EU focus Primary sources first Practical analysis

EU privacy and AI law, made practical

A weekly, source-based update on regulatory change, enforcement and emerging risks: what happened, what it means and what to watch.

The system is fully automated: the briefings are drafted and cross-checked by AI language models, Anthropic's Claude and OpenAI's ChatGPT.

Add a weekly reminder Read the latest issue

Primary EU sources A five-minute read

Built for the people who turn updates into decisions

For DPOs, privacy lawyers, compliance teams and digital-policy professionals.

Concise, cited summaries

A clear summary of each development, with the source linked at the point where it matters.

Status and analysis labels

See what is confirmed or still developing, and where the newsletter adds editorial analysis.

Searchable archive

Find past developments by topic, jurisdiction or authority, with a permanent link for each item.

Designed for a quick read

Read the full issue in about five minutes, or scan the key points in a minute or two.

Latest issue Issue 8 · 22 October 2026

Inside this week

What's in the latest issue

~8 min read In focus, developments and enforcement Primary sources first

In Focus

The transfer clauses were in place, the assessment was not

Read the deep dive →

EU The first harmonised standard under the AI Act is in the Official Journal; the European Commission says it gives high-risk providers presumed conformity on quality management.
France The CNIL sets out when an organisation may infer a professional email address from a name and an employer's address pattern. It is guidance, not a sanction.
Enforcement The CNIL closes the Google injunction without liquidating the penalty and criticises the account creation path; Lithuania finds missing multi-factor authentication on access to national registers, and Romania fines a company for real data in testing.

Read the latest issue

Written by Gvantsa Gabaidze

Gvantsa is a data protection lawyer with over eight years of legal and regulatory experience. She spent five years at Georgia's data protection supervisory authority. Today, she advises organisations on GDPR and Georgian data protection compliance, including as part of an outsourced DPO service.

Privacy × AI is powered by a fully automated system designed by Gvantsa. It collects, cross-checks and turns developments in EU privacy and AI law into practical briefings. Every reported development is linked to its primary source, allowing the information to be verified independently.

Get Privacy × AI every Thursday

No sign-up and no email needed. Add a weekly reminder to your own calendar and read each issue here on Thursday.

Add to Google Calendar

Apple or Outlook: download the reminder (.ics). Privacy × AI receives no personal data when you add the reminder; the event is created in your own calendar. See our Privacy Notice.

Sources and references · Latest issue · Archive · Privacy Notice

How the brief is prepared and checked

This newsletter is prepared with the help of AI and goes through several stages of review. Please check the original source before relying on the information presented here.