We’ve compiled the latest in Data Protection and Privacy news for your convenience below.
1) Newly Published Documentation
🇪🇺 European Union – EU Explores Cloud and AI Act for Data Centre Sovereignty
Parliament analysts outlined how a forthcoming Cloud and AI Development Act could expand EU data-centre capacity, reduce reliance on US cloud providers, and foster secure EU-based services to strengthen digital sovereignty and competitiveness.
🇪🇺 European Union – Meta to Offer Real Choice on Personalised Ads Under DMA
Under Digital Markets Act pressure, Meta agreed to give Facebook and Instagram users genuine choice between fully personalised ads and versions using significantly less personal data, starting January 2026.
2) Notable Case Law
🇰🇷 South Korea – Coupang CEO Resigns After Breach Affecting 33.7 Million Users
South Korean e-commerce giant Coupang disclosed a breach affecting 33.7 million customers after attackers used active cryptographic keys to forge access tokens, exposing personal details for nearly five months.
🇬🇧 United Kingdom – ICO Fines LastPass £1.2 Million Over Major Data Breach
The UK Information Commissioner’s Office fined LastPass £1.2 million after a cyberattack exposed data of up to 1.6 million UK users due to inadequate technical and organizational safeguards.
3) New and Upcoming Legislation
🇺🇸 USA (Federal) – Trump Signs Order to Preempt State AI Laws
President Trump signed an executive order creating national AI policy to displace conflicting state laws, directing federal agencies to challenge state measures while exempting child safety and procurement rules.
🇮🇪 Ireland – Government Approves Garda Facial Recognition Bill
The Irish Government approved publication of legislation enabling police to use facial recognition and biometric tools for serious crime investigations, subject to High Court judge oversight.
4) Strong Impact Tech
🇪🇺 European Union – Commission Probes Google’s Use of Content for AI Training
The European Commission launched an investigation into whether Google abuses dominance by using publishers’ content and YouTube videos to train AI models without fair compensation or meaningful opt-out.
🇿🇦 South Africa – WhatsApp Settles With Regulator Over Data Compliance
WhatsApp reached an out-of-court settlement with South Africa’s Information Regulator over alleged non-compliance with local data-processing conditions, with confidential corrective measures agreed.
Other key information from the past weeks
🇻🇳 Vietnam – Vietnam Passes First Comprehensive AI Law
Vietnam’s National Assembly approved its first Law on Artificial Intelligence, effective March 2026, establishing core principles, prohibited practices, and risk-based framework with centralized oversight.
🇦🇺 Australia – Reddit Challenges Social Media Age Ban in Court
Reddit initiated High Court proceedings to overturn Australia’s ban on social media access for minors, arguing the regulation infringes upon free political dialogue and poses privacy concerns.
👍 Enjoyed this issue? Share it on LinkedIn and subscribe for weekly updates
Latest issues
About us
Attorney-level solutions to make your websites and apps compliant with the law across multiple countries and legislations.