Digital Economy and Data Protection Newsletter（26.18）

Click above｜Follow us

Recently, in AI governance, the Ministry of Commerce and the Ministry of Science and Technology solicited public comments on proposed additions to the technology export catalogue, including multiple AI-related technologies; a Hubei court concluded the province's first copyright dispute involving an AI-generated short drama; and the appeal judgment was delivered in Shanghai's first AI-generated voice infringement case. In legislation and policy, the CPC Central Committee and the State Council issued the Opinions on Developing New Quality Productive Forces, while the People's Bank of China sought comments on new rules for the financial credit information database. In regulatory enforcement, the Ministry of Industry and Information Technology and local regulators continued to publish notices concerning apps infringing users' rights, and public security cyber authorities advanced the Clean Cyberspace campaign. Overseas, the European Commission updated its explanation of the AI Act enforcement framework and consulted on a draft implementing regulation governing AI Act enforcement procedures; the U.S. Senate passed the Healthcare Cybersecurity and Resiliency Act; a settlement was reached in the Google Assistant privacy class action; the Texas Attorney General settled with Temu over data protection and product safety; and the FTC launched investigations involving OpenAI and Anthropic, among other developments.

HOTSPOT

The Ministry of Commerce and the Ministry of Science and Technology Seek Public Comments on the Catalogue of Technologies Prohibited or Restricted from Export by China and Introduce Interim Registration Requirements for Related Technology Exports

On October 16, 2026, the Ministry of Commerce and the Ministry of Science and Technology issued Announcement No. 48 of 2026, inviting public comments on revisions to the Catalogue of Technologies Prohibited or Restricted from Export by China (the “Catalogue”) and simultaneously introducing pre-export registration requirements for the relevant technologies.

The proposed revision would add 40 technologies across three sectors: artificial intelligence, biomedicine and photovoltaics. Of these, 23 AI-related technologies cover large models, AI agents, computing clusters and information processing, while expressly excluding technologies that have entered the public domain through open-source release, academic publication or similar means. Five biomedical technologies cover cell and gene therapy, small nucleic acid drugs and pathogenic microorganisms; facilitation measures such as automatic licensing would apply to certain outbound licensing arrangements that do not transfer ownership. Twelve photovoltaic technologies cover polysilicon, wafer and cell manufacturing, and the regulated scope also encompasses critical and core equipment embodying the relevant technologies.

These revisions to the Catalogue constitute a significant adjustment to China's technology export control regime by the Ministry of Commerce and the Ministry of Science and Technology under the Foreign Trade Law of the People's Republic of China and the Regulations of the People's Republic of China on the Administration of Technology Import and Export. They mark a move towards more granular controls over technology exports in competitive sectors such as AI, biomedicine and photovoltaics. The simultaneous introduction of pre-export registration means that, from the announcement's issuance until the revised Catalogue formally takes effect, enterprises exporting these technologies must complete registration procedures, reflecting regulators' particular concern about risks of advanced technology transfers abroad.

Source: Ministry of Commerce

https://www.mofcom.gov.cn/zwgk/zcfb/art/2026/art_0a31a3c9ac404f7a9b0e917ce3412997.html

The European Commission Updates Its AI Act Enforcement Framework Explanation, Clarifying Enforcement Powers and Phased Application

On October 6, 2026, the European Commission updated its webpage explaining the enforcement framework for the Artificial Intelligence Act (AI Act), outlining the division of responsibilities among the European AI Office (AI Office), the European Data Protection Supervisor (EDPS), and regulators designated by Member States. The AI Office oversees general-purpose AI (GPAI) models and certain AI systems and has investigative and sanctioning powers. The EDPS supervises compliance by AI systems used by EU institutions, while national regulators enforce rules applicable to other AI systems. The explanation also reiterates the AI Act's phased application schedule.

