What changed

EDPB FAQ on Data Privacy Framework \u2014 Verification and Onward-Transfer Flow-Down Obligations (January 2026)

NYC Local Law 144 \\u2014 AEDT bias audit requirements take effect with July 2026 enforcement update

CPPA finalizes automated decision technology opt-out regulations under CPRA

California CIPA extended to first-party pixel and session-replay tools by Court of Appeal

EU AI Office publishes first systemic-risk model list \\u2014 three frontier models designated

EU AI Act \\u2014 General Purpose AI Model obligations now in force for providers above threshold

CISA proposes 72-hour cyber incident reporting for critical infrastructure \\u2014 CIRCIA NPRM

Irish DPC \\\\u2014 Final Decision, Permanent TSB Inquiry (GDPR)

Irish DPC \\\\u2014 Final Decision, Midlands Regional Hospital Tullamore Inquiry (GDPR)

Irish DPC \\\\u2014 Final Decision, University of Limerick Inquiry (GDPR)

A G Equipment \\\\u2014 EEOC Religious and Disability Discrimination Settlement (Vaccine Mandate)

EEOC Federal-Sector Appellate Decision \\\\u2014 Religious Accommodation to COVID-19 Vaccine Mandate (Bureau of Indian Education)

Central Transport \\\\u2014 EEOC Sex Discrimination in Hiring Resolution (Female Truck Drivers)

EU AI Office \u2014 Forthcoming Guidelines Supporting Implementation of the AI Act

NLRB Modification of Procedures in Representation Cases (2020 Rule)

NLRB Blocking Charge Policy, Voluntary Recognition Bar, and Section 9(a) Construction Industry Rule (2020)

Kaiser Permanente \\u2014 EEOC Religious Discrimination Settlement (Vaccine Mandate)

EEOC Additional Instructions for MD-715 Reporting, FY2026

EEOC National Enforcement Plan FY2025-2029

Northwestern Medicine \\u2014 EEOC Religious Discrimination Conciliation (Vaccine Exemptions)

EDPB FAQ on Data Privacy Framework \u2014 Verification and Onward-Transfer Flow-Down Obligations (January 2026)

NYC Local Law 144 \\u2014 AEDT bias audit requirements take effect with July 2026 enforcement update

CPPA finalizes automated decision technology opt-out regulations under CPRA

California CIPA extended to first-party pixel and session-replay tools by Court of Appeal

EU AI Office publishes first systemic-risk model list \\u2014 three frontier models designated

EU AI Act \\u2014 General Purpose AI Model obligations now in force for providers above threshold

CISA proposes 72-hour cyber incident reporting for critical infrastructure \\u2014 CIRCIA NPRM

Irish DPC \\\\u2014 Final Decision, Permanent TSB Inquiry (GDPR)

Irish DPC \\\\u2014 Final Decision, Midlands Regional Hospital Tullamore Inquiry (GDPR)

Irish DPC \\\\u2014 Final Decision, University of Limerick Inquiry (GDPR)

A G Equipment \\\\u2014 EEOC Religious and Disability Discrimination Settlement (Vaccine Mandate)

EEOC Federal-Sector Appellate Decision \\\\u2014 Religious Accommodation to COVID-19 Vaccine Mandate (Bureau of Indian Education)

Central Transport \\\\u2014 EEOC Sex Discrimination in Hiring Resolution (Female Truck Drivers)

EU AI Office \u2014 Forthcoming Guidelines Supporting Implementation of the AI Act

NLRB Modification of Procedures in Representation Cases (2020 Rule)

NLRB Blocking Charge Policy, Voluntary Recognition Bar, and Section 9(a) Construction Industry Rule (2020)

Kaiser Permanente \\u2014 EEOC Religious Discrimination Settlement (Vaccine Mandate)

EEOC Additional Instructions for MD-715 Reporting, FY2026

EEOC National Enforcement Plan FY2025-2029

Northwestern Medicine \\u2014 EEOC Religious Discrimination Conciliation (Vaccine Exemptions)