proposed FCC TCPA changes would narrow revoke-all requirements, allow exclusive opt-out methods, and expand exemptions.
Continue Reading FCC Moves to Rewrite TCPA Consent and Opt-Out Framework
This GT Alert summarizes the state-law developments and highlights practical compliance considerations for businesses that develop, sell, or use algorithmic pricing tools.
Continue Reading Algorithmic Pricing Under Fire: State Restrictions on Personalized and Surveillance Pricing
FTC seeks public comment on a proposed policy statement addressing personalized pricing and how the FTC Act Section 5 may apply to data-driven pricing practices.
Continue Reading FTC Seeks Public Comment on Proposed Policy Statement Regarding ‘Personalized Pricing’
Vermont joins the Consortium of Privacy Regulators, expanding multistate privacy enforcement coordination among state regulators.
Continue Reading Vermont Joins Growing Consortium of State Privacy Regulators
On July 10, 2026, New York City Department of Consumer and Worker Protection (DCWP) finalized and adopted its “Click-to-Cancel Rule,” which takes effect on Oct. 1, 2026.
Continue Reading NYC Finalizes Click-to-Cancel and Hotel Junk Fees Rules, Proposes New Junk Fees Rule
Illinois’s new Artificial Intelligence Safety Measures Act imposes governance, audit, transparency, and incident-reporting obligations on frontier AI model developers, with key compliance deadlines beginning in 2027 and 2028.
Continue Reading Illinois Enacts Artificial Intelligence Safety Measures Act
The European Commission has proposed significant amendments to the EU Data Act as part of its Digital Omnibus package, touching on cloud switching, trade secret protections, and public sector data access. While several business-friendly changes are on the table, meaningful ambiguities remain unresolved.
Continue Reading EU Digital Omnibus Package Proposes Amendments to Data Act