In case you missed it – EDPO weekly recap | 8-12 June 2026

flashback - 6-12 June 2026

 

Here is a brief recap of the news and updates we shared last week.


New York state lawmakers passed the One Fair Price Act, which would ban businesses from setting individualised prices based on personal data if signed into law. The bill would also require companies to disclose when they use automatically fluctuating algorithmic prices, also known as dynamic pricing. [1]

In Europe, smart glasses are facing increased scrutiny from lawmakers, regulators and privacy activists over surveillance risks, consent, and the processing of data captured through built-in cameras. [2]

Anthropic released Fable 5, a less-powerful version of its most advanced Claude Mythos model, while stating that safeguards have been built in to prevent prompts related to cyberattacks or bioweapons. [3]

The European Data Protection Board published a draft template for personal data breach notifications, aimed at supporting a more consistent notification process across supervisory authorities in Member States. The template is open for public consultation until 5 August 2026. [4]

OpenAI said it had identified and banned ChatGPT accounts likely originating from China that were used to generate social media content for apparent covert influence operations relating to AI infrastructure and US technology policy. [5]

South Korea’s privacy regulator imposed a record penalty on Coupang following a major data breach linked to access-control failures involving an authentication key retained by a former software developer. [6]

References:
[1] Reuters: https://lnkd.in/eNxyzZbw
[2] Politico: https://lnkd.in/dvHxh3Hd
[3] Politico: https://lnkd.in/eDcNvCkh
[4] European Data Protection Board: https://lnkd.in/da6iMS5n
[5] Politico: https://lnkd.in/eDDHW-yd
[6] Startup Fortune: https://lnkd.in/e4MWka8v


*These articles were not written by EDPO. The opinions and views of the author(s) do not necessarily represent those of EDPO.

 

 

About the author

Sérgio Abreu

Sérgio studied International and European Law at Nova University in Lisbon. In his master’s thesis he delved into the impact of facial recognition technologies in Data Protection and Privacy in the EU. He’s CIPP/E certified. Sérgio studied and worked in multiple European cities, including Coimbra, Lisbon, Ljubljana, Brussels and Luxembourg. Sérgio was a Blue Book Trainee at the European Commission’s Data Policy and Innovation Unit, where he was involved in the preparatory work surrounding the Data Act. He also worked at a financial tech company and as a trainee at the Portuguese Competition Authority and at the Portuguese Embassy in Brussels. Sérgio is fluent in Portuguese and English and has an intermediate level in Spanish and French.

Sérgio Abreu

Get our weekly newsletter in your inbox every Monday with fresh GDPR and Data Protection news!