White House Accord on “Super Intelligence” and new federal terminology for AI.

AI and Employee Monitoring: New Guidance from the Italian Labour Consultants’ Studies Foundation.

EDPB Guidelines 04/2026: when supervisory authorities should impose gdpr administrative fines and when other corrective measures may apply.

EDPB: Guidelines 3/2025 on the interplay between DSA and GDPR definitively adopted.

EU KIDS Act: New Rules on Age Verification, Safety by Design and Online Protection of Minors.

Artificial Intelligence and Liability: Legislative Decree No. 160/2026 Introduces New Obligations and Risks for Businesses.

National Cybersecurity Agency: NIS Handbook Now Available Online.

Data Act: “Access by Design” Requirements for Data Generated by Connected Products Apply from 12 September 2026.

Cyber Resilience Act: Vulnerability and Severe Incident Reporting Obligations Apply from 11 September 2026.

Negative criminal record certificates and the GDPR: according to the Spanish courts, they do not automatically constitute data relating to criminal convictions and offences under Article 10 GDPR.

European Commission: Cyber Resilience Act – operational guidance published; first reporting obligations apply from 11 September.

Court of Justice of the European Union: freedom of political expression does not automatically justify the use of a reputed trade mark.

Italian National Cybersecurity Agency: document on the transition to post-quantum cryptography.

Supreme Court of Cassation: consent from heirs may not be required for television dramas depicting well-known public figures.

Italian Supreme Court: in proceedings concerning complaints and sanctions before the Italian Data Protection Authority, the Supreme Court clarifies which time limits apply and when they begin to run.

Supreme Court of Cassation: a blog administrator may be held liable for defamation if he or she fails to remove offensive content of which he or she is aware.

Court of Justice of the European Union: corporate transparency and privacy – the Court sets limits on the indiscriminate publication of shareholders’ personal data.

European Commission: first AI Act compliance checks launched, with re-quests for information sent to more than 30 companies.

Court of Justice of the European Union: in antitrust investigations, corporate emails may be seized even without prior judicial authorisation.

Challenges to decisions of the Italian Data Protection Authority: the Supreme Court clarifies the rules on mandatory joinder.

European Digital Identity: new operational rules on electronic attestations of attributes apply from 19 August 2026.

EU e-Evidence Regulation applicable from 18 August 2026: new European orders for obtaining electronic evidence across borders.

AI Act after the Digital Omnibus: the CNIL updates its FAQs on the new application timeline and the relationship with the GDPR.

ETSI launches approval process for 17 harmonised standards supporting the Cyber Resilience Act.

China: CAC clarifies the use of publicly available personal information and measures to prevent data breaches.

Italian National Cybersecurity Agency (ACN): new FAQs published on monitoring, supervision and enforcement activities concerning NIS entities.

France: CNIL issues guidance on identifying and managing DPO conflicts of interest.

Council of Ministers approves measures on AI, cybersecurity and strategic digital infrastructure.

EU: first DORA assessment of major ICT-related incidents records 3,383 cases in 2025, with almost one third linked to third-party dependencies.