UK
In short: The Meta child safety settlement, filed in the Northern District of California on 26 August 2026, commits Meta to a two-hour default daily limit for teenagers, an overnight night access mode and hidden like counts on Instagram and Facebook. The agreement limits those obligations to the settling US states. Neither Ofcom nor the…
In short: Digital Networks Act copper switch-off provisions would oblige every EU Member State to mandate copper retirement by binding legal act, in all switch-off areas by 31 December 2035. The first lists of qualifying areas are due by 30 June 2029, which is the operative date. The UK has no equivalent statute and is…
In short: AI Office enforcement covers a company only where it built the AI system on its own general-purpose AI model, or where the system operates inside a platform designated under the Digital Services Act. Every other business remains subject to national regulation. The difference matters, because the AI Office can enter and seal premises…
In short: GPAI enforcement began on 2 August 2026. If you build a product on someone else’s AI model, the duties in Articles 53 to 55 of the EU AI Act apply to that supplier and not to you. They still matter, because they entitle you to information from your supplier, and because very substantial…
The Court of Justice in Betaal Garant (C-51/25) decided the credit transfer question and nothing else. Money remittance, defined more widely in regulation 2(1) of the PSRs 2017, is where a UK analysis now has to go.
In short: The critical third parties regime brought Amazon Web Services EMEA SARL, Google Cloud EMEA Limited, Microsoft Ireland Operations Limited and Oracle Corporation UK Limited under FCA, PRA and Bank of England oversight on 13 July 2026, under SI 2026/777 and Chapter 3C of FSMA 2000. The UK regime binds providers with rules and…
In short: The Google DMA fine of €890 million, imposed by the European Commission on 23 July 2026, is the first time the Commission has penalised Google under the Digital Markets Act: €460 million for self-preferencing its own results on Google Search under Article 6(5), and €430 million for restricting steering on Google Play under…
In short: The AliExpress DSA EU fine of €550 million, imposed on 20 July 2026, is the first penalty for breaching the systemic-risk duties in Articles 34 and 35 of the EU Digital Services Act. UK law applies to the same listings through Ofcom, the CMA and existing product safety enforcement, though none of those…
In short: DMA specification decisions adopted by the European Commission on 16 July 2026 tell Google exactly how to comply with two Digital Markets Act obligations: opening eleven defined Android features to rival AI assistants by 1 August 2027 at the latest, and sharing anonymised Google Search ranking, query, click and view data with competing…
In short: The EDPB AMLA guidelines will set out how AML information sharing partnerships work under GDPR once Article 75 of the EU AML Regulation takes effect on 10 July 2027. The EDPB and AMLA announced the joint drafting project on 1 July 2026, with a draft consultation due in the first half of 2027….
In short: the AI transparency code of practice is now the EU-wide route to demonstrating compliance with Articles 50(2), (4) and (5) of the EU AI Act. The European Commission concluded on 8 July 2026 that the code is adequate, and the AI Board agreed on 9 July 2026. Signing is not a safe harbour,…
In short: Web scraping for AI training is lawful under the GDPR only where a data controller has a lawful basis for it, and in practice that means the three-part legitimate interest test in Article 6(1)(f). On 8 July 2026 the European Data Protection Board adopted draft guidelines on web scraping for generative AI, out…