On September 17, 2026, the European Commission (EC) published a proposed “EU KIDS Act,” which would impose minimum-age requirements to access social media and video-sharing platforms, subject to mandatory age verification, as well as an obligation for covered entities, including providers of online games and AI chatbots and AI companions, to build specific safety features by design.
Continue Reading European Commission Proposes “EU KIDS Act” to Restrict Children’s Access to Online ServicesCédric Burton
EU AI Act Enforcement Phase Begins
Posted in European Union
On August 2, 2026, the European Commission (EC), acting through its European AI Office (EU AI Office), became formally entitled to exercise its powers to investigate and enforce the EU AI Act obligations imposed on providers of general-purpose artificial intelligence (GPAI) models, as well as rules on prohibited AI practices. These powers are significant and include requesting information and documentation, obtaining access to models for evaluation, requiring corrective or risk-mitigation measures, and imposing fines of up to the higher of €15 million or 3 percent of the provider’s worldwide annual turnover.
Continue Reading EU AI Act Enforcement Phase BeginsSCOTUS Ruling Calls into Question EU-U.S. Personal Data Flows
Posted in Privacy
On June 29, 2026, the Supreme Court of the U.S. (SCOTUS) held in Trump v. Slaughter that the U.S. President can dismiss members of the Federal Trade Commission (FTC) at will, rather than only for cause, overruling existing precedent regarding independent agencies. This decision of domestic constitutional law could also change the rules governing transfer of personal data from the European Economic Area (EEA, which includes the 27 European Union countries plus Iceland, Liechtenstein, and Norway) to the U.S.
Continue Reading SCOTUS Ruling Calls into Question EU-U.S. Personal Data FlowsUK Announces Social Media Ban and Broader Online Restrictions for Users Under 16
Posted in Regulatory
On June 15, 2026, the UK government announced plans to introduce a social media ban for users under 16 (under-16s), alongside restrictions on features deemed harmful to minors, such as livestreaming and messaging functions, for a wider range of online services, including those in the gaming sector. These measures, which may require platforms active in the UK market to significantly alter their operations, are expected to come into force in Spring 2027.
Continue Reading UK Announces Social Media Ban and Broader Online Restrictions for Users Under 16European Commission Publishes Proposal for Act to Reduce Reliance on Foreign Cloud and AI
Posted in Privacy
On June 3, 2026, the European Commission (EC) released its first draft of a proposed Cloud and AI Development Act (Proposal or CADA), marking a significant step forward in the EU’s efforts to strengthen its digital infrastructure and reduce strategic dependence on non-EU cloud providers.
Continue Reading European Commission Publishes Proposal for Act to Reduce Reliance on Foreign Cloud and AIWhat’s Next for Age Assurance Laws in Europe?
Posted in Cybersecurity
Developments in law, regulatory guidance, and enforcement practice across Europe are leading to meaningful changes in how online services are offered to minors. A steady stream of announcements in recent months makes clear that this area will continue to develop at pace, requiring providers of online services to keep their approach to age assurance under regular review.
Continue Reading What’s Next for Age Assurance Laws in Europe?Court of Justice of the European Union Confirms Judicial Review of EDPB Binding Decisions
Posted in Uncategorized
On February 10, 2026, the Court of Justice of the European Union (CJEU) confirmed in a landmark judgment that companies can seek annulment of European Data Protection Board (EDPB) binding decisions before the adoption of…
Continue Reading Court of Justice of the European Union Confirms Judicial Review of EDPB Binding Decisions