On 17 September 2026, the European Data Protection Board (EDPB) published its final guidelines on the interplay between the General Data Protection Regulation (GDPR) and the Digital Services Act (DSA) (available here). While the GDPR regulates the processing of personal data, the DSA seeks to create a safer and more transparent online environment by imposing […]
Adtech & Digital Tracking
State Privacy Laws Are Moving Beyond Disclosures: What Businesses Need to Know in 2026
State privacy laws are increasingly regulating how businesses collect, use, share, and govern personal information in practice, not just what they say in privacy notices. Compliance challenges now extend beyond disclosures to areas such as digital advertising, sensitive data, consumer rights, data governance, and technical compliance controls. Our latest client alert highlights key developments affecting […]
Connected Vehicles Under the Spotlight: French DPA Issues Landmark Guidance on Vehicle Data Privacy
On 30 June 2026, the French Data Protection Authority (CNIL) published comprehensive new guidance on the processing of personal data generated by connected vehicles, with a particular focus on geolocation data (available in French here). For automotive manufacturers, suppliers, and mobility companies with operations or customers in the EU, this 60-page guidance provides much-needed clarity […]
California Puts Social Media’s Youth Feeds on Notice
On May 14, 2026, California Attorney General Rob Bonta issued proposed regulations and opened a 45-day public comment period addressing compliance with the age determination and parental consent requirements of the Protecting Our Kids from Social Media Addiction Act, or S.B. 976 (the “Act”). Enacted in September 2024, the Act is intended to protect users […]
May Flowers Bring Fresh Insight from CalPrivacy
Increased scrutiny of data brokers, rapid scaling of enforcement operations and active opposition to federal privacy preemption are in bloom in the Golden State. On May 1, 2026, the California Privacy Protection Agency (the “Agency”) Board (the “Board”) held a public meeting to review and discuss enforcement activities, legislative developments, and international data transfer issues. […]