AI regulatory monitoring across global jurisdictions. Comment deadlines and compliance obligations flagged.
The OAIC has published its Notifiable Data Breaches (NDB) statistics for 2025, revealing that data breach notifications reached an all-time high since the scheme began in 2018. This is a statistical report reflecting increased reporting volume under the existing NDB scheme, not a change to the law or new obligations.
The Australian Information Commissioner has published updated guidance for APP entities considering the use of facial recognition technology (FRT) in high-volume, publicly accessible retail spaces. The update revises the Commissioner's existing guidance on how Australian Privacy Principles apply to FRT deployments in physical retail environments.
The Australian Privacy Commissioner has completed preliminary inquiries into the 2025 Qantas Airways data breach and published a report of its findings. This marks the conclusion of the initial investigative phase by the OAIC into the incident.
The FDA is updating its Statement of Organization, Functions, and Delegations of Authority to centralize and enhance key agency functions. The changes aim to reduce redundancies, improve efficiency, and better align internal operations. No specific new regulatory obligations on external parties are described.
The Administration for Native Americans (ANA) has issued final interpretive rules, general policy statements, and procedural rules governing its FY 2026 grant programs: EAGLE (Economic Advancement Grants for Local Empowerment), the AI3 Action Institute (Artificial Intelligence for American Indians), and the National Center for Native Training and Technical Assistance (NCNTTA).
Ontario and the federal government are jointly investing $7.2 million through the Canada-Ontario Workforce Tariff Response to fund skills upgrading and career transition support for over 500 workers in northern Ontario, aimed at helping employers in critical industries maintain a skilled workforce amid global economic uncertainty.
The FCC has adopted a Second Report and Order creating a new licensing regime for owners and operators of submarine line terminal equipment (SLTE). It grants a blanket license to qualifying current and future SLTE owners/operators not previously licensed, imposes routine operating conditions and reporting requirements, adds national security-related conditions and certification requirements, and creates a fast-track pathway for submarine cable applications meeting ten national security standards to avoid referral to Executive Branch agencies.
The Government of Canada, through ISED, has launched a public consultation on AI transparency. Public feedback gathered through the consultation will be used to shape future policy steps aimed at advancing safe, responsible, and reliable AI in Canada.
The EDPB has announced a stakeholder event focused on forthcoming guidelines addressing the interplay between data protection and competition law. No further details about the guidelines' content or the event date are provided beyond the save-the-date notice.
A Federal Register document titled "Securing America's Defense Supply Chains and Ensuring Domestic Acquisition of Critical Materials" was published on July 23, 2026. No content is available beyond the title, so the specific regulatory changes, obligations, or mechanisms introduced cannot be determined from this item alone.
The Government of Canada is investing over $1.5 million to support programs aimed at removing employment barriers for youth and persons with disabilities. The announcement focuses on promoting workforce inclusion for underrepresented groups but does not appear to impose new regulatory obligations on employers.
EarthFresh Farms Inc., a Burlington-based produce supplier, was convicted following a workplace injury and fined $200,000 by Ontario's Ministry of Labour, Immigration, Training and Skills Development (MLITSD). The conviction signals active enforcement of occupational health and safety obligations under Ontario law.
St. Joseph's Healthcare Hamilton has been convicted and fined $65,000 under Ontario workplace health and safety law following a workplace injury at its Hamilton facility. This is an enforcement outcome published by the Ministry of Labour, Immigration, Training and Skills Development (MLITSD).
The SEC is proposing Regulation E-Delivery, which would allow covered entities (e.g., broker-dealers, investment advisers, registered investment companies) to deliver required disclosures and other covered information electronically to recipients by default — without first obtaining affirmative consent. The proposal also includes rescinding the existing rule on alternative shareholder report transmission methods and amending rules on proxy and tender offer material dissemination.
The U.S. Energy Information Administration (EIA) has submitted a Paperwork Reduction Act request to extend its voluntary EIA-860S: State Level Generator Air Permit Inventory Report (OMB Control No. 1905-0215) for three years with changes. The collection supports the accuracy and completeness of the EIA-860 power generator sampling frame, particularly for backup generators.
The U.S. Trade Representative (USTR) has determined that certain Brazilian trade practices are actionable under Section 301 of the Trade Act of 1974 and is imposing a 25% tariff on all imports from Brazil, with certain exemptions. The action covers Brazil's practices related to digital trade, electronic payment services, preferential tariffs, anti-corruption enforcement, intellectual property, ethanol market access, and illegal deforestation.
The UK Department for Science, Innovation and Technology published an open letter to business leaders on improving access to and use of digital services. No content is available beyond the title, so the specific substance of the letter cannot be determined.
