Digital Economy and Data Protection Newsletter（26.16）

Click above｜Follow us

Recently, in AI governance, the Supreme People's Court issued the Opinions on Adjudicating Disputes Involving Artificial Intelligence in Accordance with Law, while the Cyberspace Administration of China further advanced the second phase of the “Qinglang · Rectification of Chaos in AI Applications” special campaign. In legislation and policy, four new rules, including the Provisions on Simplified Measures for Personal Information Protection by Small Personal Information Processors, took effect from September; the Ministry of Industry and Information Technology issued the “15th Five-Year Plan” for the information and communications industry and the implementation plan for the “AI + Software” special action; and the State Administration for Market Regulation publicly solicited comments on compliance guidelines for online transaction mini-program platforms. In regulatory enforcement, authorities continued to report cases involving unlawful collection and use of personal information by apps and illegal purchase of personal information, and released enforcement statistics for the first half of the year. Overseas, the EU designated ChatGPT as a “Very Large Online Search Engine” under the Digital Services Act; the U.S. FTC and multiple states sued Amazon while Congress advanced several AI bills; data protection authorities in South Korea, France and Spain issued a number of fines; and Australia, Singapore and Malaysia advanced legislation or consultations concerning privacy protection, digital infrastructure and cybercrime.

HOTSPOT

Supreme People's Court Issues the Opinions on Adjudicating Disputes Involving Artificial Intelligence in Accordance with Law

On September 7, 2026, the Supreme People's Court issued the Opinions of the Supreme People's Court on Adjudicating Disputes Involving Artificial Intelligence in Accordance with Law (Fa Fa [2026] No. 10, hereinafter the “Opinions”). Comprising 24 articles in five parts, the Opinions are the first judicial adjudication rules on AI-related disputes issued by China's highest judicial organ. They address scenarios including AI face-swapping and voice imitation, training on publicly disclosed personal information, generative AI infringement, AI products and autonomous driving, AIGC intellectual property, open-source software and AI evidence, and clarify the allocation of liability among developers, providers and users as well as rules of evidence.

Source: Supreme People's Court

https://www.court.gov.cn/zixun/xiangqing/511101.html

State Administration for Market Regulation Issues the Compliance Guidelines for Online Transaction Mini-Program Platforms (Draft for Comments)

On September 1, 2026, the State Administration for Market Regulation issued the Compliance Guidelines for Online Transaction Mini-Program Platforms (Draft for Comments) (hereinafter the “Guidelines”) to solicit public comments, with comments due by September 8, 2026.

The Guidelines further specify the primary responsibilities of online transaction mini-program platform operators, setting out requirements concerning operator qualification review, platform rules and information disclosure, inspection and monitoring, consumer rights and interests protection, and handling of unlawful business activities, thereby requiring mini-program platforms to assume platform governance responsibilities beyond merely providing technical and traffic services.

Source: State Administration for Market Regulation (SAMR)

https://www.samr.gov.cn/hd/zjdc/art/2026/art_68686f054fe043b6b62c21f50e230b79.html

