Consistent with recent years, 2026 has proved to be a busy year for children and teens’ privacy legislation. This post recaps notable developments and trends thus far in 2026. Our mid-year and end-of-year recaps for 2025 can be found here
Latest from Inside Privacy
California Legislature Advances Bill Targeting Wave of CIPA Pen Register Lawsuits
On July 1, 2026, a California legislative committee advanced amendments to SB 690 that would eliminate private suits asserting website-based “pen register” claims under the California Invasion of Privacy Act (“CIPA”), leaving enforcement exclusively to the California Attorney
Colorado Governor Vetoes Overly Broad Algorithmic Pricing and Wage Setting Bill
On June 2, 2026, Colorado Governor Jared Polis vetoed HB 26-1210, a bill that would have imposed requirements for use of “surveillance data” to set individualized prices for consumers or individualized wage setting for workers. The veto is yet
State Comprehensive Privacy Law Round-Up: Several States Amend Their Privacy Statutes
In recent weeks, several state legislatures have amended their state comprehensive privacy laws. Some of these amendments have already been enacted into law, while others have passed their state legislature and await the governor’s signature.
White House Launches “Gold Eagle” AI Cybersecurity Clearinghouse
On July 14, 2026, the Trump Administration announced the launch of a federal clearinghouse, “Gold Eagle,” that is designed to facilitate the sharing of AI-derived cybersecurity vulnerability information between government agencies, “American critical infrastructure companies,” and “open-source software partners.”
Connecticut Extends AI Regulation to Subscriptions
On May 27, the Connecticut governor signed into law a comprehensive artificial intelligence (“AI”) bill that regulates safety, transparency, and consumer protection, including subscription marketing (“SB 5”). Alongside key provisions on Employee Reporting Protections, AI Companions, and Automated Employment-Related Decision Technology
OMB Publishes 2026 Unified Agenda Signaling Upcoming Health Privacy and Interoperability Updates from HHS
The Office of Management and Budget (“OMB”) has released its 2026 Unified Agenda, which identifies regulatory actions that federal agencies expect to propose or finalize during the remainder of the year. Below, we highlight several notable health privacy, interoperability, and
CJEU Decides When Streaming Subscriptions Are Subject to the Right of Withdrawal
On July 9, 2026, the Court of Justice of the European Union (“CJEU” or “Court”) delivered its judgment in Sky Österreich Fernsehen (C-234/25), deciding that a streaming offering constitutes a digital service under the Consumer Rights Directive (Directive
CJEU Clarifies the Conditions for Seizure of Business Emails During Competition Inspections
On July 16, 2026, the Court of Justice of the European Union (“CJEU”) issued a decision clarifying that EU law does not, as a rule, prevent a national competition authority from seizing business emails stored on a company’s systems without
Looking beyond the tech sovereignty package: how the EU is moving to ensure tech sector resilience
On 3 June 2026, the European Commission published several legislative and policy measures wrapped up in one “tech sovereignty” package (see our posts summarising the package as a whole here, and diving deeper into the Cloud and AI Development