15 July 2026
The EU AI Act deadline moved, vendor questionnaires will not
iapp.org Delaying the AI Act's high-risk deadlines to 2027 and 2028 will not slow procurement teams, who keep demanding compliance evidence at contract renewal.
Commission accepts X's corrective measures to terminate breaches of the DSA
digital-strategy.ec.europa.eu The Commission accepted X's plan to fix its ad repository and researcher data access after last year's €120m fine. X has six months to deliver.
14 July 2026
When the facts change, adequacy must be reviewed
edri.org EDRi and 36 other groups asked the Commission to reassess the EU-US adequacy decision, arguing Trump v. Slaughter guts its independent-oversight safeguard.
EDPB requires Belgian DPA to handle the merits of NOYB cookie banner complaint
edpb.europa.eu A binding EDPB decision requires the Belgian DPA to rule on the merits of NOYB's cookie-banner complaint against VRT rather than dismiss it as an abuse.
'Anthropic doesn't care about Europe' — EU officials peeved after AI giant sends junior staffer to testify about safety
europarl.europa.eu Anthropic sent a junior technical employee to answer MEPs' questions on cyber-capable models, leaving policy questions unanswered and lawmakers unimpressed.
13 July 2026
US appeals court overturns Clearview AI settlement
reuters.com The 7th Circuit threw out Clearview AI's biometric-privacy settlement, holding that nationwide class members were represented worse than those in four states.
EU wants 13+ age restriction for social media
digital-strategy.ec.europa.eu An expert panel report backed by von der Leyen recommends that under-13s get only time-limited, parent-supervised access to social media.
10 July 2026
Commission preliminarily finds the addictive design of Instagram and Facebook in breach of the DSA
ec.europa.eu The Commission preliminarily found Instagram and Facebook breach the DSA through infinite scroll, autoplay and recommender design that hooks minors.
9 July 2026
Italian DPA fines Character.AI €158,000 over transparency, late DPIA and inadequate protection of minors
garanteprivacy.it Italy's Garante fined Character.AI €158,000 over unclear transparency, a late impact assessment and weak safeguards for minors.
Combating child sexual abuse online: support for more limited ePrivacy derogation
europarl.europa.eu Parliament let the ePrivacy derogation for voluntary CSAM scanning run to April 2028, adding an amendment to exclude end-to-end encrypted messages.
8 July 2026
EU General Court dismisses Apple's challenge to its gatekeeper designation under the DMA
curia.europa.eu The General Court dismissed Apple's challenge to its DMA gatekeeper designation, confirming that its App Store versions count as a single platform service.
EDPB sheds light on anonymisation and web scraping for generative AI and adopts final version of guidelines on blockchain
edpb.europa.eu New draft guidelines set a three-part test for anonymous data and address web scraping for generative AI training; the blockchain guidelines were finalised.
AMLA introduces a common EU approach to enforcing anti-money laundering rules
amla.europa.eu AMLA's draft technical standards give supervisors in every member state one four-tier method for grading AML breaches and setting enforcement outcomes.
AI increases the risks of cyberattacks
autoriteitpersoonsgegevens.nl Account takeovers reported to the Dutch DPA nearly tripled to 1,742 in 2025, which it attributes to increasingly convincing AI-generated phishing.
7 July 2026
Commission refers Ireland, Spain, France and the Netherlands to the Court of Justice for failing to transpose NIS2
ec.europa.eu Ireland, Spain, France and the Netherlands were referred to the CJEU for being over 20 months late transposing NIS2, and now risk financial penalties.
6 July 2026
Joint Statement: Pegasus in the European Parliament, the EU Must Act Now
edri.org Citizen Lab found that MEP Stelios Kouloglou was hacked with Pegasus while sitting on Parliament's own committee investigating the spyware.
1 July 2026
Trump's court win reignites fight to sink €1.7T data deal with Europe
edpb.europa.eu European regulators and Noyb are moving to challenge the EU-US data deal after the Supreme Court expanded the president's power to fire agency commissioners.
EDPB and AMLA to develop Joint Guidelines on partnerships for information sharing
edpb.europa.eu The EDPB and AMLA will write joint guidelines on sharing information to fight financial crime under the AML Regulation, with consultation planned for 2027.
29 June 2026
Artificial Intelligence: Council gives final green light to simplify and streamline rules
consilium.europa.eu The Council adopted the Digital Omnibus on AI, pushing high-risk compliance to December 2027 and August 2028 and delaying regulatory sandboxes to August 2027.