The Bundeskartellamt closed its case against Apple's App Tracking Transparency Framework with binding commitments: a neutral consent prompt, a seven-year monitoring trustee, and a four-month deadline to comply.
The DOJ's $400 million TikTok and ByteDance settlement gives EU and UK regulators, and any platform with under-13 users, a concrete number to weigh child-privacy risk against.
The Dutch data protection authority fined Uber 825 million euros on August 21, 2026 for deactivating driver accounts by algorithm alone, the second-largest GDPR fine on record and a warning for any business automating consequential decisions.
The Nevada Transportation Authority cleared Tesla, Uber, and Waymo for up to 8,000 combined robotaxis in Las Vegas, with speed caps, geofencing, and airport bans carried over from Tesla's smaller pilot permit.
The ICO reprimanded the Met Police after a bulk email and an unredacted document exposed sensitive people. The same failure pattern applies to any business.
Denmark DNS-blocked Polymarket on 19 August, the third EU country this year to act against it. There is still no single EU rule for prediction markets.
The CMA opened drip-pricing investigations into Trainline, Virgin Atlantic and RED Driving School on 19 August 2026, its first live test of DMCC Act fines up to 10 percent of global turnover.
The Cyberbeveiligingswet took force on 15 August 2026. Registration and breach reporting bind immediately; only the security-measure deadline runs 9 to 10 months out. Here is the real clock.
Germany's Bundeskartellamt has closed its four-year case against Apple's tracking framework with binding commitments. Apple must redesign iOS consent prompts within four months.
Apple cut its EU Core Technology Fee to a flat 5% commission, effective October 1, 2026. Here is what changed, why it matters, and what EU app businesses should do now.
Apple ended its three-year fee fight with Brussels on August 18, 2026. From October 1, every EU app publisher pays one of three flat rates instead of the old fee maze. Here is what to recalculate before the deadline.
Google paid $10 million in Spirit Airlines' bankruptcy for 100 million staff emails and HR records. The passenger data was protected. The employee data was not - and that gap is bigger in the US than it would be under GDPR.
Page 5 / 11
One considered note on infrastructure, governance, and measurement, most mornings. No theory.