What is the interplay between the proposed EU Kids Act and the AI Act?
12 October 26
Elisar Bashir
This Cullen International report examines the interplay between the proposed Kids Act and the AI Act, looking into the material scope of both regulatory instruments, the child-specific obligations on providers of AI systems, and the enforcement of the proposed Kids Act by competent authorities designated under the AI Act.
Canada proposes new privacy bill
12 October 26
Carolina Limbatto
The Canadian Government presented Bill C-36 to update the current privacy framework applicable to private entities. The proposed Protecting Privacy and Consumer Data Act would expressly recognise privacy as a fundamental right while preserving organisations’ need to process data for appropriate purposes. The bill passed its first reading in the House of Commons in June 2026 but needs to pass the third reading stages in both the Commons and in the Senate before approval.
Canada enacts new cybersecurity law
12 October 26
Carolina Limbatto
Canadian Bill C-8, the Act Respecting Cyber Security, received Royal Assent in June 2026. The act strengthened federal powers over telecoms security and created a critical cyber systems framework for federally regulated sectors. The legislation amends the Telecommunications Act and approved the Critical Cyber Systems Protection Act (CCSPA), which established cybersecurity obligations for designated operators in federally regulated critical sectors. The CCSPA is not yet in force and will be implemented in phases.
EU Digital & Media Weekly Report
11 October 26
Marianna Mattera
This edition features a piece of news about the rapporteur’s presentation of the draft report on the proposed Cybersecurity Act 2 to the members of the European Parliament (MEPs) lead Industry, Research and Energy (ITRE) committee. It also lists events taking place this week.
Shadow rapporteurs of EPP and Renew political groups strongly welcome draft report on CSA2 proposal
08 October 26
Javier Huerta Bravo
While the draft report on the proposed Cybersecurity Act 2, presented by Markéta Gregorová (Greens, Czechia), received broad support from shadow rapporteurs of other political groups, they remain divided on key aspects such as whether European cybersecurity certification schemes should become mandatory. Despina Spanou (European Commission) said that measures restricting high-risk suppliers should not destabilise the markets and should be accompanied by support measures. "We are not going to leave our markets hanging without suppliers", she added.
Argentina: AI regulation remains fragmented as Congress considers multiple proposals
05 October 26
Carolina Limbatto
Argentina has no comprehensive AI legislation applicable to the private sector, although more than 45 AI-related bills have been proposed in Congress. Regulation is instead developing through guidelines for public-sector AI use and risk management, transparency, data protection, education and security initiatives.