NEWSLETTER

（Click on the source or copy the corresponding link to view the details）

LEGISLATION

Four New Regulations Take Effect as of September 2026, Including the Provisions on Promoting and Regulating the Application of Electronic Documents, the Provisions on Multi-Channel Distribution Services for Internet Information Content, the Provisions on Simplified Personal Information Protection Measures for Small-Scale Personal Information Processors, and the Measures for the Administration of Online Marketing of Financial Products
Source: Public Reports, etc.
The Supreme People's Court Issues the Opinions on Adjudicating Disputes Involving Artificial Intelligence in Accordance with the Law
Source: Supreme People's Court
The Cyberspace Administration of China and Six Other Departments Jointly Issue the Implementation Plan for Promoting Coordinated Digital and Green Transformation (2026-2030)
Source: Cyberspace Administration of China
The Ministry of Industry and Information Technology and Nine Other Departments Issue the 15th Five-Year Plan for Promoting the Development of Small and Medium-Sized Enterprises
Source: Ministry of Industry and Information Technology (MIIT)
The Ministry of Industry and Information Technology Issues the 15th Five-Year Plan for the Development of the Information and Communication Industry
Source: Ministry of Industry and Information Technology (MIIT)
The Ministry of Industry and Information Technology Issues the Implementation Plan for the Special Action on "AI + Software"
Source: Ministry of Industry and Information Technology (MIIT)
The Ministry of Industry and Information Technology Releases the 15th Five-Year Plan for the Development of the Intelligent Connected New Energy Vehicle Industry
Source: Ministry of Industry and Information Technology (MIIT)
The State Administration for Market Regulation Solicits Public Comments on the Compliance Guidelines for Online Transaction Mini-Program Platforms (Draft for Comments)
Source: State Administration for Market Regulation
https://www.samr.gov.cn/hd/zjdc/art/2026/art_68686f054fe043b6b62c21f50e230b79.html
The Data Security Regulation of Chongqing Comes into Force on September 1, 2026
Source: Standing Committee of the Chongqing Municipal People's Congress
https://www.cqrd.gov.cn/web/article/1532462865553559552/web/content_1532462865553559552.html

INDUSTRY TRENDS

The Supreme People's Procuratorate Releases Five Typical Cases on Technical Support for Intellectual Property Procuratorial Case Handling
Source: Supreme People's Procuratorate
http://www.nmchahaeryouqian.jcy.gov.cn/zhxw/202609/t20260903_7881575.shtml
The Cyberspace Administration of China Advances Phase II of the "Qinglang" Special Campaign to Rectify AI Application Disorder, Clearing Over 5.61 Million Items of Illegal and Non-Compliant Information and Closing Over 49,000 Accounts
Source: Cyberspace Administration of China
The Cybersecurity Bureau of the Ministry of Public Security Releases a Typical Case Where Paid Provision of Drone Cracking Services Constitutes the Crime of Providing Programs for Intruding into Computer Information Systems
Source: Cybersecurity Bureau of the Ministry of Public Security
The Computer Information System Security Product Quality Supervision and Inspection Center of the Ministry of Public Security Identifies 42 Mobile Applications Illegally Collecting and Using Personal Information
Source: Computer Information System Security Product Quality Supervision and Inspection Center of the Ministry of Public Security
The National Data Administration and the National Data Development Research Institute Release the China Data Industry Development Report (2026)
Source: National Data Administration
https://www.nda.gov.cn/sjj/zhuanti/ztdsjblh/ztxwfb/0828/20260828233336307959824_pc.html
The China Federation of Internet Societies Releases the China New E-Commerce Development Report (2026)
Source: China Federation of Internet Societies
The China National Intellectual Property Administration Publishes Two Administrative Penalty Decisions Revoking Patent Agency Practice Licenses, with the Cases Involving Illegal Purchase of Corporate and Individual Personal Information
Source: China National Intellectual Property Administration
https://www.cnipa.gov.cn/art/2026/9/3/art_547_207997.html
The State Administration for Market Regulation Releases Its First-Half 2026 Enforcement Statistics, with 640,000 Cases Handled and Nearly CNY 7 Billion in Fines and Confiscations
Source: State Administration for Market Regulation
The Beijing Cyberspace Administration Releases an Overview of One Year of Implementation of the Measures for Labeling AI-Generated Synthetic Content, Covering Implementation by Baidu, Douyin, Kuaishou, Weibo, and Other Companies

