Standard
EU regulation effective 2018 governing personal data processing, granting individuals rights like erasure and access, with global compliance obligations.
Italy's Garante fined BBVA €5,508,000 after a failed sync kept one customer's marketing opt-out from the CRM unit that sent promotions for seven months. The EDPB published a €16.7M Wind Tre fine three days later.
Reality
EU Cyber Resilience Act rules have required connected-product makers to report exploited flaws through ENISA within 24 hours since 11 September 2026. One incident can also start DORA, NIS2 and GDPR clocks, so runbooks need a triage step that splits into parallel filings.
Reality
Automation Anywhere has agreed to buy conversational voice AI firm Boost.ai, which has handled more than 150 million automated conversations. The purchase from Nordic Capital takes the automation vendor into regulated-industry customer work in Europe, where Boost.ai's base is concentrated.
Reality
Italy's privacy regulator fined IQVIA 7 million euros after finding coded records on about one million patients could be traced back to individuals. Teams that pool health records under one persistent patient key now have a regulator's written reasoning for why removing names fell short.
Reality
Archer's Evolv AI Compliance turns rules from a 22-million-document library into Amazon Bedrock guardrails that check each prompt before a model answers. Archer is betting that risk and compliance teams will pay to enforce their rules at the moment a prompt reaches a model, on top of controlling who can log in.
Reality
The Cyber Resilience Act's vulnerability reporting duties are already in force, well before the December 2027 date that governs most of the regulation, and they sit alongside five other disclosure regimes whose clocks start differently.
Perspective Coverage
5 publishersReality
A developer's GraphRAG build turns Thailand's 96-section PDPA into a 190-node graph so an agent can walk from Section 26 to the fines that cite it. The published part argues the vector-search gap from vocabulary and reports no measured recall figures.
Reality
Cloudflare is adding EuroLLM, which covers all 24 official EU languages, and Switzerland's fully open Apertus model to Workers AI. Both come from public universities and research institutions, so teams with sovereignty requirements now have hosted models built outside the frontier labs.
Reality
BH Consulting launched BH Haven, a four-tier SME service in which a proprietary AI tool drafts findings and consultants approve them. CEO Brian Honan said using AI internally does not move the firm's contractual responsibility for a missed gap onto the software.
Reality
Ireland's DPC takes a median 6.2 years to decide a cross-border GDPR case, a LessWrong analysis finds. The AI Act gives the Commission five years from a violation to fine, and it requires the same investigation and response steps that take up most of the Irish cases.
Reality
The DoJ split the payment, holding a quarter of it against the removal of a legacy consent decree, and credited TikTok's later fixes without discounting the bill for the earlier ones.
Perspective Coverage
5 publishersReality
The Dutch regulator's fine against Uber turns the rules on automated decisions into a build order: meaningful review before the action lands, and a contest route the driver can actually find.
Perspective Coverage
3 publishersReality
The charging case does the real listening, and it uploads to the cloud for transcription. That makes the September ship date a consent-policy deadline for whoever owns acceptable use, not a gadget review.
Perspective Coverage
3 publishersReality
More than 11,000 UK claimants, two named analytics providers and no admission of liability have produced a hard figure for what one app's pre-2020 profile data was worth, payable in two £13m tranches.
Perspective Coverage
5 publishersReality
Three separate IDs and one Postgres row per retry let an investigator list every attempt for a tenant in order, according to a dev.to design. Adopting it means carrying an operation ID into every enqueue call, and its sample redactor lets bearer tokens through.
Reality
A federal judge granted LinkedIn's motion to dismiss for lack of standing and gave the plaintiffs leave to amend, while writing in the same order that he doubts they can allege a privacy violation at all. LinkedIn never denied the scanning.
Reality
The Data Protection Commission's EUR 403m penalty, its fourth-largest under GDPR, covers 620 days of location processing that ended in February 2020. Against Alphabet's reported revenue that is about 0.15 percent.
Perspective Coverage
5 publishersReality
Ireland's Data Protection Commission found lawfulness, fairness and retention failures in Web & App Activity and Location History, and transparency failures in all three location features it examined. One of them runs for Android users who never signed in.
Perspective Coverage
12 publishersReality
Republicans and Democrats on the Senate crime subcommittee both objected that plate reader vendors leave abuse detection to the police departments buying the cameras, and the four invited chief executives did not appear.
Reality
Writing for the Forbes Tech Council, Phenomenon Studio co-founder Polina says fintech apps can adapt insights and notifications while navigation, balance placement and transaction buttons stay fixed. Her readiness test starts at a thousand monthly active users.
Reality
Product · September 12, 2026 · Confirmed3 publishers
Security · September 11, 2026 · Confirmed2 publishers
Security · September 10, 2026 · Confirmed2 publishers
Product · September 6, 2026 · One report1 publisher
Build · September 2, 2026 · One report1 publisher
Leadership · August 29, 2026 · One report1 publisher