The EU AI Act Weekly

What changed

Documents we already monitor that moved this week.

EDPB — Dutch DPA Imposes €30.5M Fine on Clearview AI for Illegal Data Collection (2024)

NL · medium · detected 2026-10-22

The document now reports a fine imposed by the Norwegian DPA on Xandr for unlawful processing of personal data, replacing a previous fine by the Italian DPA on Wind Tre for unlawful telemarketing. This change highlights a shift in focus from telemarketing violations to broader data processing issues, which may affect organizations' compliance strategies.

EDPB — Greek DPA Fines Clearview AI €20M for Biometric Data Violations (2022)

GR · medium · detected 2026-10-21

The document now reports a fine imposed by the Norwegian DPA on Xandr for unlawful processing of personal data, replacing a previous fine by the Italian DPA on Wind Tre for telemarketing violations. This change highlights a shift in focus from telemarketing issues to broader personal data processing violations, which may affect organizations by emphasizing the importance of compliance with data protection regulations across different jurisdictions.

KI-Gesetz | Gestaltung der digitalen Zukunft Europas

EU · medium · detected 2026-10-21

The document has updated the timeline for the publication of the first harmonized standard supporting the AI Regulation from August 3, 2026, to October 19, 2026. Additionally, it clarifies that the standardization now pertains specifically to the AI Regulation rather than the AI Act. This change is significant as it impacts the timeline and framework organizations must adhere to for compliance and innovation in AI.

European Commission — AI Regulatory Framework Overview (EU AI Act)

EU · medium · detected 2026-10-21

The document has updated the titles and descriptions of several sections, including the introduction of a new 'Code of Practice on Transparency of AI-generated Content' and a revised timeline for the enforcement of the AI Act. These changes emphasize the importance of transparency in AI systems and provide clearer guidance on compliance timelines, which is crucial for organizations to prepare for regulatory adherence.

Regulatory document

medium · detected 2026-10-21

The document has changed the language from 'Create new account' to 'Sign in to use this feature' and added 'Create account for free'. This indicates a shift towards requiring users to sign in to access certain features, while also promoting the option to create an account at no cost. This matters to organizations as it may affect user engagement and account creation processes.

Brazil — ANPD: Autoridade Nacional de Proteção de Dados (National Data Protection Authority portal)

BR · medium · detected 2026-10-21

The ANPD has shifted its focus from promoting a web seminar on the ECA Digital and publishing a report to requesting explanations from Meta regarding violations related to account suspensions and content removals. This change highlights a more proactive stance by the ANPD in addressing specific compliance issues with major tech companies, which could affect how organizations interact with the authority and manage their data practices.

EU incident response and cyber crisis management | ENISA

EU · medium · detected 2026-10-21

The document now includes a statement welcoming the revision of the Cyber Blueprint in 2025, highlighting its significance for enhancing the EU's cybersecurity resilience and addressing increasing threats. This change emphasizes the ongoing evolution of cybersecurity strategies within the EU, which organizations must be aware of to remain compliant and effective in their incident response efforts.

EDPB Guidelines 05/2020 on consent under GDPR

EU · medium · detected 2026-10-21

The document has been updated to include new guidelines on processing personal data based on Article 6(1)(f) GDPR and for scientific research purposes, while removing references to previous joint opinions and studies. This change is significant for organizations as it provides clearer legal bases and guidance for data processing activities, particularly in the context of scientific research, which may affect compliance strategies and operational practices.

EDPB — AEPD Imposes €6M Fine on CaixaBank for Unlawful Data Processing (2021)

ES · medium · detected 2026-10-21

The document now reports a fine imposed by the Norwegian DPA on Xandr for unlawful processing of personal data, replacing a previous fine by the Italian DPA on Wind Tre for telemarketing violations. This change highlights a shift in focus from telemarketing to broader data processing issues, which may affect organizations' compliance strategies regarding personal data handling.

EDPB — AEPD Fines CaixaBank €3M for Unlawful Profiling for Commercial Purposes (2021)

ES · medium · detected 2026-10-21

The document has replaced a fine imposed by the Italian DPA on Wind Tre for unlawful telemarketing with a fine imposed by the Norwegian DPA on Xandr for unlawful processing of personal data. This change highlights a shift in focus from telemarketing violations to broader data processing issues, which may indicate evolving regulatory priorities in data protection enforcement across jurisdictions.

EDPB — Facial Recognition in School: Sweden's First GDPR Fine (2019)

SE · medium · detected 2026-10-21

The document has replaced a reference to an Italian DPA fine against Wind Tre with a reference to a Norwegian DPA fine against Xandr, along with updated dates. This change indicates a shift in focus from one case to another, which may reflect evolving enforcement trends in data protection across different jurisdictions. Organizations should be aware of the implications of these fines and the importance of compliance with data protection laws.

European approach to artificial intelligence | Shaping Europe’s digital future

EU · medium · detected 2026-10-21

The document shifted focus from a report on cyber threats faced by EU employees to an event centered on enhancing digital skills in Europe. This change emphasizes the importance of developing digital talent as a means to improve competitiveness, rather than solely addressing cybersecurity issues. Organizations may need to adapt their training and development strategies accordingly.