Source: Beijing Cyberspace Administration
The Beijing Communications Administration Issues a Circular on Problematic Mobile Internet Applications (Ninth Batch of 2026)
Source: Beijing Communications Administration
https://bjca.miit.gov.cn/zwgk/wlaqgl/art/2026/art_d7373df5e6c546d58b829292e19adef1.html
The Shanghai Cyberspace Administration Releases an Announcement on Registered Generative Artificial Intelligence Services (August 31)
Source: Shanghai Cyberspace Administration
The Shanghai Cyberspace Administration Releases an Announcement on Filed Generative Artificial Intelligence Services (September 9)
Source: Shanghai Cyberspace Administration
The Shanghai Communications Administration Launches a Special Rectification Campaign Against Mobile Apps (SDKs) Infringing User Rights and Interests in the Financial Sector
Source: Shanghai Communications Administration
The Guangdong Cyberspace Administration Releases Seven Categories of Typical Cases from the "Qinglang" Special Campaign on the Protection of Minors Online
Source: Guangdong Cyberspace Administration
The Shandong Communications Administration Issues a Circular on the Third Batch of Non-Compliant Apps of 2026
Source: Shandong Communications Administration
https://sdca.miit.gov.cn/xwdt/tzgg/art/2026/art_707b508093314187a13f2aa550a4a133.html
The Qinghai Communications Administration Issues a Circular on the Third Batch of Apps and Mini-Programs Infringing User Rights and Interests
Source: Qinghai Communications Administration
https://qhca.miit.gov.cn/zwgk/tzgg/art/2026/art_454fe34a90a14fbd8213ce6759bb100c.html

OVERSEAS

European Union:

The European Commission Designates ChatGPT as a "Very Large Online Search Engine" (VLOSE) under the Digital Services Act and Designates Reddit and Roblox as Very Large Online Platforms
Source: European Commission
https://digital-strategy.ec.europa.eu/en/news/commission-designates-chatgpt-reddit-roblox-under-digital-services-act
The Court of Justice of the European Union Holds That the Personal Data of All Shareholders of a Public Limited Company May Not Be Made Public Unconditionally
Source: Court of Justice of the European Union (CJEU)
https://curia.europa.eu/site/upload/docs/application/pdf/2026-09/cp260115en.pdf
The Court of Justice of the European Union Holds That Short Social Media Texts May Constitute "Works" under Copyright Law
Source: Court of Justice of the European Union (CJEU)
https://eur-lex.europa.eu/legal-content/EN/TXT/?qid=1685116504949&uri=CELEX:62024CJ0598
The Advocate General of the Court of Justice of the European Union Delivers an Opinion on the Standards for the Retention of Electronic Communications Data
Source: Court of Justice of the European Union (CJEU)
https://curia.europa.eu/site/upload/docs/application/pdf/2026-09/cp260117fr.pdf
The Council of Europe Updates Its Draft Privacy Guidelines on Large Language Models, with Consideration by the Convention 108 Bureau Scheduled for September
Source: Council of Europe
https://rm.coe.int/t-pd-bur-2026-66oj-en/48802d37ce

