
Your Vendor Decides When Your 72 Hours Start
CareCloud's records system was hit on 16 March. It determined on 24 June that data was taken. Letters went out from 30 July. Your GDPR clock is 72 hours.

CareCloud's records system was hit on 16 March. It determined on 24 June that data was taken. Letters went out from 30 July. Your GDPR clock is 72 hours.

Directive 2024/1799 applies from 31 July 2026. The guarantee extension covers new contracts. The manufacturer repair duty covers the installed base.

The Commission is set to designate ChatGPT and Roblox as very large online platforms. The trigger is a user count, and the duties bind four months later.

The UK CMA is investigating how Microsoft sold 365 renewals after bundling Copilot. The allegation is not the price rise. It is that the cheaper plan existed and was never named.

Rivian filed suit on 24 July for a refund of tariffs the Supreme Court already struck down. The reason it had to file says more than the case does.

China's regulator fined Trip.com 5.2 billion yuan on 25 July for exclusivity delivered through traffic allocation. Your contract will not show you that conduct.

US prosecutors charged a traveller under 18 U.S.C. 2232 after a duress passcode wiped his phone at Atlanta airport. What it changes for European travel policy.

The EU fined Google 890 million euros under the Digital Markets Act on July 23. The order to let developers bill outside Google Play is what touches your margins.

Britain's new prime minister scrapped the BritCard digital ID on his first day. The mandatory right-to-work check it was meant to power is untouched, and a new code of practice still lands on 1 October.

The Commission fined AliExpress EUR 550 million under the DSA. Read the findings and the infringement is about staffing and self-assessment, not only counterfeits.

Andy Burnham is cancelling Britain's digital ID scheme as he takes office, and the Office for Budget Responsibility had costed it at 1.8 billion pounds. The duty it was meant to carry does not disappear with it, and employers still hold it.

Ofcom opened a section 12 investigation into TikTok's age assurance on 16 July 2026. The real target is age inference as a method. What UK-facing operators should ask now.
Page 3 / 6
One considered note on infrastructure, governance, and measurement, most mornings. No theory.