PrivacySignal
Enforcement

EU AI Act Enforcement Phase Begins

Wilson Sonsini · · International · Enforcement

The EU AI Act has entered its enforcement phase, marking the transition from rulemaking to active compliance obligations for companies operating AI systems in the European Union. Organizations now face real regulatory scrutiny, not just preparation deadlines.

Why this matters: The rules are no longer theoretical. Companies using AI in the EU now have to answer for how their systems work, what risks they create, and whether they followed the requirements. That includes businesses headquartered far outside Europe. If your product touches EU users, the Act can reach you. The enforcement phase is where paper commitments meet actual consequences. Regulators will be watching which cases they choose to make examples of first.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Related stories

Enforcement
S Schlichter Bogard LLC · · International

Health Data Privacy Lawsuit Against Cigna Brought on Behalf of Plaintiffs Represented by Schlichter Bogard Will Proceed

A health data privacy lawsuit against Cigna will move forward, with plaintiffs represented by the law firm Schlichter Bogard. The case clears an early procedural hurdle, allowing claims about how the insurer handled sensitive health information to be litigated.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals · General readers · Policy

#enforcement#healthcare#privacy Read original →
Enforcement
The Guardian — Privacy · · International

Apple launches legal challenge against UK government demand to access data

The Home Office has made a fresh request for ‘back door’ access to encrypted iCloud data belonging to British users Apple has launched a new legal challenge against a UK government demand to access its customers’ highly encrypted data, a year after the Home Office agreed to abandon its previous request. The US tech company launched the legal complaint last month at the Investigatory Powers Tribunal (IPT), an independent court that has the power to investigate claims that the UK intelligence services have acted unlawfully. Continue reading...

Who should care: Lawyers · Privacy officers · Compliance

#enforcement Read original →
Enforcement
HIPAA Journal · · US Federal

FTC; Utah; California Sue Him & Hers Over Business and Data Sharing Practices

The Federal Trade Commission, along with Utah and California, has filed suit against telehealth company Hims & Hers, alleging unlawful business and data sharing practices. The action marks a coordinated federal-state enforcement effort targeting the San Francisco-based company.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals

#enforcement#healthcare Read original →
Enforcement
HIPAA Journal · · US Federal

CISA Issues Updated Guidance on Minimum Elements of an SBOM

CISA, the FBI, the NSA, and 15 international partners have released updated guidance defining the minimum required elements of a Software Bill of Materials (SBOM), a structured record of the components that make up a software product. The joint guidance builds on earlier frameworks and reflects growing international coordination around software supply chain transparency.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals

#enforcement#healthcare#regulation Read original →
Enforcement
Q qz.com · · International

E.U. activated new powers to fine or restrict AI models from Anthropic, OpenAI, and Google

The European Union has activated enforcement powers under its AI regulatory framework that allow authorities to fine or restrict AI models from major developers including Anthropic, OpenAI, and Google. The move marks a shift from rule-setting to active oversight of general-purpose AI systems operating in the EU market.

Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy

#enforcement#ai Read original →
Enforcement
C CNBC · · International

Anthropic, OpenAI among firms facing new scrutiny under EU AI Act enforcement powers

European regulators are moving to apply enforcement powers under the EU AI Act to major AI developers including Anthropic and OpenAI. The scrutiny marks an early test of how the law's oversight mechanisms will work against some of the most prominent players in the industry.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy

#enforcement#ai-governance#ai Read original →