Privacy and Cybersecurity Roundup: New AI Rules and Foreign Router Restrictions
Summary
A roundup of regulatory developments covers Germany’s Data Act enforcement law, new UK automated-decision safeguards, AI oversight measures in Poland and California, Utah age-verification rules, New York frontier-AI requirements, and FCC restrictions on new foreign-made
Key points
- Germany adopted the Data Act Implementation Act, designating BNetzA as the central enforcer and establishing tiered administrative fines.
- The UK ICO proposed updated automated-decision guidance emphasizing decision-specific explanations, meaningful human intervention, challenge rights, and audit trails.
- Poland’s draft AI law would create a supervisory authority with investigation, enforcement, and high-risk AI oversight powers.
- California’s executive order starts a process for AI vendor procurement safeguards, including proposed governance certifications and risk screening.
- Utah’s SB 73 requires age verification for covered online content and bars retaining identifying data after verification; the state is also developing its SEDI digital identity framework.
- New York enacted transparency, incident-reporting, and oversight requirements for developers of frontier AI models.
- The FCC added foreign-made consumer routers to its Covered List, blocking authorization of new models while allowing previously authorized models to remain in use.
Article Details
- Event Type
- Regulatory and policy developments concerning privacy, artificial intelligence, digital identity, and cybersecurity
- Impact
- The measures establish or update national and state oversight, compliance, and enforcement frameworks for data use, automated decision-making, AI systems, digital identity, and online age verification. Separately, the FCC decision bars authorization of new consumer-grade routers produced in foreign countries for importation, marketing, or sale in the United States, citing national security risks; previously authorized models may remain in use.