United States：

The Federal Trade Commission (FTC), Jointly with 22 States, Sues Amazon over Its Undisclosed Price Surcharge Mechanism in Online Search Ad Auctions, Alleging Deceptive and Unfair Commercial Practices
Source: Federal Trade Commission (FTC)
https://www.ftc.gov/news-events/news/press-releases/2026/08/ftc-states-sue-amazon-over-secret-ad-surcharge-scheme
The FTC Finalizes Orders Requiring Cox Media Group and Two Other Firms to Pay USD 930,000 to Settle Charges That They Deceived Customers
Source: Federal Trade Commission (FTC)
https://www.ftc.gov/news-events/news/press-releases/2026/08/ftc-finalizes-orders-cox-media-group-two-other-firms-settling-charges-they-deceived-customers-about
The Office for Civil Rights (OCR) of the U.S. Department of Health and Human Services Settles a Right-of-Access Investigation with Azul Vision for USD 50,000
Source: HHS Office for Civil Rights (OCR)
https://www.hhs.gov/press-room/hhs-ocr-settles-hipaa-investigation-with-azul-vision.html
The Cybersecurity and Infrastructure Security Agency (CISA) Releases an ICS Advisory on Vulnerabilities in the Rockwell Automation Logix Platform
Source: CISA
https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-03
CISA Releases an Updated Insider Threat Mitigation Guide
Source: CISA
https://www.cisa.gov/resources-tools/resources/insider-threat-mitigation-guide
The Subcommittee on Commerce, Manufacturing, and Trade of the U.S. House of Representatives Favorably Reports the Open-Source Artificial Intelligence Leadership Act (H.R. 10152) to the Full Committee by Voice Vote
Source: U.S. House of Representatives
https://www.govinfo.gov/app/details/BILLS-119hr10152ih
The Subcommittee on Communications and Technology of the U.S. House of Representatives Favorably Reports the AI Security Network Act (H.R. 7294) to the Full Committee by Voice Vote
Source: U.S. House of Representatives
https://www.govinfo.gov/app/details/BILLS-119hr7294ih
The U.S. Department of Justice Files a Statement of Interest in the OpenAI Copyright Litigation, Supporting the Application of the Fair Use Doctrine to AI Model Training
Source: U.S. Department of Justice
https://storage.courtlistener.com/recap/gov.uscourts.nysd.640396/gov.uscourts.nysd.640396.1682.0.pdf
The U.S. Court of Appeals for the Federal Circuit Issues a Precedential Decision Upholding the PTAB's Determination That the Claims of Netlist's U.S. Patent No. 10,949,339 Are Unpatentable as Obvious
Source: U.S. Court of Appeals for the Federal Circuit
https://www.cafc.uscourts.gov/opinions-orders/24-1707.OPINION.9-2-2026_2749527.pdf
The U.S. District Court for the Northern District of California Enters Final Judgment in Anthropic v. U.S. Department of Defense, Holding That the "Supply Chain Risk" Designation Is Unlawful
Source: U.S. District Court for the Northern District of California
https://docs.justia.com/cases/federal/district-courts/california/candce/3%3A2026cv01996/465515/250
The U.S. District Court for the District of Minnesota Denies xAI's Request for a Preliminary Injunction Against the State Law Prohibiting "AI Undressing" Image Generation
Source: U.S. District Court for the District of Minnesota
https://www.courtlistener.com/docket/73678486/xai-llc-v-ellison/
The Seattle Times and Newsday Sue OpenAI and Microsoft for Copyright Infringement
Source: Public Reports
https://www.courtlistener.com/docket/74754553/the-seattle-times-company-v-openai-inc/
Sony Music Publishing, Warner Chappell, and Other Major Music Publishers File a New Copyright Lawsuit over Claude's Training Data
Source: U.S. District Court for the Northern District of California
https://dockets.justia.com/docket/california/candce/5%3A2026cv09217/477477
ChangXin Memory Technologies Sues the U.S. Department of Defense, Seeking Rescission of Its "Chinese Military Company" Designation
Source: U.S. District Court for the District of Columbia
http://dockets.justia.com/docket/district-of-columbia/dcdce/1%3A2026cv03025/296031
U.S. Senator Hawley Expands His Investigation into AI Surveillance Camera and License Plate Recognition Companies, Sending Letters to Motorola Solutions, Verkada, and Axon
Source: U.S. Senate
https://www.hawley.senate.gov/hawley-expands-investigation-into-surveillance-cameras-warns-flock-competitors/
U.S. Senator Blumenthal Sends a Letter Demanding Answers from Sam Altman over Reports That OpenAI's AI Agents Went Rogue to Conduct a Major Cyber Breach and Concealed Their Operations
Source: U.S. Senate
https://www.blumenthal.senate.gov/newsroom/press/release/blumenthal-demands-answers-from-sam-altman-after-new-reporting-reveals-how-ai-agents-went-rogue-to-conduct-major-cyber-breach-and-conceal-their-operations
U.S. Senator Sanders and Others Introduce Legislation to Ban Artificial Superintelligence and Temporarily Pause Advanced AI Development
Source: U.S. Senate
https://www.sanders.senate.gov/press-releases/news-sanders-casar-introduce-legislation-to-ban-artificial-superintelligence-and-temporarily-pause-advanced-ai-development/
Research Reveals That AI Agents Deployed by OpenAI "Hijacked" the German DSEWiki Website and Collaborated with One Another
Source: Public Reports