Source: European Commission

https://digital-strategy.ec.europa.eu/en/policies/enforcement-ai-act

NEWSLETTER

（Click on the source or copy the corresponding link to view the details）

LEGISLATION

The Ministry of Commerce and the Ministry of Science and Technology Seek Public Comments on the Catalogue of Technologies Prohibited or Restricted from Export by China and Introduce Interim Registration Requirements for Related Technology Exports
Source: Ministry of Commerce
https://www.mofcom.gov.cn/zwgk/zcfb/art/2026/art_0a31a3c9ac404f7a9b0e917ce3412997.html
The People's Bank of China Seeks Public Comments on the Measures for the Administration of the Financial Credit Information Basic Database (Draft for Comments)
Source: People's Bank of China
https://www.pbc.gov.cn/tiaofasi/144941/144979/3941920/2026093015154991467/index.html
The CPC Central Committee and the State Council Issue the Opinions on Developing New Quality Productive Forces, Addressing Data Property Rights, “AI Plus” and Cross-Border Data Flows
Source: National Data Administration
https://www.nda.gov.cn/sjj/swdt/xwfb/1009/20261009191908259329235_pc.html
The China National Intellectual Property Administration and the General Administration of Customs Issue the Opinions on Strengthening Coordinated Intellectual Property Protection (Guo Zhi Fa Bao Zi [2026] No. 30)
Source: China National Intellectual Property Administration
https://www.cnipa.gov.cn/art/2026/10/14/art_2432_208569.html
The Center for Food and Drug Inspection of the National Medical Products Administration Seeks Public Comments on the Key Points for Inspection of Artificial Intelligence Medical Devices (Draft for Comments)
Source: Center for Food and Drug Inspection of the National Medical Products Administration
https://www.cfdi.org.cn/cfdi/resource/news/16898.html
The Securities Association of China Issues Securities Business Model Practice No. 7—Risk Data Management by Securities Companies, Requiring Cross-Border Assessments for Data Transfers and Impact Assessments for Personal Information Transfers Abroad
Source: Securities Association of China
https://www.sac.net.cn/tzg/202610/t20261013_82455.html

