Global Legal Radar

AI Governance Developments

• 🔥 Singapore Model AI Governance Framework for Agentic AI: Singapore has released its Model AI Governance Framework...

AI Governance Developments

• 🔥 Singapore Model AI Governance Framework for Agentic AI: Singapore has introduced a Model AI Governance Framework...

Bipartisan momentum is driving sector-specific AI bills at federal and state levels, creating new compliance and export considerations for counsel.

-...

A Practical Law Practice Note delivers an in-depth analysis of the adtech ecosystem and the complex US privacy requirements applicable to it. This...

Businesses must now price UK GDPR fines and US state suits into every risk model.

• UK GDPR higher-tier fines reach £17.5 million, adding direct...

The proposed SECURE Data Act stands out as a pivotal new federal privacy draft unveiled in May 2026, marking a key development in U.S. data protection...

Singapore’s new Model AI Governance Framework for Agentic AI signals a shift toward shared accountability, rigorous testing, and human-in-the-loop...

GDPR Enforcement Updates

• 🔥 Latest Aggregate Fines: The 7th edition of the GDPR Enforcement Tracker Report now reports a total of 2,685 fines...

This healthcare scenario highlights breach response costs for 8500 exposed records:

• Credit monitoring for patients: $8,500-$25,000
• Regulatory fines and settlements: $10,000-$50,000
• Data breach coverage under insurance to offset remediation

Recent incidents reveal a recurring forensic challenge: proving breach scope quickly enough to contain regulatory and operational fallout.

• OpenAI...

The Canvas Instructure incident demonstrates how a single perimeter breach in a multi-tenant platform can trigger governance and compliance...

The 7th GDPR Enforcement Tracker Report records 2,685 fines as of 1 March 2026, an increase of +440 from the prior edition. This steady growth in...

CPRA regulations impose robust obligations on businesses for data sales and shares, mandating specific contractual language in third-party agreements....

AI Governance Shifts

• 🔥 Colorado AI Law Pivot: Colorado replaced its EU-style risk-based AI framework with per-decision employer accountability...

Colorado's first comprehensive state AI statute in 2024 directly incorporated the EU AI Act's risk-based regulatory architecture. This foundational...

China has no standalone breach-notification statute; obligations instead arise from three principal laws and related measures.

Texas's TDPSA establishes core consumer rights and opt-out mechanisms that align with broader 2026 trends across a dozen states.

• Opt-out...

US Privacy Law Expansions

• 🔥 Nebraska Agricultural Data Privacy Act: Nebraska signed the first-in-the-nation Agricultural Data Privacy Act into...

The Crime and Policing Bill will criminalise creation and supply of AI tools generating non-consensual deepfake intimate images.

• Expanded scope:...

CCPA mandatory cybersecurity audits are approaching, requiring assessment of alignments with NIST, ISO 27001, NYDFS Part 500, and CIS 18 controls alongside identification of where these fall short for compliance planning.