
EU Kids Act Flips the Burden of Proof
Von der Leyen announced the EU Kids Act in Strasbourg on September 16, 2026, banning social media under 13 and forcing platforms to prove they are safe for minors before use, not after harm.

Von der Leyen announced the EU Kids Act in Strasbourg on September 16, 2026, banning social media under 13 and forcing platforms to prove they are safe for minors before use, not after harm.

From September 27, every EU retailer needs a new guarantee notice, and any long durability promise needs the GARAN label. Twenty member states missed the deadline to write the law that enforces it.

OpenAI's own Privacy Filter documentation admits a measurable miss rate. A new report names the contractors reading ChatGPT chats behind it, and GDPR does not treat redacted as anonymous.

A leaked Vietnam-linked database exposed 220 million travel records. The EU router built to prevent exactly this failure has no announced go-live date.

Meta AI aggregated years of relatives' posts to assemble a profile of a Utah mother's daughters, down to their birth weights, without any chat ever taking place. Neither the EU AI Act nor California's new chatbot law would have caught it.

The DOJ is investigating whether Nvidia's $20 billion Groq deal was structured to dodge merger review, and the same gap likely exists in EU law too.

The European Commission's new Article 102 guidelines let dominant firms defend price and supply conduct by proving it protects resilience, public health, safety, or EU sustainability goals.

Google rolled out EU search changes on September 8 that favor comparison sites over direct business links, and called it the largest quality drop in its 29-year history.

The US government has formally objected to a UK Green Paper that would require platforms to boost Public Service Media like the BBC in algorithmic feeds, calling it a censorship risk.

Hausfeld filed a GBP 2 billion opt-out claim against Apple's App Tracking Transparency rules on September 3, 2026, automatically covering UK developers since 2021.

The EU top court's Advocate General struck down Belgium's data retention law, but proposed a test that could let states keep everyone's communications metadata legally.

From September 11, the EU Cyber Resilience Act gives manufacturers 24 hours to report exploited flaws, through a portal that launches the same day with no API.
Page 2 / 11
One considered note on infrastructure, governance, and measurement, most mornings. No theory.