European Union Updates GDPR and AI Act Regulations for 2026

European Union releases 2026 privacy updates that combine the AI Act and revised GDPR provisions, tightening rules on automated decision‑making, requiring impact assessments for high‑risk AI systems, and expanding data subject rights across member states.

United Kingdom publishes its 2026 UK GDPR amendments, adding stricter consent standards, new obligations for data‑controller transparency, and a mandatory breach notification window of 72 hours, aiming to align with EU changes while preserving domestic flexibility.

United States sees a surge in state‑level privacy bills, with the IAPP forecasting over 20 new statutes in 2026, while the Fall 2025 Regulatory Roundup highlights emerging AI‑focused rules that could affect tech firms nationwide.

Electronic Frontier Foundation and UN experts call for safeguards against systematic digital surveillance, urging governments to embed human‑rights protections in the new ePrivacy drafts and to ensure age‑verification tools respect privacy while protecting minors.