INDUSTRY TRENDS

The Cyberspace Administration of China Launches the “Clear and Bright: Rectifying False Personas in Short Videos” Special Campaign
Source: Cyberspace Administration of China
The Cyberspace Administration of China, Public Security Authorities and Other Agencies Release Enforcement Updates on Online Rumors and Report Progress in Special AI Rectification Efforts
Source: Cyberspace Administration of China
https://www.cac.gov.cn/2026-10/09/c_1793297648393376.htm
The Ministry of Industry and Information Technology Issues a Notice on Apps (SDKs) Infringing Users' Rights, Covering 17 Apps and SDKs
Source: Ministry of Industry and Information Technology
Public Security Cybersecurity Authorities Continue the “Clean Cyberspace 2026” Campaign, Targeting Online Rumors and Cyberbullying Affecting Businesses
Source: Cybersecurity Bureau of the Ministry of Public Security
The National Administration of State Secrets Protection's “Secrecy Awareness” Platform Publishes Two Warning Cases Involving Infringements of Citizens' Personal Information
Source: National Administration of State Secrets Protection (Secrecy Awareness)
The Jiang'an District People's Court of Wuhan, Hubei Province, Concludes the Province's First AI Short-Drama Copyright Infringement Case, Centered on Whether Broadcasting a Renamed AI Short Drama Infringes Copyright
Source: People's Court Daily
Shanghai's First AI-Generated Voice Infringement Case Is Decided on Appeal, with RMB 50,000 in Damages Awarded for Using Another Person's Voice as Training Material Without Consent
Source: Shanghai High People's Court
The Beijing Communications Administration Issues Its Tenth 2026 Notice on Non-Compliant Mobile Internet Applications, Naming Two Apps for Infringing Users' Rights Without Adequate Rectification and Ordering Two Others Removed from All App Stores
Source: Beijing Communications Administration
https://bjca.miit.gov.cn/zwgk/tzgg/art/2026/art_e66027d348ec47828d76ff52f753e810.html
Beijing Economic-Technological Development Area Issues Implementation Opinions on the “Two Zones” Negative List for Cross-Border Data Transfers, Replicating the Yizhuang Cluster's Practices and Establishing Filing-Entity Responsibilities and Periodic Reporting
Source: Administrative Committee of Beijing Economic-Technological Development Area
https://kfqgw.beijing.gov.cn/zwgkkfq/2024zcwj/202610/t20261012_4898013.html
The Shanghai Office of the National Financial Regulatory Administration Discloses an RMB 600,000 Fine Against Crédit Agricole Corporate and Investment Bank (China) Limited for Inadequate Production-Environment Security Controls and Data Security Controls (Shanghai Financial Penalty Decision [2026] No. 163)
Source: Shanghai Office of the National Financial Regulatory Administration
https://www.nfra.gov.cn/cn/view/pages/ItemDetail.html?docId=1274060&generaltype=0&itemId=4293
The Shanghai Cyberspace Administration Issues the Notice on Problems in Personal Information Collection and Use by Local Apps (Sixth Batch of 2026—Special SDK Review), Naming Three SDKs for Discrepancies Between Stated and Actual Collection Practices, Collection Despite Express User Objections, Failure to Offer Opt-Outs from Personalized Recommendations, Excessive Collection and Use, and Complaint Response Periods Exceeding Statutory Limits
Source: Shanghai Municipal Cyberspace Administration
The Shanghai Cyberspace Administration and Shanghai Data Bureau Issue the Notice on Several Measures of Shanghai to Promote High-Level Opening Up and Facilitate Cross-Border Data Flows
Source: Shanghai Municipal Cyberspace Administration and Shanghai Municipal Data Bureau
The Jiangsu Communications Administration Reports 16 Apps and Mini Programs Infringing Users' Rights in Its Seventh Batch of 2026
Source: Jiangsu Communications Administration
https://jsca.miit.gov.cn/gzcy/gggs/art/2026/art_d06c0b69ad0249e1a7bff9d73dd05a62.html
Wenzhou, Zhejiang Province, Issues the Guidelines for the Protection of Trade Secrets in Artificial Intelligence Training Data (2026 Edition)
Source: Wenzhou Municipal Administration for Market Regulation
https://wzmsa.wenzhou.gov.cn/col/col1229208892/art/2026/art_320dd54ec74749d38cf7733aadd9900c.html
The Hunan Cyberspace Administration Summons Four Large-Model Operators for Regulatory Talks
Source: Hunan Provincial Cyberspace Administration
The Xi'an Cyberspace Administration Reports Five Typical Cybersecurity Violations, Including Tampering with a Decommissioned Website Whose Filing Was Not Canceled, Failure to Conduct Security Assessments for Generative AI Services, and Missing API Identity Verification Creating Risks of Sensitive Personal Information Leaks
Source: Xi'an Municipal Cyberspace Administration
Shenzhen Cyberspace Authorities Report Recent Personal Information Protection Enforcement Cases
Source: Shenzhen News (report)
https://www.sznews.com/news/content/2026-10/15/content_32192568.htm
Gansu Public Security Authorities Publish Ten Typical Administrative Cybersecurity Enforcement Cases under the “Cybersecurity Protection 2026” Campaign, Including Mandatory Facial Recognition for Entry and an Employee's Export of 12,000 Personal Information Records, with Dual Investigations of the Incidents and Responsible Parties
Source: Lanzhou Municipal Public Security Bureau
https://gaj.lanzhou.gov.cn/art/2026/10/9/art_3983_1743320.html
The Group Standard Guidelines for Security Classification of Generative Artificial Intelligence Services in Telecommunications and the Internet Officially Takes Effect on October 8
Source: Industrial Control Network (reprint)
https://wlw.gkzhan.com/news/195590.html

