📬 NicFab Newsletter #39 | September 22, 2026

Privacy, Data Protection, AI & Cybersecurity — weekly review.

In this issue:

🏛️ EDPB 123rd plenary of 17 September: agenda on DSA–GDPR guidelines, AI Act and data protection interplay, and the use of administrative fines alongside other corrective powers

📖 AI Act in a Nutshell, Part 39: Article 43 on conformity assessment — the two routes for Annex III biometric systems, internal control, and substantial modifications

🔴 Garante Privacy Italy: EUR 24,000 fine to the Friuli Centrale health authority for unlawful access to electronic patient records, and EUR 8,000 to ASIS Trento over cameras in swimming pool changing rooms

🏛️ European Commission Communication COM(2026) 680: the EU approach to children's online safety, with five announced initiatives including a Digital Fairness Act and AVMS revision

⚠️ AEPD reports its first notification of a cyberattack executed through an AI agent

📈 European Parliament adopts the resolution on the impact of social media on young people (T10-0313/2026) and consents to the EU–Switzerland PNR agreement

🟢 First AI IPCEI brings together 19 Member States; AI Board holds its ninth meeting on frontier-model incidents, conformity assessments and cyber preparedness

🔍 CJEU, AG Spielmann Opinion in Groupe Canal+ (C-317/25): validity of consent for marketing to 3.9 million people and the CNIL's EUR 600,000 fine

👉 Read the full issue: https://www.nicfab.eu/en/newsletter-issues/2026-09-22-issue-39/?utm_source=telegram&utm_medium=organic-social&utm_campaign=issue-39

📩 Subscribe to the newsletter: https://www.nicfab.eu/en/pages/newsletter/#subscribe-now

#Privacy #GDPR #AIAct #Cybersecurity