Privacy & Cybersecurity Law Blog

On September 17, 2026, the European Commission published a proposed EU KIDS Act aimed at strengthening protections for children online.

On September 9, 2026, the Federal Communications Commission issued a final rule amending the previously issued and subsequently delayed “Revoke All” rule applicable to the Telephone Consumer Protection Act.

On September 9, 2026, the FTC withdrew its 2021 Policy Statement on Breaches by Health Apps and Other Connected Devices.

As of September 11, 2026, manufacturers of products with digital elements are subject to new incident reporting obligations under the EU Cyber Resilience Act.

On August 21, 2026, the Dutch Data Protection Authority announced that it had fined Uber €824,990,000 for infringing the rules on solely automated decision-making under the EU GDPR.

On September 2, 2026, Delaware Governor Matt Meyer signed House Bill 380, significantly expanding the Delaware Personal Data Privacy Act, effective January 1, 2027.

On August 31, 2026, the European Commission announced that it had designated ChatGPT as a Very Large Online Search Engine (“VLOSE”) and Reddit and Roblox as Very Large Online Platforms (“VLOPs”) under the Digital Services Act (“DSA”).

The Ministry of Public Security of the People’s Republic of China (“MPS”) recently promulgated the Measures for Public Security Organs’ Supervision and Inspection of Cyberspace Security (the “New Rules on Cyberspace Inspection”). The New Rules on Cyberspace Inspection will take effect October 1, 2026, and replace the 2018 Provisions on Internet Security Supervision and Inspection by Public Security Organs, which are simultaneously repealed.

On August 26, 2026, U.S. District Judge Yvonne Gonzalez Rogers approved a settlement between Meta Platforms Inc. and 29 state attorneys general in a federal bellwether case concerning alleged harms to children and teens from Facebook and Instagram.

On August 19, 2026, the FTC announced that it is seeking public comment on a proposed enforcement policy statement regarding personalized pricing. The proposed policy statement outlines the FTC’s legal concerns with the practice and signals the agency’s intent to pursue enforcement actions against businesses that fail to make adequate disclosures to consumers.