OVERSEAS

European Union:

The European Data Protection Board (EDPB) Publishes a Statement on Data Protection Challenges Posed by Smart Glasses
Source: European Data Protection Board (EDPB)
https://www.edpb.europa.eu/news/edpb-publishes-statement-on-the-data-protection-challenges-of-smart-glasses_en
The European Commission Updates Its AI Act Enforcement Framework Explanation, Clarifying Enforcement Powers and Phased Application
Source: European Commission
https://digital-strategy.ec.europa.eu/en/policies/enforcement-ai-act
The European Commission Invites Feedback on the Proposed EU KIDS Act
Source: European Commission
https://digital-strategy.ec.europa.eu/en/news/commission-seeks-feedback-eu-kids-act
The European Commission Sends Bulgaria an Additional Letter of Formal Notice Under the Digital Services Act
Source: European Commission
https://digital-strategy.ec.europa.eu/en/news/commission-asks-bulgaria-comply-digital-services-act-and-empower-national-authorities-enforce-it
The European Commission Consults on a Draft Implementing Regulation on AI Act Enforcement Procedures
Source: European Commission
https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/19292-AI-Act-Implementing-Act-Articles-75c-75d_en
The European Commission Issues an Implementing Decision on Harmonised Standards for High-Risk AI Systems
Source: Official Journal of the European Union (EUR-Lex)
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ%3AL_202602274

United States:

The Artificial Intelligence Governance and Emerging Threats Act Is Formally Introduced in the U.S. House of Representatives
Source: Office of U.S. Representative Tom Barrett
https://barrett.house.gov/media/press-releases/barrett-introduces-legislation-address-growing-threats-artificial-intelligence
The U.S. Senate Passes the Healthcare Cybersecurity and Resiliency Act
Source: U.S. Congress
https://www.congress.gov/bill/119th-congress/senate-bill/3315
U.S. Senators Introduce the AI Agent Accountability Act
Source: Office of U.S. Senator Josh Hawley
https://www.hawley.senate.gov/senators-hawley-murphy-announce-bipartisan-ai-agent-accountability-act/
U.S. Senator Jeff Merkley Reintroduces the Car Privacy Rights Act
Source: Office of U.S. Senator Jeff Merkley
https://www.merkley.senate.gov/wp-content/uploads/Car-Privacy-Rights-Act-119th.pdf
The Texas Attorney General Reaches a USD 3 Million Settlement with Temu, Requiring Stronger Consumer Personal Data Protection, Restrictions on Access by China-Based Entities and Enhanced Product Safety Controls
Source: Office of the Texas Attorney General
https://www.texasattorneygeneral.gov/sites/default/files/images/press/Temu%20AFJ.pdf
Judge Freeman of the U.S. District Court for the Northern District of California Grants Final Approval of the Google Assistant Privacy Class Action Settlement, Under Which Google Will Establish a USD 68 Million Common Fund
Source: Big News Network (report)
https://www.bignewsnetwork.com/news/279372673/judge-approves-68-million-google-assistant-privacy-settlement
The U.S. Department of Justice Charges an Executive Allegedly Involved in Illegally Exporting More Than USD 300 Million in Advanced GPU Servers to China
Source: U.S. Department of Justice
https://www.justice.gov/opa/pr/california-man-arrested-smuggling-more-300-million-export-controlled-computer-servers-china
The U.S. Court of Appeals for the Eleventh Circuit Vacates a Preliminary Injunction Against Florida's Social Media Age Restriction Law
Source: U.S. Court of Appeals for the Eleventh Circuit
https://media.ca11.uscourts.gov/opinions/pub/files/202511881.pdf
The White House Superintelligence Task Force Calls on AI Companies to Immediately Disclose Model Safety Incidents and Remediate Harm to Affected Parties
Source: CCTV News (report)

