The NFL and the attorneys general of 39 states and the District of Columbia have filed briefs urging the US Supreme Court to hear New Jersey's petition against Kalshi, and with it the question of whether a prediction market is gambling. For prediction markets in Europe that question has already been answered, by national regulators acting on their own authority, and no ruling in Washington will reverse the answer.
The new tracking pixel rules adopted by the Italian data protection authority become binding on 29 October 2026, requiring prior consent for the invisible images that report when a marketing email is opened, and companies that have not rebuilt their consent, withdrawal and identifier design by that date will be exposed to an authority that can verify the breach from outside the company, simply by receiving one of their emails.
Italian AI Act enforcement now has a complete institutional machine behind it, because the second implementing law that Italy published on 8 October 2026 in the Italian Official Journal designates the authorities that will inspect and sanction, fixes the level of the fines, opens a national regulatory sandbox and restricts the use of artificial intelligence in decisions affecting employees.
The Italian Administrative Supreme Court, the Consiglio di Stato, has changed the regulatory framework for gambling top-up shops in Italy, known as Punti Vendita Ricariche or PVRs.
When your own company’s AI agent is hacked, who is liable for what happens next? This is a question I expect to hear much more often as companies give AI agents access to internal systems, business applications, customer data and, increasingly, the ability to take actions without a human approving every step.
Gambling advertising in Italy remains one of the most closely regulated areas of the country's gambling market. The recent approval of the so-called Decree Accise by the Italian Senate has brought the issue back into focus, particularly because Parliament considered, and rejected, proposals that would have extended the rules to a much wider range of promotional activities.
A data breach caused by an AI agent has now been notified for the first time to a European data protection authority, with the Spanish AEPD receiving the first notification of a personal data breach allegedly carried out using an AI agent.
AI criminal liability is no longer a question of how much a fine would cost, it is a question of who signs off on a system and what happens to that person, and to the company, if the system causes harm.
GDPR data subject rights are becoming a significant enforcement risk for companies, even a single complaint can lead to large fines if it reveals weaknesses in the way personal data is managed across different systems, teams and business processes.