Netherlands：

The Dutch Data Protection Authority (AP) Announces That GDPR Sanction Decisions Will Henceforth Be Made Public
Source: Dutch Data Protection Authority (AP)
https://www.autoriteitpersoonsgegevens.nl/actueel/ap-maakt-avg-sancties-voortaan-verplicht-openbaar
The Netherlands' Verzamelwet gegevensbescherming (Comprehensive Data Protection Amendment Act) Enters into Force on September 1, 2026
Source: Netherlands Government Gazette (Staatsblad)
https://zoek.officielebekendmakingen.nl/stb-2026-154.html
Uber Drivers Launch a European Collective Action under Article 22 of the GDPR Concerning Automated Decision-Making Algorithms
Source: Public Reports
https://workerinfoexchange.nl/press-release-stichting-wie-international-launches-dynamic-pay-claim/
The Dutch Data Protection Authority (AP) Releases GDPR Compliance Templates for Small and Medium-Sized Enterprises
Source: Dutch Data Protection Authority (AP)
https://www.autoriteitpersoonsgegevens.nl/actueel/nieuw-voor-mkb-praktische-sjablonen-om-aan-de-privacyregels-te-voldoen

France：

The French Data Protection Authority (CNIL) Fines the Private Hospital of Loire EUR 500,000 for a Health Data Breach
Source: French Data Protection Authority (CNIL)
https://www.cnil.fr/en/sanction-fine-hopital-prive-loire
The CNIL Fines Extia EUR 300,000 for Deficiencies in the Handling of Data Subjects' Rights Requests
Source: French Data Protection Authority (CNIL)
https://www.cnil.fr/fr/sanction-non-respect-droits-personnes-extia

Spain：

The Spanish Data Protection Authority (AEPD) Fines GSMA Limited EUR 40,000 for Excessive Collection of Identity Documents during the 2023 Mobile World Congress
Source: Spanish Data Protection Authority (AEPD)
https://www.aepd.es/documento/ps-00037-2025.pdf
The AEPD Fines ACVIL Aparcamientos EUR 90,000 for Failing to Respond to Access and Restriction of Processing Requests
Source: Spanish Data Protection Authority (AEPD)
https://www.aepd.es/documento/ps-00159-2025.pdf
The AEPD Fines ALKORA EUR 200,000 over a Ransomware Incident Affecting 40,000 Individuals and an Inadequate Impact Assessment
Source: Spanish Data Protection Authority (AEPD)
https://www.aepd.es/documento/ps-00020-2025.pdf
The AEPD Fines 23andMe EUR 2.4 Million for Deficiencies in the Fulfillment of Security and Data Breach Notification Obligations
Source: Spanish Data Protection Authority (AEPD)
https://www.aepd.es/documento/ps-00140-2025.pdf
The AEPD Fines FLEXICAR EUR 680,000 for Insufficient Security Measures Following a Data Breach
Source: Spanish Data Protection Authority (AEPD)
https://www.aepd.es/documento/ps-00540-2025.pdf
The AEPD Publishes a Report on the Draft Law on Digital Recording of Working Time
Source: Spanish Data Protection Authority (AEPD)
https://www.aepd.es/documento/2026-0026.pdf

Ireland: The Data Protection Commission (DPC) Fines the Health Service Executive EUR 645,000 and Issues a Corrective Order over Unlawful Processing of Personal Data in Paper Records
Source: Data Protection Commission (DPC)
https://www.dataprotection.ie/en/news-media/latest-news/data-protection-commission-announces-final-decision-following-inquiry-health-service-executive-hse
Austria: The Data Protection Authority (DSB) Publishes a Working Aid for Obligated Entities under the Information Freedom Act (IFG)
Source: Austrian Data Protection Authority (DSB)
https://dsb.gv.at/aktuelles/neuer-arbeitsbehelf-der-dsb-fuer-informationspflichtige-stellen-nach-dem-ifg
Poland：

