Focus 1
Who is in scope
One EU user can be enough if personal data is processed in the context of targeting or monitoring.
Framework hub
GDPR
GDPR applies to any organisation that processes personal data of EU residents, regardless of where the organisation is established.
EU baseline
If you are established in the EU, operate in the EU, or place this product or service on the EU market, treat this as a first-order compliance check. Non-EU reach language means outsiders can also be covered, not that EU companies are outside scope.
Review scopeFocus 2
DPA enforcement tracker
Latest decisions and enforcement updates are collected from CNPD, EDPB, EDPS, ICO, CNIL, BfDI, and DPC Ireland.
Focus 3
Core rights
Article 13, 14, 17, and 20 obligations are summarized with source-backed updates.
Focus 4
Data transfers
SCCs, adequacy decisions, and related guidance are tracked from official sources.
Source updates
HIGHFederal Register2026-08-06
DPAS Directive Allocation Order and Additional Requirements for Recoverable Critical Minerals and Materials
The Bureau of Industry and Security ("BIS") is publishing this temporary final rule to restrict the exportation of black mass and tungsten waste and scrap without a license.
US federal regulationGDPR
MEDIUMEDPB2026-07-30
Stakeholder event on guidelines on the interplay between data protection and competition law: express your interest
Brussels, 30 July – The EDPB and the European Commission organise a remote stakeholder event in the context of their joint work on upcoming guidelines on the interplay between competition...
GDPRePrivacy
URGENTEU AI Office2026-07-30
EU launches AI Gigafactories call to boost Europe's computing capacity and unlock more than €30 billion in investment
Anonymous (not verified) Thu, 07/30/2026 - 11:50 The EU has launched a call for tenders to establish up to seven AI Gigafactories across Europe, as part of its latest major push to...
EU AI ActGDPRDORA
URGENTEU AI Office2026-07-30
EU launches AI Gigafactories call to boost Europe's computing capacity and unlock more than €30 billion in investment
Anonymous (not verified) Thu, 07/30/2026 - 11:50 The EU today launched a call for tenders to establish up to seven AI Gigafactories across Europe, as part of its latest major push to...
EU AI ActGDPRDORA
MEDIUMEDPB2026-07-23
Stakeholder event on guidelines on the interplay between data protection and competition law: save the date
Brussels, 23 July – The EDPB and the European Commission organise a remote stakeholder event in the context of their joint work on upcoming guidelines on the interplay between competition...
GDPRePrivacy
LOWEDPB2026-07-17
EDPB calls for legal basis for cross-regulatory information sharing
Dublin, 17 July– At a high-level meeting in Dublin on 16 and 17 July 2026, the European Data Protection Board (EDPB) called for a clear legal basis for the sharing of information among...
GDPRePrivacyDORA
MEDIUMFederal Register2026-07-16
Privacy Act of 1974; System of Records
In accordance with the Privacy Act of 1974, the Defense Logistics Agency (DLA) is providing notice to rescind a system of records titled "DLA Hometown News Release," S190.10.
US federal regulationGDPRAustralian Privacy Act
MEDIUMEDPB2026-07-14
EDPB requires Belgian DPA to handle the merits of NOYB cookie banner complaint
Brussels, 14 July–The EDPB has published its binding decision of 28 May 2026 under Art.65(1)(a) GDPR*.
GDPRePrivacyDORA