Artificial Intelligence | Shaping Europe’s digital future

EU · medium · detected 2026-10-21

The document has shifted focus from past events and initiatives related to AI to new initiatives and findings, particularly the launch of the RAISE pledging initiative aimed at supporting AI research in Europe and highlighting the growing adoption of AI in European companies. This change emphasizes the EU's commitment to fostering AI development and addressing skills gaps, which is crucial for organizations as it may influence funding opportunities and workforce development strategies.

AI-akten | Utváření digitální budoucnosti Evropy

EU · medium · detected 2026-10-21

The dates and specific events related to the AI regulation have been updated, including a shift from August to October 2026 for the implementation of harmonized standards. Additionally, the terminology has changed from 'AI-akten' to 'AI-förordningen', reflecting a more formal designation of the regulation. This matters to organizations as it indicates a new timeline for compliance and the formalization of standards that will affect their operations.

Tekoälysäädös | Shaping Europe’s digital future

EU · medium · detected 2026-10-21

The deadlines for certain events and initiatives related to the EU's AI regulation have been shifted from August 2026 to October 2026. This includes the introduction of a harmonized standard to support the AI regulation and the EU Skills Days for developing digital skills. These changes may affect timelines for organizations preparing for compliance with the AI regulation.

Akt o umetni inteligenci | Shaping Europe’s digital future

EU · medium · detected 2026-10-21

The document has updated key dates related to the EU's artificial intelligence initiatives, moving deadlines from August to October 2026. Additionally, it introduces new events and milestones, such as the EU Digital Talent Days and the publication of the first harmonized standard supporting the AI act. These changes are significant as they indicate a shift in timelines and the introduction of new initiatives that organizations will need to prepare for.

Policy papers and consultations - GOV.UK

UK · medium · detected 2026-10-21

The references to the Drinking Water Inspectorate and the Water Services Regulation Authority have been modified to remove 'The' before their names, and the Joint Maritime Security Centre has been added. This change clarifies the naming convention for these organizations and introduces a new entity relevant to maritime security, which may affect organizations involved in water and maritime sectors.

Akt o umelej inteligencii | Shaping Europe’s digital future

EU · medium · detected 2026-10-21

The document has updated dates for key events related to the EU's artificial intelligence regulations, moving deadlines from August to October 2026. Additionally, it introduces a new event focused on building digital skills in Europe. These changes may affect timelines for compliance and preparation for organizations involved in AI.

Regulamentul privind IA | Shaping Europe’s digital future

EU · medium · detected 2026-10-21

The document has updated key dates and events related to the regulation on AI, including the new date for the European Digital Talent Days and the publication of the first harmonized standard supporting the AI regulation. These changes indicate a shift in timelines and emphasize the importance of skill development and standardization in the digital landscape, which organizations must be aware of to ensure compliance and readiness.

Research and statistics - GOV.UK

UK · medium · detected 2026-10-21

The references to the Drinking Water Inspectorate and the Water Services Regulation Authority have been modified to remove 'The' before their names, and the Joint Maritime Security Centre has been added as a new entity. This change clarifies the naming convention for these organizations and introduces a new regulatory body relevant to maritime security, which may impact organizations involved in water and maritime sectors.

Regulamento Inteligência Artificial | Shaping Europe’s digital future

EU · medium · detected 2026-10-21

The document has updated dates and events related to the regulation of artificial intelligence in the EU. Notably, the deadline for certain actions has been extended to October 2026, and new events have been added that focus on digital talent development. This matters to organizations as it indicates a shift in timelines and potentially more opportunities for compliance and adaptation to the regulations.

Akt w sprawie sztucznej inteligencji | Kształtowanie cyfrowej przyszłości Europy

EU · medium · detected 2026-10-21

The deadlines for certain events and publications related to the AI Act have been shifted from August and September 2026 to October 2026. This includes the introduction of harmonized standards and the European Digital Talent Days, which are now scheduled for mid-October. These changes may affect organizations' timelines for compliance and preparation for the new regulations.

AI-verordening | De digitale toekomst van Europa vormgeven

EU · medium · detected 2026-10-21

The document has updated dates and added events related to the EU's digital strategy, including a focus on building digital skills and the announcement of the first harmonized standard to support the AI regulation. These changes indicate a shift towards a more structured approach to digital talent development and regulatory compliance for AI, which is crucial for organizations operating in the EU. The new deadlines and events may affect planning and compliance timelines for these organizations.

Att dwar l-IA | Shaping Europe’s digital future

EU · medium · detected 2026-10-21

The document has updated dates and added new initiatives related to digital talent and the publication of a harmonized standard supporting the AI Act. This indicates a shift towards enhancing digital skills and establishing regulatory frameworks for artificial intelligence, which is crucial for organizations to comply with upcoming standards and to develop necessary skills in the workforce.

A mesterséges intelligenciáról szóló jogszabály | Shaping Europe’s digital future

EU · medium · detected 2026-10-21

The deadlines for certain actions related to artificial intelligence legislation have been extended from August 2026 to October 2026. Additionally, new initiatives focusing on digital skills development and the publication of harmonized standards supporting the AI legislation have been introduced. These changes are significant as they provide organizations with more time to comply and adapt to the evolving regulatory landscape.