On September 21, 2026 Ireland's Data Protection Commission fined Google Ireland €403 million under GDPR Articles 5, 6, 12 and 13 over location data in Web & App Activity, Location History and Location Accuracy from May 25, 2018 to February 4, 2020, and ordered compliance within six months.
On September 16, 2026 Apple announced an alternative App Tracking Transparency prompt for the EU from iOS 27.2: a full-page sheet, Markdown text, an Additional Information button and a re-prompt after one year. It is the only prompt for apps in Germany, France, Italy, Poland and Romania.
Italy's Garante fined Banco Bilbao Vizcaya Argentaria's Italian branch €5,508,000 in a decision of September 3, 2026, announced September 11. The customer had switched off commercial notifications in the BBVA app; at least ten more arrived between October 2025 and May 2026.
EU AI Act Article 50 applies from August 2, 2026. A chatbot, AI companion or AI agent in the EU must tell each user at the first interaction that it is an AI unless that is obvious, and generative AI outputs must carry a machine-readable mark. Commission guidelines of July 20 set out what counts.
Italy's Garante fined Character Technologies, Inc. €158,000 in a decision of July 3, 2026, announced July 9. It found five GDPR infringements, including age verification failures from April 2024 to April 2025, and ordered fixes to the age gate, cooling-off period and minors' default profiles.