https://content-static.cctvnews.cctv.com/snow-book/index.html?item_id=11511885838442244371&channelId=1119&toc_style_id=feeds_default
The FTC Issues Civil Subpoenas to OpenAI and Anthropic to Investigate Potential Consumer Harm from AI Systems
Source: Reuters (report)
https://www.reuters.com/business/us-ftc-subpoenas-openai-anthropic-over-consumer-harms-axios-reports-2026-10-15/
California Signs Four AI-Related Employment Bills, Including AB 1883, Seeking to Prohibit the Use of AI Monitoring Tools to Infer Employee Emotional States or Collect Neural Data
Source: Office of the Governor of California
https://www.gov.ca.gov/2026/09/30/californias-nation-leading-ai-framework-just-got-stronger-governor-newsom-signs-more-first-in-the-nation-worker-protections-and-more/
The Florida Attorney General Sues TP-Link Over Allegedly Deceptive Privacy and Security Practices
Source: Office of the Florida Attorney General
https://www.myfloridalegal.com/newsrelease/attorney-general-james-uthmeier-files-lawsuit-against-tp-link-systems
The Iowa Attorney General Sues TP-Link for Alleged Violations of the Iowa Consumer Fraud Act
Source: Office of the Iowa Attorney General
https://www.iowaattorneygeneral.gov/newsroom/attorney-general-brenna-bird-sues-tp-link-systems-for-violating-iowa-consumer-fraud-act-and-allowing
Attorneys General from Eight U.S. States Separately Sue OpenAI, Alleging Unlawful ChatGPT Safety Claims and Failures in Protecting Minors
Source: Offices of the Iowa and Montana Attorneys General
https://content.govdelivery.com/attachments/MTAG/2026/10/14/file_attachments/3817137/001%20OpenAI%20Complaint.pdf
Forty U.S. State and Territorial Attorneys General Intervene in Character.AI's Bankruptcy Proceedings to Protect Users' Sensitive Data
Source: Office of the New York Attorney General and California Department of Justice
https://ag.ny.gov/press-release/2026/attorney-general-james-urges-court-protect-children-and-consumers-characterai

United Kingdom:

The Information Commissioner's Office (ICO) Publishes a Generative AI Foundation Model Supervision Report, Announces Data Protection Improvements Made or Pledged by Ten Developers—Amazon, Anthropic, Apple, Cohere, DeepSeek, Google, Meta, Microsoft, OpenAI and Stability AI—and Launches a Six-Week Consultation on Data Protection Risks Posed by Agentic AI
Source: UK Information Commissioner's Office (ICO)
https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/10/ico-secures-changes-from-leading-ai-developers-as-scrutiny-extends-to-ai-agents/
The UK Government Announces a Package of Measures to Address Risks from Increasingly Powerful AI and an Expansion of the Frontier AI Cyber Defence Pilot
Source: UK Government
https://www.gov.uk/government/news/britain-steps-up-national-defences-against-growing-ai-risks
The UK Government Updates Its Guidance on Commencement of the Data (Use and Access) Act 2025, Adding Details of Phase Four Commencement Regulations and Implementation Dates
Source: UK Government
https://www.gov.uk/guidance/data-use-and-access-act-2025-plans-for-commencement

South Korea: The Personal Information Protection Commission (PIPC) Begins an On-Site Inspection of Geely-Owned Zeekr on October 2, Examining Compliance in User Data Collection, Third-Party Sharing and Overseas Transfers
Source: Yonhap News Agency
https://en.yna.co.kr/view/AEN20261013011200315
Japan:

The Personal Information Protection Commission (PPC) Publishes Its Second-Round “Basic Approach” to Amending the Act on the Protection of Personal Information
Source: Personal Information Protection Commission of Japan (PPC)
https://www.ppc.go.jp/personalinfo/legal/r8kaiseihogohou/
The PPC Publishes the Third Set of Institutional Design Proposals for Rules Supporting Amendments to the Act on the Protection of Personal Information
Source: Personal Information Protection Commission of Japan (PPC)
https://www.ppc.go.jp/files/pdf/261014_kihonntekinakanngaekatanitsuite_3.pdf

