14 September 2026
Primera notificación de una brecha de datos personales causada por un ataque ejecutado mediante un agente de IA
aepd.es The AEPD logged Spain's first breach caused by an AI agent, which autonomously probed for vulnerabilities, logged in, altered personal data and reached invoices.
Open letter from European civil society organisations on encryption and privacy threats in Canada's Bill C-22
accessnow.org Sixteen European digital rights groups asked the Commission to review Canada's GDPR adequacy over Bill C-22's secret capability orders and blanket metadata retention.
Hungary moves to amend controversial child protection law after EU court ruling
euronews.com Hungary tabled amendments stripping the 2021 child protection law of its restrictions on depicting homosexuality to minors, hoping to unlock €500 million in EU education funds.
France submits new proposal to ban social media for under-15s
euractiv.com France notified the European Commission of a reworked bill banning social media for under-15s, after the Constitutional Council struck down the previous version in August.
eCourier drivers 'likely' to win worker status claim
personneltoday.com An employment tribunal said 46 drivers at Royal Mail-owned eCourier are likely to be found workers rather than self-employed contractors, citing Uber and Pimlico Plumbers.
11 September 2026
Safer and more secure digital products
commission.europa.eu The Cyber Resilience Act's Article 14 reporting duties took effect: manufacturers must send an early warning within 24 hours via ENISA's Single Reporting Platform and notify fully within 72.
ICO statement on its investigation into Police Scotland
ico.org.uk The ICO opened an investigation into whether Police Scotland handles subject access requests within statutory deadlines under UK GDPR Articles 12 and 15.
Dutch Government Advocates for EU-Wide Minimum Age for Social Media
government.nl The Netherlands and Spain sent the Commission a joint non-paper backing an EU-wide minimum age for social media, with privacy-friendly age verification and exemptions for safe services.
10 September 2026
Sentenza su rider Glovo: da assumere a tempo pieno e indeterminato. "Pagare anche le attese"
rainews.it The Turin labour court ordered Glovo to hire a rider on a permanent full-time contract, finding algorithmic control created subordination, and to pay waiting time between orders.
SCHUFA insists on shadow database. noyb lawsuit now certain
noyb.eu SCHUFA rejected noyb's cease-and-desist over its shadow database, so noyb will file for an injunction and is collecting sign-ups for a possible class action.
Open Letter: Civil society coalition urges EU to kill the cookie banner!
noyb.eu Nineteen civil society groups, businesses and academics urged EU lawmakers to keep Article 88b of the Digital Omnibus after the Council dropped binding automated privacy signals.
Governor Newsom signs the strongest child safety chatbot and social media laws in the nation
gov.ca.gov California enacted 13 bills, including Adam's Law requiring independent child safety audits of companion chatbots and a ban on addictive feeds for under-16s.
EU watchdog probes von der Leyen's AI envoy pick
politico.eu The European Ombudsman opened an inquiry into the Commission's appointment of Siemens chairman Jim Hagemann Snabe as special envoy for industrial AI.
Detecting and countering misuse of AI: September 2026
anthropic.com Anthropic detailed misuse of Claude it disrupted between December 2025 and August 2026 across seven harm areas, including cyber operations, surveillance and biological misuse.
California gig drivers secure collective bargaining power in historic first
latimes.com California's labour board certified the SEIU-backed Gig Workers Union as statewide bargaining agent for Uber and Lyft drivers, covering pay, deactivations and safety.
9 September 2026
Risks of Gaming and Gambling
fatf-gafi.org The FATF published findings and new risk indicators on money laundering and terrorist financing through casinos, online gambling and in-game payment channels.
Non-respect des droits des personnes : sanction de 300 000 euros à l'encontre de la société EXTIA
cnil.fr The CNIL fined IT consultancy EXTIA €300,000 after more than three quarters of the 265 erasure requests it received in 2024 went unanswered or badly handled.
Judgment of the General Court in Case T-1139/23 Booking Holdings v Commission
curia.europa.eu The General Court dismissed Booking's action and upheld the Commission's prohibition of its acquisition of flight-booking provider Etraveli Group.
European Commission: Defend the DMA and reject Apple's new App Store terms
article19.org A coalition of app developers and rights groups told the Commission that Apple's new EU App Store terms, due on 1 October, still fail to comply with the DMA.
8 September 2026
Referencia del Consejo de Ministros: real decreto de condiciones laborales transparentes y previsibles
lamoncloa.gob.es Spain approved a royal decree transposing the transparent working conditions directive, adding an individual right to know which algorithmic systems shape a worker's pay and tasks.