At its August 6–7, 2026, board meetings, the California Privacy Protection Agency (CalPrivacy) Board directed staff to prepare formal rulemaking to name Global Privacy Control (GPC) in the California Consumer Privacy Act (CCPA) regulations and tighten how opt-out preference signals
The Data Advisor
Unique Insights on Privacy and Data Protection Worldwide
The Data Advisor, published by Wilson Sonsini Goodrich & Rosati, focuses on legal developments related to data privacy, digital markets, and consumer protection within the EU and UK. It covers topics such as GDPR compliance, liability of online marketplaces for user-generated content, enforcement of consumer protection laws in digital economies, legislative proposals affecting data processing and AI regulation, and regulatory actions by competition and consumer authorities. The blog also addresses issues like online fraud prevention, digital fairness, and the impact of new EU and UK regulations on businesses and consumers in the technology and digital services sectors.
Ninth Circuit Addresses CFAA and Agentic AI Tools in Groundbreaking Decision
On August 4, 2026, the U.S. Court of Appeals for the Ninth Circuit issued a groundbreaking decision in Amazon.com Services, LLC v. Perplexity AI, addressing the legal status of so-called “agentic AI” tools, which help users expedite various online…
EU AI Act Enforcement Phase Begins
On August 2, 2026, the European Commission (EC), acting through its European AI Office (EU AI Office), became formally entitled to exercise its powers to investigate and enforce the EU AI Act obligations imposed on providers of general-purpose artificial intelligence…
Illinois Enacts AI Safety and Transparency Law for Frontier AI Developers
On July 6, 2026, Illinois Governor JB Pritzker signed into law Senate Bill 315, the Artificial Intelligence Safety Measures Act (AISMA), which will require large AI developers to publicly disclose how they plan to mitigate potentially “catastrophic risks” posed…
EU Commission Publishes AI Transparency Code of Practice
On June 10, 2026, the European Commission published a Code of Practice on marking and labeling of AI-generated content (the Code) following a public consultation that took place last year. The Code is divided into two sections:
- Section 1 sets out
…
The FTC After Slaughter: What Businesses Need to Understand
On June 29, 2026, the U.S. Supreme Court issued its opinion in Trump v. Slaughter, where the six-Justice majority held that appointed agency officials who wield executive power are subject to presidential removal. In so holding, the Court overruled…
SCOTUS Ruling Calls into Question EU-U.S. Personal Data Flows
On June 29, 2026, the Supreme Court of the U.S. (SCOTUS) held in Trump v. Slaughter that the U.S. President can dismiss members of the Federal Trade Commission (FTC) at will, rather than only for cause, overruling existing precedent regarding…
EU Data Act September 2026 Deadline: What Businesses Need to Know
Starting September 12, 2026, connected products sold in the EU must be built with data access functionality. This alert discusses the new access-by-design obligation and provides practical steps for compliance.The New Access-by-Design ObligationThe EU Data Act (Regulation (EU) 2023/2854) became…
UK Announces Social Media Ban and Broader Online Restrictions for Users Under 16
On June 15, 2026, the UK government announced plans to introduce a social media ban for users under 16 (under-16s), alongside restrictions on features deemed harmful to minors, such as livestreaming and messaging functions, for a wider range of online…
New York Legislature Passes Ban on Personalized Pricing
Last week, the New York State Legislature passed the One Fair Price Act (S.8623B/A.9349B) (the Act), a bill that prohibits businesses from using personal data—such as purchase history, browsing history, real-time location, income, or inferred household size—to generate individual prices…