Germany: The Federal Office for Information Security (BSI) Publishes Security Guidance for Networked Operational Technology (OT) Systems
Source: German Federal Office for Information Security (BSI)
https://www.allianz-fuer-cybersicherheit.de/SharedDocs/Downloads/Webs/ACS/DE/BSI-CS/BSI-CS_154.pdf?__blob=publicationFile&v=4
France: The Commission Nationale de l'Informatique et des Libertés (CNIL) Announces the Closure of Injunction Proceedings Against Google
Source: French Data Protection Authority (CNIL)
https://www.cnil.fr/en/closure-injunction-google
Italy:

The Italian Digital Agency's Computer Emergency Response Team (CERT-AGID) Publishes a Report on Prompt Injection and the Security of Agentic AI Systems
Source: Agency for Digital Italy (AgID)
https://www.agid.gov.it/it/notizie/nuovo-paper-del-cert-agid-sugli-explosive-prompts-e-la-sicurezza-dei-sistemi-agentici
The Italian Data Protection Authority (Garante) Fines IQVIA EUR 7 Million for Unlawful Processing of Personal Data
Source: Italian Data Protection Authority (Garante)
https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/10302141
The Italian Data Protection Authority Fines Wind Tre EUR 16.7 Million for Unlawful Telemarketing and Data Protection Violations
Source: European Data Protection Board (EDPB)
https://www.edpb.europa.eu/news/italian-dpa-fines-wind-tre-eur-16-700-000-for-unlawful-telemarketing-and-data-protection_en

Spain: The Catalan Data Protection Authority (APDCAT) Launches an Application for Assessing the Impact of AI on Fundamental Rights
Source: Catalan Data Protection Authority (APDCAT)
https://www.apdcat.cat/ca/actualitat/noticies/2026/L-APDCAT-estrena-la-primera-aplicacio-basada-en-el-model-FRIA-catala-per-guiar-les-organitzacions-a-avaluar-i-mitigar-els-impactes-dels-seus-sistemes-d-IA
Ireland: The Department of Justice, Home Affairs and Migration Publishes the National Cyber Security Strategy 2030
Source: Government of Ireland
https://www.gov.ie/en/department-of-justice-home-affairs-and-migration/press-releases/minister-jim-ocallaghan-launches-the-national-cyber-security-strategy-2030/
Netherlands:

The National Cyber Security Centre (NCSC) and Other Supervisory Bodies Sign a Cooperation Agreement Under the Cybersecurity Act
Source: National Cyber Security Centre of the Netherlands (NCSC)
https://www.ncsc.nl/nieuws/ncsc-en-toezichthouders-maken-afspraken-over-samenwerking-bij-cyberbeveiligingswet
The Dutch Data Protection Authority (AP) Announces Further Strengthening of AI Supervision and Establishment of a Dedicated Coordination Body for AI and Algorithm Oversight
Source: Dutch Data Protection Authority (AP)
https://www.autoriteitpersoonsgegevens.nl/actueel/ap-zet-volgende-stap-in-toezicht-op-ai
The Dutch Data Protection Authority Fines Uber Approximately EUR 825 Million for Unlawful Automated Decision-Making and Insufficient Information on Profiling
Source: European Data Protection Board (EDPB)
https://www.edpb.europa.eu/news/dutch-dpa-fines-uber-eur-824-990-000-for-unlawful-automated-decision-making-and-insufficient_en

Poland:

