AI & Privacy Regulation Tracker
Stay ahead of AI and data privacy regulations — automated insights from global sources without manual tracking hassles
A saved example of what you can collect and monitor with Jsonify. Create your own version in Jsonify.
Build this in JsonifyYour original goal is prefilled.
Goal
I want to get continuous, structured data on emerging AI and data privacy regulatory changes, enforcement actions, and compliance requirements from global legislative trackers, data protection authority websites, and industry governance publications.
Source coverage
- eur-lex.europa.eu
- gdpr.eu
- ico.org.uk
- data-protection-authority.de
- eugdpr.org
- dsgvo-gesetz.de
- ai.gov
- oecd.org
- lawfareblog.com
- privacyinternational.org
- europa.eu
- noyb.eu
Sample data
Illustrative sample data from the original configuration, not live or verified results.
| id | Source | Document Title | Type | Jurisdiction | Summary | Effective Date | Status | Last Updated | Reference Link |
|---|---|---|---|---|---|---|---|---|---|
| 1 | eur-lex.europa.eu | Proposal for a Regulation on AI — Updated Risk Classification Annex | Legislative Proposal | European Union | European Commission publishes minor amendments to the Annex listing high-risk AI systems, clarifying biometric categorization and medical device overlaps. | 2026-02-01 | Published - Consultation Open | 2026-02-03 | https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=COM:2026:15:FIN |
| 2 | gdpr.eu | Guidance on Data Minimisation in AI Model Training | Guidance Note | EU / EEA | Practical checklist advising controllers and processors on applying data minimisation principles when collecting personal data for AI training datasets. | 2026-01-30 | Published | 2026-02-02 | https://gdpr.eu/data-minimisation-ai-guidance-2026 |
| 3 | ico.org.uk | ICO Enforcement Notice: Automated Decision-Making in Benefits Allocation | Enforcement Notice | United Kingdom | ICO issues enforcement notice to a UK local authority to stop using an automated scoring tool for benefits eligibility pending DPIA and transparency measures. | 2026-01-28 | Enforcement Active | 2026-02-04 | https://ico.org.uk/action-weve-taken/enforcement/auto-decision-benefits-2026 |
| 4 | data-protection-authority.de | Opinion on Cross-border Transfers Using Synthetic Data | Opinion | Germany | DPA publishes legal opinion on when synthetic data may be considered personal data under EU law for transfers to third countries. | 2026-01-29 | Adopted | 2026-02-01 | https://data-protection-authority.de/opinion-synthetic-data-transfers-2026 |
| 5 | eugdpr.org | Court Ruling: Right to Explanation in Automated Profiling Cases | Court Decision | European Union | EUGDPR tribunal upholds right to meaningful information on profiling logic in recruitment algorithms, orders remediation and damages. | 2026-01-31 | Judgment Issued | 2026-02-03 | https://eugdpr.org/cases/ruling-explanation-profiling-2026 |
| 6 | dsgvo-gesetz.de | Amendment Bill to German Federal Data Protection Act (BDSG) | Legislative Bill | Germany | Draft amends national rules on high-risk AI, increases fines for unlawful automated processing and mandates DPIAs for algorithmic hiring tools. | 2026-02-02 | Draft Bill | 2026-02-04 | https://dsgvo-gesetz.de/bill-amend-bdsg-ai-2026 |
| 7 | ai.gov | US White House AI Safety Action Plan — Data Privacy Annex | Policy Paper | United States | Annex sets recommended privacy safeguards for federally funded AI research including data retention limits and de-identification standards. | 2026-01-27 | Published | 2026-02-02 | https://ai.gov/ai-safety-action-plan/privacy-annex-2026 |
| 8 | oecd.org | Model Contract Clauses for AI Data Sharing | Guidance / Template | International (OECD Members) | OECD releases model contractual clauses to facilitate accountable cross-border AI dataset sharing with privacy safeguards and audit rights. | 2026-01-26 | Published | 2026-01-30 | https://oecd.org/ai/model-contract-clauses-data-sharing-2026 |
| 9 | lawfareblog.com | Analysis: Strategic Litigation Targeting AI-Driven Surveillance | Analysis | Global | Legal analysis outlines emerging strategic litigation routes against corporate surveillance using face recognition and location inference models. | 2026-02-03 | Article Published | 2026-02-03 | https://lawfareblog.com/strategic-litigation-ai-surveillance-2026 |