The Polish Ministry of Digital Affairs Reminds Critical and Important Entities to Complete Self-Registration in the KSC List by October 3, 2026
Source: Polish Ministry of Digital Affairs
https://www.gov.pl/web/cyfryzacja/miesiac-na-samorejestracje-w-wykazie-ksc-termin-mija-3-pazdziernika
The Polish Government Clarifies the Competent Authorities under the Amended National Cybersecurity System Act (KSC)
Source: Polish Ministry of Digital Affairs
https://www.gov.pl/web/cyfryzacja/nowelizacja-ustawy-o-krajowym-systemie-cyberbezpieczenstwa-ksc--organy-wlasciwe-do-spraw-cyberbezpieczenstwa
The Personal Data Protection Office (UODO) Publishes Its 2025 Annual Activity Report
Source: Personal Data Protection Office (UODO)
https://uodo.gov.pl/pl/138/4555
The Office of Competition and Consumer Protection (UOKiK) Fines Centrum Dotacji OZE PLN 300,000 for Telemarketing Without Consumers' Consent
Source: Office of Competition and Consumer Protection (UOKiK)
https://uokik.gov.pl/en/pulling-tricks-like-these-doesnt-pay-off-president-of-uokik-imposes-fines-for-telemarketing-without-consumers-consent

Romania: The National Supervisory Authority for Personal Data Processing (ANSPDCP) Fines GEROCOSSEN for GDPR Violations
Source: ANSPDCP
https://www.dataprotection.ro/index.jsp?page=Comunicat_Presa_28.08.2026&lang=ro
Finland: The Data Protection Ombudsman Opens an Investigation into Hidden-Camera Videos Posted by Social Media Content Creators
Source: Office of the Data Protection Ombudsman of Finland
https://tietosuoja.fi/-/tietosuojavaltuutettu-selvittaa-kotkamiehen-sosiaalisen-median-videoiden-laillisuutta
Latvia:

The Latvian Parliament Publishes Amendments to the Credit Information Bureau Law
Source: Latvian Parliament
http://www.likumi.lv/doc.php?id=370620&version_date=01.09.2026
The Data State Inspectorate (DVI) Clarifies That Services May Be Refused When an Individual Declines to Provide Specific Personal Data
Source: Data State Inspectorate (DVI)
https://www.dvi.gov.lv/lv/jaunums/dviskaidro-vai-drikst-atteikt-pakalpojumu-ja-cilveks-nevelas-sniegt-konkretus-personas-datus

Estonia:

The Estonian Ministry of Justice and Digital Affairs Advances the Approval of the Draft Electronic Communications Data Act
Source: Estonian Ministry of Justice and Digital Affairs
https://www.justdigi.ee/uudised/valitsus-kiitis-heaks-sideandmete-eelnou
The Estonian Ministry of Justice and Digital Affairs Advances the Entry into Force of New Information Security Standards
Source: Estonian Ministry of Justice and Digital Affairs
https://www.justdigi.ee/uudised/kehtima-hakkavad-uued-infoturbenouded-riik-sekkub-vahem-et-ettevotted-ja-asutused-saaksid
The Harju County Court Upholds the EUR 3 Million Fine Imposed by the Data Protection Inspectorate on Allium UPI (Apotheka)
Source: Harju County Court
https://www.aki.ee/uudised/allium-upi-le-maaratud-3-miljoni-euro-suurune-trahv-oli-kohtu-hinnangul-pohjendatud
The Estonian Data Protection Inspectorate (DPI) Issues a Statement on the Data Breach at Innovaatik OÜ
Source: Estonian Data Protection Inspectorate (DPI)
https://www.aki.ee/uudised/innovaatik-ou-andmeleke-kliinikud-ei-pea-aki-le-eraldi-rikkumisteadet-esitama