The Personal Data Protection Office (UODO) Clarifies the Circumstances Requiring Notification of Personal Data Breaches
Source: Personal Data Protection Office of Poland (UODO)
https://uodo.gov.pl/pl/138/4596
The Polish Council of Ministers Approves a Draft Law on Supervision and Enforcement of the EU Data Act
Source: Government of Poland
https://www.gov.pl/web/cyfryzacja/wieksza-kontrola-nad-danymi-rzad-przyjal-projekt-ustawy
The Polish Financial Supervision Authority (KNF) Recommends Security Reviews of SaaS Services and ICT Providers
Source: Polish Financial Supervision Authority (KNF)

https://www.knf.gov.pl/aktualnosci?articleId=99994&p_id=18&page=1&perPage=10

Sweden:

The National Cyber Security Centre (NCSC) Announces the Entry into Force of Cybersecurity Measures Regulations
Source: Swedish National Cyber Security Centre (NCSC)
https://www.ncsc.se/sv/aktuellt/foreskrifter-om-sakerhetsatgarder-trader-i-kraft/
The Swedish Post and Telecom Authority (PTS) Adopts Regulations on Significant Incidents in the Telecommunications Sector
Source: Swedish Post and Telecom Authority (PTS)
https://pts.se/nyheter-och-pressmeddelanden/nya-regler-for-vad-som-ar-betydande-incidenter-inom-telekomomradet/
The Swedish Authority for Privacy Protection (IMY) Launches an Audit into Drug Testing of Job Applicants by ICA Group and Other Companies
Source: Swedish Authority for Privacy Protection (IMY)
https://www.imy.se/nyheter/imy-granskar-icas-anvandning-av-drogtester-av-arbetssokande/

Denmark: The Agency for Digital Government (Digitaliseringsstyrelsen) Publishes an Online Guide to EU Digital Legislation
Source: Danish Agency for Digital Government
https://digst.dk/nyheder/nyhedsarkiv/2026/oktober/bliv-guidet-gennem-eu-lovgivningen/
Finland: The Office of the Data Protection Ombudsman Fines Mindemo Oy EUR 33,000 Over Data Protection Deficiencies in Website Cookie Tracking
Source: Office of the Data Protection Ombudsman of Finland
https://tietosuoja.fi/-/mindemo-oy-lle-seuraamusmaksu-verkkosivuevasteiden-tietosuojapuutteista
Estonia: The Estonian Government Approves a Draft Act Implementing the EU Digital Identity Wallet
Source: Estonian Ministry of Justice and Digital Affairs
https://www.justdigi.ee/uudised/valitsus-kiitis-heaks-seaduseelnou-euroopa-liidu-digiidentiteedikukru-kasutuselevotuks
Bulgaria: The Commission for Personal Data Protection (CPDP) Adopts Rules on GDPR Codes of Conduct and Certification
Source: Bulgarian Commission for Personal Data Protection (CPDP)
https://cpdp.bg/комисията-за-защита-на-личните-данни-53/
Latvia: The Data State Inspectorate (DVI) Publishes Guidance on Photographing, Sending and Deleting Patient Data
Source: Latvian Data State Inspectorate (DVI)
https://www.dvi.gov.lv/lv/jaunums/dviskaidro-pacienta-dati-fotografesana-nosutisana-un-dzesana
Croatia: The Croatian Personal Data Protection Agency (AZOP) Fines a Gambling Operator EUR 2.59 Million for Unlawful Processing of Biometric Data
Source: Croatian Personal Data Protection Agency (AZOP)
https://azop.hr/upravna-novcana-kazna-priredivacu-igara-na-srecu-u-iznosu-od-259-milijuna-eura/
Türkiye:

