Free weekly email
The week in compliance, every Monday.
One short email with what changed: the stories that matter for the frameworks you follow, the fines regulators handed out, and the deadlines coming up in the next 30 days. Five minutes, then back to work.
- The week’s most important stories, with every source linked
- New fines and penalties — who, how much, and why
- Deadlines in the next 30 days, so nothing sneaks up on you
No spam, no tracking pixels, one-click unsubscribe in every email. Privacy.
This week’s issue · preview
This week in compliance
Top stories
- SafePay Has Compromised 600 Critical Infrastructure Victims Worldwide, CISA Warns
CISA advisory on 21 October 2026 warns SafePay has compromised 600 critical‑infrastructure victims worldwide and urges immediate mitigation.
- China Defends DeepSeek After US Ban of Its AI From Government Systems
The Department of Homeland Security ordered all U.S. federal agencies on 21 October 2026 to purge DeepSeek AI products and any third‑party services built on them.
- CPPA Opposes Enforcement Moratorium in House Energy & Commerce Budget Reconciliation Bill
On 12 May, the California Privacy Protection Agency wrote to the House Energy & Commerce Committee urging it to drop a 10‑year AI enforcement moratorium.
- California Privacy Protection Agency Announces Joint Investigative Privacy Sweep
On 21 October 2026 the California Privacy Protection Agency, together with the attorneys general of Colorado and Connecticut, began contacting businesses that have not honored Global Privacy Control opt‑out requests.
Fines and penalties
- Tractor Supply Company — California Privacy Protection Agency$1.4M
- TikTok Information Technologies UK Limited and TikTok Inc — Information Commissioner’s Office£12.7M
- Elderly Aids Ltd — Information Commissioner’s Office£190K
Coming up
- 13 Nov 2026DPDP Rules: consent manager registration and obligations take effect
- 2 Dec 2026The EU AI Act – when does it become enforceable now? (Grace period end for pre‑August systems)
- 7 Dec 2026One year to go for T+1 settlement: the regulatory framework is complete, now let’s make it happen (Mandatory allocations and confirmations requirement)