Policy & Regulation

California Age Verification Law: Newsom Signs Sept. 10 Rules
California Governor Gavin Newsom signed a sweeping package of child online safety laws on September 10, and the fine print affects far more than the teenagers the legislation was designed to protect. ...

Age Verification Outages: Fail Open or Fail Closed?
Age verification has become a routine part of browsing for millions of people, whether they're logging into a social platform, accessing adult content, or signing up for a new app. But a recent analys...

2026 Age Assurance Rules Spark Irreversible Account Purges
Most conversations about age assurance focus on the moment someone signs up: a new user hits a gate, proves they're old enough, and gets in. But a recent analysis from Xident points to a much bigger, ...

Indonesia Issues PDP Law Rules via GR 33/2026
Indonesia's Personal Data Protection Law, commonly known as the PDP Law, finally has its implementing regulation. According to a legal update from Rajah & Tann Asia, the government enacted and promulg...

House Passes KIDS Act June 29, Adding KOSA Online Rules
There is legislation moving through Congress right now that could change the way everyone, not just kids, uses the internet. On June 29, the House of Representatives passed the Kids Internet and Digit...

Vietnam's Decree 330 Tightens Cybersecurity Enforcement
Vietnam's government has issued Decree 330/2026/ND-CP, a new regulation that establishes administrative sanctions for violations in cybersecurity and personal data protection. According to legal analy...

GDPR Fines in 2026: How the Two-Tier Penalty System Works
GDPR fines remain one of the most misunderstood parts of European data protection law, even years after the regulation took effect. Headlines tend to focus on the eye-catching maximum figures, but the...

Council of Europe Drafts AI Privacy Rules for 55 Nations
The Council of Europe has published draft guidelines under its Convention 108+ treaty that would establish AI privacy requirements across 55 countries, a footprint that extends well beyond the Europea...

Data Privacy Laws in 2026: What GDPR and DPDP Mean for You
If you have ever clicked "accept" on a cookie banner without reading it, you are not alone. But behind that banner sits a rapidly expanding web of data privacy laws that determine who can collect your...

Uber's €825M Fine Tests GDPR's Automated Decision Rules
On August 21, 2026, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, or AP) handed Uber a fine of €824,990,000, making it the second-highest GDPR penalty ever issued. The case centers...