| 10 | privacyinternational.org | Report: Third-Party Trackers in AI Personalisation Pipelines | Investigative Report | Global | Investigation finds widespread use of third-party trackers in personalised recommendation systems, raising consent and profiling concerns. | 2026-01-25 | Published | 2026-02-01 | https://privacyinternational.org/report/third-party-trackers-ai-2026 |
| 11 | europa.eu | Commission Implementing Decision on AI Conformity Assessment Templates | Implementing Decision | European Union | Adopts standard templates for conformity assessments of high-risk AI systems to streamline CE marking and market surveillance. | 2026-02-01 | Adopted | 2026-02-03 | https://europa.eu/ai/conformity-assessment-templates-2026 |
| 12 | noyb.eu | Complaint Filed Against AdTech Company for Incompatible Consent for AI Training | Complaint | European Union | NOYB files complaint alleging adtech vendor used consent flows that do not meet GDPR standards for training recommender models. | 2026-01-31 | Complaint Submitted | 2026-02-04 | https://noyb.eu/complaint/adtech-consent-ai-2026 |
| 13 | eur-lex.europa.eu | Directive Amending ePrivacy to Cover Machine-to-Machine Profiling | Legislative Directive | European Union | Proposal to expand ePrivacy protections to include profiling of users via M2M communications and IoT device telemetry for ad targeting. | 2026-01-29 | Proposal Published | 2026-02-02 | https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52026PC |
| 14 | gdpr.eu | Checklist: Conducting a DPIA for Foundation Model Deployments | Practical Checklist | EU / EEA | Step-by-step DPIA checklist focusing on foundation model risk assessment, mitigation measures and stakeholder engagement requirements. | 2026-02-02 | Published | 2026-02-04 | https://gdpr.eu/dpia-foundation-models-2026 |
| 15 | ico.org.uk | Blog: Guidance for SMEs on Privacy-by-Design for AI | Guidance Article | United Kingdom | ICO provides concise guidance for small businesses implementing privacy-by-design in AI projects, including templates and low-cost controls. | 2026-01-30 | Published | 2026-02-01 | https://ico.org.uk/about-the-ico/news-and-events/blog/privacy-by-design-ai-smes-2026 |
| 16 | data-protection-authority.de | Sanction Decision: Fine for Unlawful Facial Recognition Pilot | Sanction Decision | Germany | DPA imposes administrative fine on a municipal pilot using facial recognition without adequate legal basis or DPIA documentation. | 2026-01-27 | Decision Final | 2026-02-03 | https://data-protection-authority.de/decisions/facial-recognition-fine-2026 |
| 17 | eugdpr.org | Guidance on Cross-border Joint Controllership for AI Systems | Guidance Note | EU / EEA | Clarifies responsibilities of joint controllers when AI systems process data across multiple member states, includes template agreements. | 2026-01-28 | Published | 2026-02-02 | https://eugdpr.org/guidance/joint-controllership-ai-2026 |
| 18 | dsgvo-gesetz.de | Case Commentary: Liability of Model Providers Under BDSG | Commentary | Germany | Academic commentary examines recent case law on provider liability for pretrained model outputs that infringe data subject rights. | 2026-01-26 | Published | 2026-01-30 | https://dsgvo-gesetz.de/commentary/model-provider-liability-2026 |
| 19 | ai.gov | NIST-aligned Framework for Privacy Risk Assessment in AI | Framework | United States | Technical framework aligning NIST risk management with privacy principles for AI system lifecycle assessments in federal agencies. | 2026-01-31 | Published | 2026-02-03 | https://ai.gov/nist-privacy-framework-ai-2026 |
| 20 | oecd.org | Report: Data Governance for Trustworthy AI — Best Practices | Policy Report | International | Survey of member states' data governance regimes with recommendations for access, portability, and privacy-preserving analytics for AI. | 2026-01-25 | Published | 2026-01-29 | https://oecd.org/ai/data-governance-trustworthy-ai-2026 |
| 21 | lawfareblog.com | Roundtable Summary: National Security Exceptions and AI Data Sharing | Roundtable Summary | United States / Allies | Summary of expert discussion on balancing national security data sharing with privacy safeguards and oversight for AI-relevant datasets. | 2026-02-02 | Published | 2026-02-02 | https://lawfareblog.com/roundtable/ai-data-sharing-national-security-2026 |