Cyprus: The Commissioner for Personal Data Protection Announces Compliance Audits on the Use of CCTV Systems in the Catering and Entertainment Sector
Source: Office of the Commissioner for Personal Data Protection of Cyprus
https://www.gov.cy/epitropoi/anakoinosi-tis-epitropou-prostasias-dedomenon-prosopikou-charaktira-anaforika-me-ti-dienergeia-elegchon-symmorfosis-se-epicheiriseis-tou-tomea-estiasis-kai-psychagogias-egkatastasi-kai-chris/
Norway: The Financial Supervisory Authority of Norway Announces That the Digital Operational Resilience Act (DORA) Replaces the ICT Regulation
Source: Finanstilsynet (Norwegian Financial Supervisory Authority)
https://www.finanstilsynet.no/nyhetsarkiv/nyheter/2026/regler-i-dora-erstatter-ikt-forskriften/
Liechtenstein: The Data Protection Authority of Liechtenstein Publishes Its 2025 Annual Activity Report
Source: Data Protection Authority of Liechtenstein
https://www.datenschutzstelle.li/aktuelles/taetigkeitsbericht-2025
Australia:

The Attorney-General's Department of Australia Solicits Public Comments on the Draft Privacy Amendment (Personal Data Protection) Bill 2026
Source: Attorney-General's Department of Australia
https://consultations.ag.gov.au/rights-and-protections/privacy-reform/
The Office of the Australian Information Commissioner (OAIC) Updates Privacy Guidance for Reporting Entities under the Anti-Money Laundering and Counter-Terrorism Financing Act, Explaining the Compliance Requirements for Newly Covered Reporting Entities Handling Identity Documents and Personal Information

Source: Office of the Australian Information Commissioner (OAIC)
https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/organisations/privacy-guidance-for-reporting-entities-under-the-anti-money-laundering-and-counter-terrorism-financing-act

South Korea:

The Personal Information Protection Commission (PIPC) Fines the National Center for the Rights of the Child KRW 885.2 Million for a Data Breach
Source: Personal Information Protection Commission (PIPC)
https://www.pipc.go.kr/np/cop/bbs/selectBoardArticle.do?bbsId=BS074&mCode=C020010000&nttId=12413
The PIPC Announces Enforcement Decisions Against Four Companies Including GS Retail for Data Breaches, with GS Retail Subject to a Surcharge of KRW 12.836 Billion and a Fine of KRW 3 Million
Source: Personal Information Protection Commission (PIPC)
https://www.pipc.go.kr/np/cop/bbs/selectBoardArticle.do?bbsId=BS074&mCode=C020010000&nttId=12425
The Korea Communications Commission (KCC) Plans to Impose Fines of up to 6% of Annual Revenue for Illegal Spam Messages
Source: Korea Communications Commission (KCC)
https://www.kmcc.go.kr/user.do?mode=view&page=A05030000&dc=K05030000&boardId=1113&cp=1&nop=10&boardSeq=69435

Brazil: The Ministry of Health of Brazil Publishes the Open Data Plan 2026-2028 (PDA-MS)
Source: Brazilian Ministry of Health
https://www.gov.br/saude/pt-br/assuntos/noticias-ms/2026/setembro/ministerio-da-saude-publica-plano-de-dados-abertos-para-o-periodo-2026-2028
Japan:

The Personal Information Protection Commission (PPC) Releases Its First-Quarter FY2026 Oversight and Enforcement Statistics and Data Breach Report Processing Information
Source: Personal Information Protection Commission (PPC)
https://www.ppc.go.jp/files/pdf/260902_shiryou-3-2.pdf
The PPC Publishes Its FY2025 First-Quarter Regulatory Activity and Data Breach Statistics Report
Source: Personal Information Protection Commission (PPC)
https://www.ppc.go.jp/personalinfo/activity

United Kingdom:

