Skip to content
VDHome
Request a quote

Updates

Changes in the rules we write about, with the date and the official source. Only what the source itself says; newest first.

  1. AI Omnibus: the obligations for high-risk AI move back

    Regulation (EU) 2026/1744, published in the Official Journal of 24 July 2026, amends the AI Act. The obligations for high-risk AI systems in Annex III apply from 2 December 2027, those for Annex I from 2 August 2028.

    What it means, and for whom

    For organisations that develop or deploy high-risk AI systems, such as in recruitment, credit scoring or public services: there is more time, but the obligations remain. A DPIA under the GDPR is already required wherever the GDPR asks for one.

    Source

    Checked on

  2. FISA Section 702 repealed

    On 12 June 2026 Section 702 of the US Foreign Intelligence Surveillance Act was automatically repealed, together with all of Title VII. According to lawmakers and congressional aides, as reported by the Congressional Research Service, the orders of March 2026 stay in effect for up to one year. After that, this surveillance falls under FISA Title I, with an individual order for each target.

    What it means, and for whom

    For anyone with data at a US provider who keeps a transfer impact assessment (TIA): update it, but do not assume less access. The CLOUD Act, a different statute, still applies unchanged.

    Source

    Checked on