The European Commission brought together around 60 civil society organisations and researchers for its fifth roundtable on the implementation of the Digital Services Act. Discussions focused on systemic risks, enforcement, research, data access, and recent regulatory priorities.
The Network of African Data Protection Authorities (NADPA) has presented a draft model policy proposing six legal mechanisms for transferring personal data across African borders. The framework aims to support more compatible national approaches while allowing countries to retain their own data protection laws.
APC, CIPESA and WOUGNET have published a joint stakeholder submission to the UN Human Rights Council’s Universal Periodic Review of Uganda. The submission examines online freedom of expression, internet shutdowns, digital inclusion, data protection, surveillance and technology-facilitated gender-based violence, and sets out 10 recommendations for the Ugandan government.
Finland and Norway have launched an international appeal calling for stronger oversight of frontier AI models. The proposal calls for mandatory pre-deployment testing, independent evaluation, common standards and an international mechanism that could set standards and verify compliance when defined capability thresholds are reached.
Ireland’s Data Protection Commission has fined Google €403 million following an inquiry into its processing of location data between May 2018 and February 2020. The regulator also ordered Google to bring its processing into compliance within six months.
The European Data Protection Board has adopted new guidelines on administrative fines under the GDPR and finalised its guidance on the interplay between the Digital Services Act and the GDPR. The new fining guidelines set out a five-step methodology for national data protection authorities.
Signatories of the EU Code of Conduct on Disinformation have published their latest reports on measures to address disinformation online. Covering January to June 2026, the reports include actions related to elections, the war in Ukraine, and platform policies and tools.
The W3C Verifiable Credentials Working Group has published the first public working draft of Bitstring Status List v1.1. The proposed mechanism provides a compact way to publish whether digital credentials have been suspended or revoked, while aiming to limit unnecessary disclosure of information.
The World Wide Web Consortium (W3C) has published a draft threat model examining security and privacy risks around verifiable credentials. The document looks at how credentials can be issued, stored and presented, and identifies risks including data tampering, excessive disclosure, tracking and identity theft.
ICANN has selected Adelaide, Australia, to host its 90th Annual General Meeting from 30 October to 4 November 2027.
Civil Society Alliances for Digital Empowerment (CADE) is a project co-funded by the European Union.