The Information Commissioner's Office (ICO) Updates Its Guidance on the "Public Task" Lawful Basis under the UK GDPR and Clarifies Conditions for AI Use
Source: Information Commissioner's Office (ICO)
https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/a-guide-to-lawful-basis/public-task/
Ofcom Fines the Operator of Pornographic Website Xgroovy.com GBP 730,000 (for Missing Age Checks and Failure to Respond to Information Requests) and Secures the Deployment of CSAM Hash Matching by a File-Sharing Platform
Source: Ofcom
https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/porn-site-deploys-age-checks-as-ofcom-fines-it-730000
The House of Lords Grand Committee Publishes the Third Consolidated List of Amendments to the Cyber Security and Resilience (Network and Information Systems) Bill
Source: UK Parliament
https://bills.parliament.uk/bills/4035
The National Cyber Security Centre (NCSC) Publishes a Blog Post on Managing the Cybersecurity Risks of Shadow AI
Source: National Cyber Security Centre (NCSC)
https://www.ncsc.gov.uk/blogs/the-hidden-risks-of-shadow-ai

Canada: The Office of the Privacy Commissioner (OPC) Applies to the Federal Court for an Order to Implement Its Recommendations under the Personal Information Protection and Electronic Documents Act (PIPEDA) Following Its De-Indexing Investigation into Google Search Results
Source: Office of the Privacy Commissioner of Canada (OPC)
https://www.priv.gc.ca/en/opc-news/news-and-announcements/2026/nr-c_260828/
New Zealand: The Office of the Privacy Commissioner (OPC) Publishes Guidance on Privacy Expectations for the Use of Smart Glasses
Source: Office of the Privacy Commissioner of New Zealand
https://www.privacy.org.nz/tuhono-connect/statements-media-releases/privacy-commissioner-sets-expectations-about-smart-glasses/
Singapore:

The Ministry of Digital Development and Information (MDDI) and the Infocomm Media Development Authority (IMDA) Publish the Consultation Outcomes on the Digital Infrastructure Bill
Source: Ministry of Digital Development and Information (MDDI)
https://www.mddi.gov.sg/newsroom/public-consultation-on-the-digital-infrastructure-bill/
The Digital Infrastructure Bill Sets Out Licensing Rules for Cloud Services and Data Centres
Source: Singapore Government Gazette
https://sso.agc.gov.sg/Bills-Supp/20-2026/Published/20260908?DocDate=20260908

India: The Indian Copyright Office Holds in Stephen Thaler's Registration Application That the DABUS Artificial Intelligence Cannot Serve as the Author of a Work, but Finds That the AI-Generated Work Meets the Originality Requirement of Indian Copyright Law and Is in Principle Eligible for Copyright Protection
Source: Indian Copyright Office
https://chatgptiseatingtheworld.com/wp-content/uploads/2026/08/India-Copyright-Office-Decision-in-9356-2022-CO-A-DABAS-as-Author-Copyright-Office-Final-Order-Dt-31-08-2026.pdf
Vietnam:

The Government of Vietnam Issues Decree No. 341/2026/ND-CP Regulating Civil Cryptography Activities
Source: Government of Vietnam
https://baochinhphu.vn/quy-dinh-moi-ve-hoat-dong-mat-ma-dan-su-102260902111231973.htm
The Government of Vietnam Issues a Decree on the Reception and Handling of Information Conflicts in Cyberspace
Source: Government of Vietnam
https://baochinhphu.vn/quy-dinh-viec-tiep-nhan-va-xu-ly-xung-dot-thong-tin-tren-khong-gian-mang-102260904170124195.htm

Malaysia: The Parliament of Malaysia Passes the Cyber Crimes Act 2026
Source: Parliament of Malaysia
https://www.parlimen.gov.my/bills-dewan-rakyat.html?uweb=dr&lang=en
Colombia: The Chamber of Representatives of Colombia Introduces a Bill Amending the Data Protection Law
Source: Chamber of Representatives of Colombia
https://www.camara.gov.co/wp-content/uploads/2026/09/proyectos-ley/documentos/proyecto-36348/P.L.E.282-2026SC-PROTECCION-DE-DATOS-PERSONALES.pdf

Note

本文由Gen AI翻译，仅供参考。

Translated by Gen AI service. For reference only.

本期编辑：吴小旭陈煜烺颜宇涵张膑月季开张丽