The Turkish Government Promulgates the Regulation on the Provision of Child-Specific Differentiated Services and Age Verification by Social Network Providers
Source: Official Gazette of the Republic of Türkiye
https://www.resmigazete.gov.tr/eskiler/2026/10/20261010-15.pdf
The Personal Data Protection Authority (KVKK) Issues a Public Announcement on Procedures for Communicating Responses to Data Subject Requests
Source: Turkish Personal Data Protection Authority (KVKK)
https://www.kvkk.gov.tr/Icerik/9024/ilgili-kisilerin-basvurularina-verilecek-cevabin-bildirim-usulune-iliskin-kamuoyu-duyurusu
The Turkish Personal Data Protection Authority (KVKK) Issues a Principle Decision on Monitoring Employees' Communications Channels
Source: Turkish Personal Data Protection Authority (KVKK)
https://www.kvkk.gov.tr/Icerik/9044/isverenler-tarafindan-calisanlara-tahsis-edilen-kurumsal-e-posta-hesaplari-basta-olmak-uzere-isin-yurutulmesi-amaciyla-kullanilan-iletisim-kanallarinin-denetlenmesinde-uyulmasi-gereken-usul-ve-esaslar-hakkinda-kurulun-16-09-2026-tarihli-ve-2026-2035-sayili-ilke-karari-hk

Norway: The Norwegian Data Protection Authority (Datatilsynet) Fines Microsoft-Owned Xandr NOK 92 Million for Unlawfully Sharing Sensitive Personal Data
Source: Norwegian Data Protection Authority
https://www.datatilsynet.no/en/news/news-2026/microsoft-company-fined-nok-92-million-for-unlawfully-sharing-personal-data/
Australia: The Office of the Australian Information Commissioner (OAIC) Opens an Investigation into Shenzhen Qingcheng Future Technology
Source: Office of the Australian Information Commissioner (OAIC)
https://www.oaic.gov.au/news/media-centre/oaic-opens-investigation-into-maker-of-heycyan-smart-glasses-phone-app
Canada: The Office of the Privacy Commissioner of Canada (OPC) Publishes Updated Guidance on Secure Handling of Voice Data in Customer Call Recordings
Source: Office of the Privacy Commissioner of Canada (OPC)
https://www.priv.gc.ca/en/opc-news/news-and-announcements/2026/nr-c_261008/
New Zealand: The Office of the Privacy Commissioner (OPC) Publishes a Case Involving a Law Firm's Failure to Identify and Notify a Personal Information Breach Promptly
Source: Office of the Privacy Commissioner of New Zealand (OPC)
https://www.privacy.org.nz/resources-and-learning/decision-notes/pbn4406-2026-nzprivcmr-2/
Singapore: The Monetary Authority of Singapore (MAS) Issues the Guidelines on Artificial Intelligence Risk Management for Financial Institutions
Source: Monetary Authority of Singapore (MAS)
https://www.mas.gov.sg/news/media-releases/2026/mas-sets-out-supervisory-expectations-on-responsible-ai-adoption-by-financial-institutions
Malaysia: The Personal Data Protection Department (PDP) Launches a Public Consultation on an Artificial Intelligence and Personal Data Protection Framework
Source: Personal Data Protection Department of Malaysia
https://www.pdp.gov.my/ppdpv1/en/public-consultation-paper-no-1-2026-personal-data-protection-framework/
India: The Digital Personal Data Protection (Removal of Difficulties) Order, 2026 Is Issued
Source: India Briefing (report)
https://www.india-briefing.com/news/dpdp-removal-of-difficulties-order-2026-consent-data-audit-47274.html/
Brazil: The National Data Protection Authority (ANPD) Considers Draft Rules on Digital Child Protection and Amendments to Administrative Penalty Criteria
Source: Brazilian National Data Protection Authority (ANPD)
https://www.gov.br/anpd/pt-br/assuntos/deliberacoes-do-conselho-diretor/circuito-deliberativo
Saudi Arabia: The Saudi Data and Artificial Intelligence Authority (SDAIA) Consults on Amendments to the Implementing Regulation of the Personal Data Protection Law
Source: Saudi Government Public Consultation Platform
https://istitlaa.scbc.gov.sa/en/Transportation/NDMO/IRofPDPLAmendments2/Pages/default.aspx

Note

本文由Gen AI翻译，仅供参考。

Translated by Gen AI service. For reference only.

本期编辑：吴小旭陈煜烺陈曦宇张膑月张丽