| 22 | privacyinternational.org | Toolkit: Audit Scripts for Assessing Consent in AI Pipelines | Toolkit | Global | Open-source scripts and methodology for NGOs and auditors to programmatically test consent collection and retention in AI data pipelines. | 2026-01-29 | Released | 2026-02-01 | https://privacyinternational.org/toolkit/consent-audit-ai-2026 |
| 23 | europa.eu | Regulatory Brief: Interaction Between AI Act and GDPR Reuse Provisions | Regulatory Brief | European Union | Commission brief explaining how the AI Act's obligations interact with GDPR rules on processing for compatible purposes and reuse of data. | 2026-02-03 | Published | 2026-02-03 | https://europa.eu/ai/gdpr-ai-act-interaction-2026 |
| 24 | noyb.eu | FOIA Request Released: EU Agency Use of Public Images for Model Training | Disclosure / FOIA | European Union | NOYB publishes documents obtained showing an EU agency contracted a vendor to scrape public images for model training without explicit legal basis. | 2026-01-27 | Disclosed | 2026-02-04 | https://noyb.eu/disclosure/eu-agency-public-images-2026 |
| 25 | eur-lex.europa.eu | Corrigendum: Clarification to AI Act Enforcement Timelines | Corrigendum | European Union | Official corrigendum clarifies transitional timelines for compliance audits under the AI Act, extending certain deadlines for SMEs by six months. | 2026-02-01 | Published | 2026-02-02 | https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:CORRIG:52026 |
| 26 | gdpr.eu | Template: Data Subject Access Request for Outputs of Generative Models | Template | EU / EEA | Provides a user-friendly DSAR template tailored to requests for personal data contained in generative AI outputs and instructions for controllers. | 2026-02-04 | Published | 2026-02-04 | https://gdpr.eu/dsar-template-generative-models-2026 |
| 27 | ico.org.uk | Investigatory Powers Guidance: Use of Synthetic Data by Law Enforcement | Guidance | United Kingdom | Guidance clarifies lawful bases and safeguards for law enforcement use of synthetic datasets derived from operational data for AI testing. | 2026-01-26 | Published | 2026-01-31 | https://ico.org.uk/guidance/synthetic-data-law-enforcement-2026 |
| 28 | data-protection-authority.de | Bulletin: Recommendations for Privacy-preserving Model Evaluation | Bulletin | Germany | Practical recommendations on using split testing, secure enclaves and differential privacy when evaluating ML models on personal data. | 2026-01-30 | Published | 2026-02-02 | https://data-protection-authority.de/bulletin/privacy-model-evaluation-2026 |
| 29 | eugdpr.org | Statement on International Cooperation for AI Enforcement | Policy Statement | European Union | EUGDPR calls for enhanced cross-border cooperation and evidence-sharing between DPAs to enforce AI-related data protection breaches effectively. | 2026-02-03 | Issued | 2026-02-03 | https://eugdpr.org/statement/international-cooperation-ai-2026 |
| 30 | dsgvo-gesetz.de | Template Notice: Transparency Requirements for Automated Decisions | Template | Germany | Official transparency notice template for organizations to provide to data subjects affected by fully automated decision-making systems. | 2026-01-28 | Published | 2026-02-01 | https://dsgvo-gesetz.de/template/automated-decision-notice-2026 |
Insights and analytics
- Total Regulatory Changes Monitored (metric)
- New Compliance Requirements This Month (metric)
- Trends in AI and Data Privacy Regulations Over Time (line)
- Number of Enforcement Actions by Country (bar)
- Top 5 Sources of Regulatory Updates (horizontal_bar)
- Distribution of Regulatory Changes by Category (donut)
- Recent Enforcement Actions (table)
- Upcoming Compliance Deadlines (table)
- Volume of Publications on Data Privacy (area)
- Key Observations on Regulatory Trends (insights)
- Compliance Requirement Changes Over Time (line)
- Total Number of Active Lawsuits Related to Data Privacy (metric)
Change notifications
- New Enforcement Action — latest enforcement action reported data-protection-authority.de
- Upcoming Compliance Deadline — deadline approaching soon eur-lex.europa.eu
- New Legislation Detected — new proposal published europa.eu
- Data Privacy Update — recent amendments to GDPR gdpr.eu
- Enforcement Status Update — status has changed to resolved ico.org.uk
Integrations and delivery
- api
- bigquery
- snowflake
Make this your own
Start with this goal in Jsonify, then choose the sources and data you need.
Build this in Jsonify