MAY 2026 ISSUE NO. 312

https://campaign-image.com/zohocampaigns/133052000002457092_zc_v53_artboard_1.png
   

APAC
  • The Reserve Bank of India consulted global regulators to assess the potential cybersecurity risks of an AI model.
  • China’s CAC announced interim measures regulating AI-powered humanized interactive services.
  • South Korea’s Communications Commission imposed fines on 373 location information service providers for regulatory violations.
  • Vietnam’s Ministry of Science and Technology issued circular on identity verification requirements for mobile subscribers.
  • Australia’s Communication and Media Authority fined a financial services company AUD 3.96 million for direct marketing violations.
  • South Korea’s PIPC released administrative notice on draft amendments to penalty surcharge criteria under data protection law.
   

EMEA
  • The European Data Protection Board adopted and launched a public consultation on a Data Protection Impact Assessment (DPIA) template.
  • UK’s ICO and Belgium’s DPA signed MoU to strengthen cross-border data protection cooperation.
  • CNIL, France released recommendations on the use of tracking pixels in emails to enhance privacy compliance.
  • UK’s Department of Science sent open letter urging business leaders to strengthen defences against AI driven cyber threats.
  • Italy’s Cybersecurity Agency published a resolution outlining compliance requirement under the NIS2 Directive.
  • The European Commission issued a statement on digital age verification app to improve children’s online safety.
  • Belgium’s Centre for Cybersecurity released requisites for essential entities to ensure NIS2 compliance before deadline.
  • The Netherlands Cyber Security Centre confirmed parliamentary approval of Cybersecurity Act and Critical Entities Resilience Act.
  • Latvia Data State Inspectorate published its operational strategy for 2026–2030, outlining priorities for data protection.
  • Poland’s amendments to the Cybersecurity Act implementing NIS2 Directive came into effect.
  • Kenya’s Office of Data Protection Commissioner published draft guidance notes on data transfers, transport sector, DPO and data protection policy.
   

Americas

  • U.S. House Committees announced joint effort to advance the GUARD Financial Data Act and SECURE Data Act.
  • Kentucky legislation regulating the use of Automatic Content Recognition (ACR) data signed into law by the Governor.
  • Iowa Attorney General amended lawsuit against a social media platform to add more privacy violations.
  • Alabama’s comprehensive consumer data privacy bill signed into law.
  • Colombia Ministry of ICT launched a consultation on a draft decree aimed at creating safe and healthy digital environments for children and adolescents.
  • A bill to amend the Personal Data Privacy Act introduced in Delaware.

   

Click here to read the complete newsletter with official links

   

Gurugram office: 1st Floor, AIHP Palms, 242 & 243, Udyog Vihar Phase-IV, Gurugram - 122015

Dubai office: Unit: 9, 9th Floor, Arabian Sky Business Centre, CitiBank Building, Sheikh Rashid Road, Dubai, UAE

Phone: +91-124-4309062 | Email: newsletter@Privacydesk.in 

Delhi (NCR) | Dubai 

   

Disclaimer: This update is the copyright of Reina Legal. The update is not intended to be a form of solicitation or advertising. The information contained herein is of a general nature and is not intended to address the circumstances of any particular individual or entity. Although we endeavor to provide accurate and timely information, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate thereafter. No person should act on such information without appropriate professional advice based on the circumstances of a particular situation. Unsubscribe