DSR update. The new rules of AI oversight and third-party risk
By Sypher | Published in News - October 12, 2026
Welcome to #SypherPrivacyTalks - your data protection, governance and compliance weekly roundup. Bringing you the top stories of the week.
DSARs and the Digital Omnibus: What the leaked draft reveals
mccannfitzgerald.com • 7 min read
☝️ The latest Digital Omnibus draft clarifies when controllers can reject Data Subject Access Request (DSARs) based on abusive intent. However, it falls short of the broader reforms that many businesses had anticipated… read more
New product liability: What providers of digital business models should consider now
🤖 New legislation in Germany proposes to bring software and AI systems within the remit of strict product liability regimes. This would increase the governance, documentation, cybersecurity and lifecycle oversight expectations for technology providers.… read more
California enacts over two dozen key privacy and AI bills into law in 2026 legislative session
🌎 European companies serving US consumers should keep an eye on the latest privacy and AI laws in California, as these introduce new requirements relating to children’s privacy, AI governance, automated decision-making, and consumer rights… read more
Final EBA Guidelines on the sound management of third-party risk: What financial entities need to know
🏛️ The EBA extends third-party risk rules beyond outsourcing. The new guidelines mean that governance, monitoring and contractual requirements now apply to a wider range of non-ICT service providers, reinforcing alignment with DORA… read more
UK: Agentic AI call for evidence
📢 The ICO has launched a call for evidence on agentic AI. UK organisations deploying AI agents may need to strengthen their Data Protection Impact Assessments (DPIAs), governance frameworks and human oversight. Submissions to the ICO are open until 20 November… read more
--
Get connected with us on LinkedIn or by subscribing to our weekly newsletter. We do our best to select the most interesting and relevant content in our field and deliver it to you in a bite-sized format, so you can stay up to date on topics such as Privacy Management & Compliance.
