🇵🇱 Poland updated DDoS guidance for ISPs: 📡 Monitor traffic; tailor filtering and rate limits 🧭 Prepare continuity plans and independent network access 🚨 Report incidents through required channels bit.ly/4zeljT2

🇨🇦 Loblaw committed to notify people affected by a cyberattack, assess safeguards, and report progress to Canada’s OPC. The letter isn’t a liability admission or PIPEDA finding; the inquiry remains open. bit.ly/4zRAd1d

🇸🇮 Slovenia’s IP treats outdoor storage as workplaces when staff work there. 📹 Cameras only if necessary, with no less-invasive option 📝 Document grounds before use 📣 Notify staff; consult worker reps bit.ly/4z7D71W

⚠️ Texas AG sued OpenAI, alleging deceptive AI practices and failures to protect children, including inadequate age checks and risk disclosures. The AG seeks injunctions and civil penalties. bit.ly/4igRVnM

🍁 Canada’s OPC’s AI transparency submission calls for clear information on: 🤖 AI-generated content and interactions 🧩 Systems and incidents 🕵️ AI agents bit.ly/4jGDwUn

🇪🇺 Council’s proposed GDPR Article 88bis would allow AI data processing on legitimate-interest grounds, with safeguards. noyb warns of an advantage for major tech developers. Trilogues are still ahead. bit.ly/4iGcWtl

⚖️ A New Mexico court ordered Meta to pay $25B over deceptive data practices linked to Cambridge Analytica. The judgment cites 43.9M state-law violations, with interest accruing at 15% annually. bit.ly/4dWzXFL

🇨🇦 Canada’s OPC launched a Children’s Privacy Code. 👪 Parental consent under 13 ⚙️ Privacy by default 🚫 No commercial profiling or AI decisions for minors 💬 Comments open until Jan. 20, 2027 bit.ly/4z3QH6l

🇪🇺 EU Council agreed its negotiating position on the Digital Omnibus proposal. It would clarify GDPR, AI data-processing, cookie, and incident-reporting rules. Final law is still pending. bit.ly/4jD1EqP

🇨🇳 China’s CAC launched recognition for platforms influential among minors. Platforms with 10M+ registered or 1M+ active minor users must submit applications and self-assessments within 20 working days. bit.ly/4zF6OHw

🇧🇷 Brazil’s ANPD gave Meta five business days to explain account suspensions and content removals across its platforms. It cited unclear criteria, weak explanations, and improper blocks under Brazilian rules. bit.ly/47y5kmA

🇸🇪 Sweden’s PTS supports the proposed EU Cloud and AI Act’s capacity goals. ⚠️ It warns of higher costs and urges market analysis plus recognition of domestic cloud services. bit.ly/3U5q5Ty

🧬 HHS reached a $700K HIPAA settlement with Ambry Genetics after phishing exposed PHI of 225,370 people. The two-year plan covers risk analysis, access controls, policy updates, and workforce training. bit.ly/4BhVzGG

⚖️ California AG Rob Bonta secured a $6M settlement with Chrome Holding over the 23andMe breach and genetic-record transfers. The deal preserves consumer rights and restricts data handling for five years. bit.ly/4itwrFs

🇸🇪 Sweden’s PTS backed the proposed EU Cloud and AI Development Act’s goals but warned of higher costs for companies and public authorities. It urged market analysis and recognition of domestic cloud services. bit.ly/4zzWAbi

Missouri AG Catherine Hanaway is investigating TikTok’s impact on children, including its algorithms, recommendations, and retention strategies. Read on: dataguidance.com/news/missou…

🔬 The European Commission updated the ERA Living Guidelines for generative AI in research, adding guidance on agentic AI, peer review, and funding evaluations. Accountability and oversight remain central. Check it out: dataguidance.com/news/eu-com…

Romania’s ANSPDCP fined MYCONNECTOR PLATFORM RON 31,451 after a cyberattack exposed personal data on a test server using real data. 🧪 Companies should use fictitious data in testing environments to prevent similar breaches. Learn more: bit.ly/3UAuSMP

🇳🇴 Norway’s Datatilsynet says AI minute-takers can be used in child welfare services under GDPR and the Child Welfare Act, but trust, transparency, data minimization, and prompt deletion are essential. Check it out: dataguidance.com/news/norway…

🇩🇪 Germany’s Bundestag adopted the EU Cyber Resilience Act bill. The BSI will oversee market surveillance and support businesses as rules roll out; remaining provisions take effect Dec. 11, 2027. Read on: dataguidance.com/news/german…