Not just policy, but penalties-backed control over data value. What’s Happening Two bills advancing in parallel: • National Digital Economy & E-Governance Bill (AI governance) • Digital Sovereignty & Fair Data Compensation Bill (data localisation + economic control) Key Enforcement Signals • Fines…
AI training startup Mercor is facing five contractor lawsuits in a single week following a recent data breach—before any regulator has formally stepped in. What Happened • Company: Mercor (AI training data platform) • Legal exposure: 5 lawsuits filed within days • Data…
A recent Reuters report reveals that the U.S. has instructed diplomats to actively oppose foreign data localization and sovereignty initiatives—elevating data governance into a coordinated diplomatic priority. Why it Matters Two competing models are hardening: • Open data flows (U.S.)…
If you think compliance risk sits only in cybersecurity… you’re already exposed. In March, Intesa Sanpaolo was hit twice by the Garante per la protezione dei dati personali—for very different failures, but with a single underlying message: 1. Strategic failure:…
Cross-border data transfers are under increasing regulatory scrutiny in 2026. United Kingdom The United Kingdom’s Information Commissioner’s Office (ICO) issued updated guidance clarifying when a “restricted transfer” occurs under UK GDPR, introducing a practical 3-step test and reinforcing the need…
After years of complaints about slow, fragmented GDPR enforcement, Brussels is finally moving. The Council of the EU and the European Parliament had agreed on new procedural rules to streamline how national Data Protection Authorities (DPAs) handle cross-border GDPR cases…
What Actually Changed Under the new framework: • Admissibility criteria are standardized across member states • Procedural timelines are clarified, reducing year-long investigations • Simplified settlements become possible without full cooperation mechanisms • DPAs are nudged toward consistency instead of…
€1.2B in GDPR fines issued across Europe in 2025, keeping pace with 2024 and bringing total fines since 2018 to ~€7.1B. Ireland and France led enforcement, together accounting for over €1B last year. But enforcement today is about more than…
After years of uncertainty, Egypt has finally issued the Executive Regulations under its Personal Data Protection Law (PDPL) — and the compliance clock is now ticking. Compliance Deadline: 31 October 2026 What This Means for Businesses • Licensing is no…
India has officially notified the DPDP Rules, 2025, activating core provisions of the Digital Personal Data Protection Act, 2023 — marking a major leap toward GDPR-style data protection. Key Components of the New Framework Consent Management Clear, verifiable consent required,…