The European Data Protection Board (EDPB) has called for a clear legal basis to govern information sharing between different regulatory authorities across the EU. This position signals that the EDPB views current cross-regulatory data sharing practices as lacking sufficient legal grounding under GDPR.
The UK Department for Science, Innovation and Technology (DSIT) has published guidance titled "AI Research Resource." No content was available beyond the title, so the specific scope and requirements of the guidance cannot be determined from this item.
The Department of Energy has finalized, without change, an interim final rule (originally published August 25, 2025) establishing procedures for developing and carrying out voluntary agreements and plans of action under the Defense Production Act (DPA). The rule also codifies the antitrust defense available to participants in qualifying DPA voluntary agreements.
DHS is issuing a final rule that changes the admission period for F (academic student), J (exchange visitor), and I (foreign information media representative) nonimmigrant visa holders from "duration of status" (D/S) to a fixed time period of admission, and introduces a new extension of stay procedure. The rule amends the August 28, 2025 proposed rule and adds new admission and extension requirements for these categories.
Federal and provincial/territorial labour market ministers met in Halifax under the Forum of Labour Market Ministers (FLMM) to discuss shared labour market challenges and opportunities across Canada. No specific decisions, policy changes, or new obligations were announced in the source text.
The federal government has announced $2 billion in new funding for provinces and territories under the "Team Canada Strong" initiative, administered through Employment and Social Development Canada. The announcement relates to employment and social development programming delivered at the provincial and territorial level.
The Australian Privacy Commissioner has issued a formal determination against American Express Australia Limited, finding it interfered with a complainant's privacy (referred to as 'BAM') and ordering it to pay compensation. The OAIC published the summary report of the determination on 15 June 2026.
The OAIC has finalised a Commissioner-initiated investigation into Property Lovers and fastproperty.ai, concluding that fastproperty.ai did not collect, use, or disclose personal information. The investigation has been closed with no adverse finding against fastproperty.ai.
The Australian Privacy Commissioner has issued a formal determination finding that Optus interfered with the privacy of individuals whose personal information was listed in the White Pages contrary to their expressed preference or request to be unlisted. This is a binding enforcement outcome against Optus under Australian privacy law.
The OAIC has welcomed an Australian National Audit Office (ANAO) independent performance audit examining how selected government entities administer the Freedom of Information Act 1982, including the Information Publication Scheme. No specific findings or changes to obligations are detailed in the source text.
The OAIC has published the 2026 Australian Community Attitudes to Privacy Survey (ACAPS), finding that Australians are increasingly concerned about privacy and that trust in AI remains low. The survey is conducted every three years and provides a broad picture of community privacy attitudes and experiences.
The Digital Platform Regulators Forum (DP-REG) — which includes the OAIC — has signed a Memorandum of Understanding (MoU) to strengthen coordinated oversight of digital platforms across participating Australian regulators. The MoU signals closer cross-regulator collaboration but is not itself a binding rule on industry.
The Australian Privacy Commissioner has issued formal determinations finding that Medmate Australia Pty Ltd and Monash IVF Pty Ltd interfered with individuals' privacy by allowing third-party tracking pixels to collect sensitive personal information. Both organisations were subject to an investigation that concluded with findings of privacy breaches.
The OAIC has published statistics showing that 2025 recorded the highest number of data breach notifications under the Notifiable Data Breaches (NDB) scheme since it commenced in 2018, reaching an all-time high. The release is a statistical/informational report rather than a new rule or obligation.
The Australian Privacy Commissioner has completed preliminary inquiries into a 2025 Qantas Airways data breach and published a report of findings. This signals the OAIC has formally assessed the incident and determined next steps under the Privacy Act 1988.
The Department of Justice, along with state co-plaintiffs, has filed a Proposed Final Judgment and Competitive Impact Statement in its antitrust case against RealPage, Inc. This signals a potential settlement or consent decree that would impose conduct or structural remedies on RealPage related to its algorithmic rental pricing software, which was alleged to facilitate landlord coordination on rents.
CMS and CDC have issued a Request for Information (RFI) seeking public input on potential updates to the Clinical Laboratory Improvement Amendments of 1988 (CLIA) regulations, which have not been substantively revised since 1992. The RFI covers topics including breath testing, laboratory processes and procedures, emergency preparedness, biosafety, biosecurity, cybersecurity, and specialty testing areas. Responses will inform whether and how CMS and CDC may pursue future formal rulemaking to modernize CLIA regulations.
