EU:EU AI Act — high-risk obligations (Annex III) deferred to Dec 2027 by the Digital Omnibus•USA:US state privacy laws now reach ~20 states — Indiana, Kentucky & Rhode Island live as of 2026•Maryland:Maryland Online Data Privacy Act now effective — strictest US data-minimization rules yet•California:CCPA ADMT, risk-assessment & cyber-audit rules in force — ADMT opt-out required by Jan 2027•Colorado:Colorado AI Act delayed to Jan 2027 and narrowed — algorithmic-discrimination duty of care dropped•India:India DPDP Rules notified — consent-manager registration from Nov 2026, fiduciary duties May 2027•EU:GDPR enforcement intensifies — AI-training data & dark-pattern fines on the rise•Global:Cross-border transfer scrutiny grows — DPF, SCCs & data-localization rules tightening•
EU:EU AI Act — high-risk obligations (Annex III) deferred to Dec 2027 by the Digital Omnibus•USA:US state privacy laws now reach ~20 states — Indiana, Kentucky & Rhode Island live as of 2026•Maryland:Maryland Online Data Privacy Act now effective — strictest US data-minimization rules yet•California:CCPA ADMT, risk-assessment & cyber-audit rules in force — ADMT opt-out required by Jan 2027•Colorado:Colorado AI Act delayed to Jan 2027 and narrowed — algorithmic-discrimination duty of care dropped•India:India DPDP Rules notified — consent-manager registration from Nov 2026, fiduciary duties May 2027•EU:GDPR enforcement intensifies — AI-training data & dark-pattern fines on the rise•Global:Cross-border transfer scrutiny grows — DPF, SCCs & data-localization rules tightening•