The Australian Attorney-General has released a consultation paper accompanying the draft Privacy Amendment (Personal Data Protection) Bill 2026, a proposal to reform the Australian Privacy Act. The package comprises approximately 40 proposals: 25 that strengthen privacy safeguards, 5 that clarify and simplify existing obligations, 4 further measures reducing unnecessary compliance burdens, and 7 measures intended to enhance the efficiency of ...
On September 17, 2026, the European Data Protection Board adopted guidelines on the application of the power to impose administrative fines in relation to other corrective powers under the GDPR, and released them for public consultation. The guidelines address the question that precedes fine calculation - whether a fine should be imposed at all, in addition to or instead of ...
On September 17, 2026, the Supreme Court, sitting as the High Court of Justice, vacated the decision of the Central Elections Committee for the 26th Knesset that would have permitted party representatives at polling stations to transmit to their parties, in real time, the identities of voters who had already voted.
The practice at issue involves party representatives and observers ...
On September 21, 2026, the Irish Data Protection Commission (DPC) concluded its inquiry into Google Ireland Limited's processing of location data and imposed a fine of EUR 403 million. The inquiry covered three features - Web & App Activity, Location History and Location Accuracy - over the period from May 25, 2018 to February 4, 2020.
The DPC found that ...
On September 1, 2026, the United States filed a Statement of Interest in the copyright infringement litigation that the New York Times asserted against OpenAI in the Southern District of New York. Although directed at the New York Times dispute, it is framed to apply to all parties, including book authors and publishers.
The Government's central submission is that training ...
The National Ethics Committee of the Israel Bar Association issued a new ethics opinion on the use of artificial intelligence tools by lawyers. It is the second opinion on the subject, updating and expanding the preliminary opinion from May 2024. The Committee explains that it revisited the subject roughly two years on because of the rapid and extensive development of ...
On September 11, 2026, the reporting obligations under the EU Cyber Resilience Act (CRA) began to apply. Manufacturers of hardware or software products covered by the CRA must now promptly report actively exploited vulnerabilities and severe security incidents to EU authorities and to users, with an initial notification due within 24 hours.
The CRA applies to "products with digital elements" ...
New user? Click here to register