CMS has issued a proposed rule for Calendar Year 2027 that would update Medicare physician fee schedule (PFS) payment rates and a wide range of Part B payment and coverage policies. The proposal also covers updates to the Medicare Shared Savings Program, Quality Payment Program, Clinical Laboratory Fee Schedule, Rural Health Clinics, Federally Qualified Health Centers, Ambulance Fee Schedule, the Ambulatory Specialty Model, and codifies provisions from the Inflation Reduction Act of 2022 and Consolidated Appropriations Act 2026 — including the Medicare Prescription Drug Inflation Rebate Program.
Federal and provincial/territorial labour market ministers are convening in Halifax to discuss Canada's labour market outlook and collaborative workforce development approaches. A "significant national announcement" is expected from Minister Hajdu, though no details are provided in this notice.
The UK Department for Science, Innovation and Technology (DSIT) has published a call for evidence on data regulation in the context of AI and other data-intensive technologies. No substantive content is available beyond the title, so the scope, questions, and deadline of the consultation are unknown from this item.
The UK Department for Science, Innovation and Technology has launched a call for evidence on the marginal cost restriction that currently limits how public sector data can be re-used and charged for. The call seeks input on whether this restriction should be retained, reformed, or removed to support broader data access and reuse.
The UK Department for Science, Innovation and Technology (DSIT) has published a call for evidence titled "Data flows you can trust," likely seeking input on trusted international data flows and related data governance frameworks. No content is available beyond the title, so the precise scope and questions cannot be confirmed.
Cboe Exchange, Inc. has filed a proposed rule change with the SEC to amend its rules to permit the listing of binary options overlying Key Performance Indicators (KPIs) reported by certain stock issuers, to be known as "Binary KPI Options." This is a notice of filing, meaning the proposal is open for public comment and has not yet been adopted.
The NRC is proposing to amend its radiation protection regulations (10 CFR Part 20) for the first time since 1991, responding to Executive Order 14300 and reflecting decades of developments in the field. Draft implementing guidance has also been released for public comment alongside the proposed rule.
Home Hardware Stores Limited was convicted and fined $75,000 following a workplace injury at its St. Jacobs, Ontario location. The fine was imposed under Ontario occupational health and safety enforcement.
The EDPB has issued a decision requiring the Belgian Data Protection Authority (APD) to examine the substance of a complaint filed by NOYB concerning cookie banners, rather than dismissing or declining to handle it. This signals EDPB oversight of national DPA complaint-handling obligations under GDPR Article 77.
WestJet entered into a Compliance Letter with Canada's Privacy Commissioner following a Commissioner-initiated investigation into a June 12, 2025 ransomware breach that exposed personal information of approximately 5.16 million Canadian employees and customers. The breach was caused by a social engineering attack that bypassed MFA controls on a privileged employee account. WestJet has committed to remediation steps and additional reporting to the OPC in exchange for discontinuation of the investigation once commitments are fulfilled.
Following a 2025 cyberattack that exposed personal data of over five million WestJet customers and employees, the Privacy Commissioner of Canada has secured a compliance letter from WestJet committing to strengthen its security measures. WestJet must engage an external security firm to assess the effectiveness of its post-breach security enhancements and share the firm's recommendations — and its responses to them — with the OPC. The Commissioner's investigation remains open pending satisfaction that all commitments are fulfilled.
The federal government has issued a Request for Information (RFI) seeking stakeholder input on training and care delivery models for the safe administration of potential future FDA-approved psychedelic therapies in ambulatory clinical settings (e.g., health centers, rural health clinics). This follows Executive Order 14401 signed April 18, 2026, directing acceleration of medical treatments for serious mental illness. The RFI does not establish rules or mandates — it is a public information-gathering exercise.
BIS has finalized a rule upgrading the UAE's export control status by removing it from Country Groups D:3 and D:4 and adding it to Country Group A:5. This expands available license exceptions for the UAE, including Strategic Trade Authorization (STA) for military items, commercial satellites, spacecraft, and dual-use items. UAE Government and approved commercial entities also gain license-free access to advanced computing items under the May 2025 U.S.-UAE AI Cooperation framework.
The Government of Canada announced an investment in skills training programs targeting youth and persons with disabilities, aimed at reducing workforce participation barriers for these groups.
The OPC has announced nine externally funded research projects for its 2026-2027 Contributions Program, all focused on privacy in online gaming. Topics include algorithmic pricing harms, AI-generated non-player characters, eye-tracking data, esports data collection, and youth understanding of commercial gaming data practices. This is a grant announcement, not a new rule or enforcement action.
OMB is seeking public comment on proposed updates to the North American Industry Classification System (NAICS) for 2027. The proposed changes, recommended by the Economic Classification Policy Committee (ECPC), include clarifying existing industry definitions, recognizing new and emerging industries, and combining certain industries.