OneTrust DataGuidance

We share daily regulatory updates on AI, privacy, and cybersecurity from OneTrust DataGuidance, backed by 20+ years of expertise.

[OneTrust DataGuidance @DataGuidance]

South Korea: The PIPC has launched a public call for products and solutions to join its expanded 2026 Privacy by Design certification program, offering coverage of certification fees and expert privacy support.

Explore more: https://t.co/yuSaiUtPpA

[OneTrust DataGuidance @DataGuidance]

Connecticut: Governor signs Online Safety Bill.

The Act establishes new AI governance bodies, provider obligations, workforce programs, and rules on automated employment decision tools.

Check it out: https://t.co/hxNqWzKoP5

[OneTrust DataGuidance @DataGuidance]

Norway: NCC and NOYB file complaint against Schibsted over 'pay or okay' model.

The NCC and NOYB allege that Schibsted's 'pay or okay' tracking model breaches GDPR consent rules by conditioning privacy on payment.

Learn more: https://t.co/Ksvetq311T

[OneTrust DataGuidance @DataGuidance]

USA: President signs Executive Order on promoting AI and security.

The EO outlines tasks for agencies such as CISA, the Treasury, NSA, OMB, and the AG, strengthening AI-driven cyber defenses.

Read now: https://t.co/p92WrAD0a8

[OneTrust DataGuidance @DataGuidance]

Connecticut: Governor signs Bill amending the CTDPA, creating a data broker regime and introducing requirements on facial recognition, geolocation, and direct-to-consumer genetic data testing.

Read now: https://t.co/80G7yxNtvI

[OneTrust DataGuidance @DataGuidance]

Slovenia: Commissioner adopts 2025 annual report.

The Information Commissioner reports a sharp rise in enforcement activity and new supervisory powers under the EU AI Act.

Explore more: https://t.co/Yf2rEG0Pl9

[OneTrust DataGuidance @DataGuidance]

South Korea: PIPC announces draft amendment to PIPA Enforcement Decree to prevent personal data leaks, tighten CPO governance, expand ISMS-P certification, and strengthen data breach notification and sanctions.

Check it out: https://t.co/lD57MCsU5g

[OneTrust DataGuidance @DataGuidance]

EU: ENISA publishes NIS360 report on cybersecurity maturity across high-criticality NIS2 sectors, finding steadily improving but uneven cybersecurity maturity across NIS2 high-criticality sectors.

Read more: https://t.co/yvxe6UoNuH

[OneTrust DataGuidance @DataGuidance]

Finland: Cyber Resilience Act enters into force.

Traficom's NCSC-FI will enforce Finland's new Cyber Resilience Act, imposing strict product cybersecurity, rapid incident reporting, and updated NIS2-aligned domain name obligations.

Learn more: https://t.co/8t3T6pNYlC

[OneTrust DataGuidance @DataGuidance]

Florida: AG files lawsuit against OpenAI for alleged deceptive practices and child safety risks.

The lawsuit alleges deceptive ChatGPT marketing violated the Florida Deceptive and Unfair Trade Practices Act.

Read now: https://t.co/JQ8fUAtL44

[OneTrust DataGuidance @DataGuidance]

Vermont: Bill on data brokers and personal information passes legislature.

The bill would tighten oversight of data brokers and EdTech providers, mandating detailed disclosures, a public registry, and AG enforcement for privacy violations.

Read now: https://t.co/2hLqNrFuou

[OneTrust DataGuidance @DataGuidance]

Belgium: Belgian DPA publishes report on AI chatbots.

The Belgian DPA has highlighted #GDPR compliance risks in AI chatbot apps and issued recommendations on roles, DPIAs, and privacy-by-design for LLM deployments.

Learn more: https://t.co/UCwySfJOtJ

[OneTrust DataGuidance @DataGuidance]

Singapore: CSA issues advisory on cybersecurity risks of OpenClaw, stressing Zero Trust controls, least-privilege access, and strict oversight of tools and data.

Read now: https://t.co/rdA4Q9QVbt

[OneTrust DataGuidance @DataGuidance]

Monaco: APDP urges government to revise draft adequacy list for international data transfers and urged removal of several countries, including the US, Japan, South Korea, Brazil, and Israel.

Check it out: https://t.co/LwxesGNmvw

[OneTrust DataGuidance @DataGuidance]

Vermont: Bill on consumer data privacy and online surveillance passes legislature, granting residents broad data rights and empowering the AG to enforce breaches.

Learn more: https://t.co/m7LwW90pFh

[OneTrust DataGuidance @DataGuidance]

California: Bill on consumer deletion rights passes Senate.

The bill expands consumer deletion rights and mandates online submission methods for personal information requests.

Learn more: https://t.co/1SLJPV0wkq

[OneTrust DataGuidance @DataGuidance]

France: CNIL fines IQVIA €5M for health data violations.

CNIL fined IQVIA €5 million for failing to comply with security and transparency requirements regarding the management of health data warehouses.

Read on: https://t.co/XvERopY0fX

[OneTrust DataGuidance @DataGuidance]

Colombia: Constitutional Court determines Data Protection Law applies to foreign controllers processing data of individuals in Colombia.

Learn more: https://t.co/jrZA27ihK0

[OneTrust DataGuidance @DataGuidance]

EU: Commission fines Temu €200M for DSA risk assessment failures.

The European Commission fined Temu €200 million for failing to meet DSA risk assessment standards and requires a compliance plan by August 28, 2026.

Check it out: https://t.co/uNRvlyvL6N

[OneTrust DataGuidance @DataGuidance]

California: AG sues Chrome Holding Co. for failure to protect genetic data.

The California AG sued Chrome Holding Co. for failing to protect genetic data, including ancestry reports and health predispositions.

Read now: https://t.co/kgaO3zoDvr