Italy's €1.7 Million WINDTRE Fine Shows What Proportionate GDPR Enforcement Looks Like
Italy's Garante tied a modest fine to specific, fixable security gaps and credited WINDTRE's cooperation — a template for calibrated enforcement.
2026-08-13Latest Analysis
EU
GDPR enforcement
Thailand's Fastest Subsea Cable Upgrade Is Coming From Private Capital, Not the State's 'Sovereignty' Plan
Nokia's 30 Tbps upgrade to Symphony's MCT cable at Rayong shows private capex outpacing Thailand's state-led cable conso...
Indonesia's DTI-CX 2026 Signals That ASEAN's Digital Pact Depends on Infrastructure It Hasn't Built
Jakarta ministers say energy, connectivity and cyber defenses—not just DEFA's legal text—will decide who captures its ga...
Russia's State AI Assistant Undercuts Its Own Surveillance Messenger, Exposing the Limits of Coerced Adoption
Max's built-in AI tells users to use Telegram or Signal instead, days after Moscow made Max free and the EU sanctioned i...
FAA's Long-Delayed BVLOS Drone Rule Reaches OIRA, With the Right-of-Way Fight Still Unresolved
Part 108's drone airspace rule missed two statutory deadlines and now faces a 90-day White House review, with manned-air...
Tennessee's Under-14 Monetized Content Ban Breaks From the Trust-Fund Model of Kidfluencer Law
SB1469 bars kids under 14 from paid content outright, going further than California, Illinois and Minnesota's earnings-p...
Bundeskartellamt Clears SAP on Data Access, Leaving Germany's Gatekeeper Law Untested Against Enterprise Software
Germany's antitrust regulator closed its SAP-Celonis probe under ordinary abuse law, not the Section 19a regime reserved...
California's AI Transparency Act Bets That Watermark Mandates Beat Downstream Deepfake Liability
CAITA's Aug. 2 disclosure rules for major AI providers are a workable model, but daily fines and metadata that erodes in...
China's Manus Reversal Shows Beijing Will Claw Back AI Deals After They Close
NDRC's order to unwind Meta's already-closed Manus deal shows China's security review can reach AI M&A even after a tran...
Canada's Open Banking Rules Get the Accreditation Track Right, But Leave Fintechs Guessing on Timing
Ottawa's draft Consumer-Driven Banking Regulations fast-track RPAA-registered fintechs like Koho and Wealthsimple, but s...
Kenya's Cyber Cafe ID Rule Builds a National Identity Database Through a Telecoms Licence, Not a Privacy Law
A CA licensing clause now compels three-year ID-linked logs at cyber cafes, with no design role for Kenya's data regulat...
South Africa's New Biometric Border System Launched Without Any Privacy Framework Built For It
The ETA's launch statement names fraud stats but not POPIA, a privacy impact assessment, or independent oversight.
Manila's New Privacy-Risk Test Fixes a Real Problem, Then Gives Critics Four Days to Say So
The NPC's eight-category threshold test finally makes privacy impact assessments risk-based instead of guesswork — but t...