🎙️ Episode 32 is live — The Wall Hits This Weekend
~11 min. August's regulatory wall is now three days out — and no longer one wall but a cluster of hard gates across five jurisdictions. This week's episode walks the deadlines that bind this weekend and the three new laws that just landed.
Listen: on the web · direct MP3 · Apple Podcasts
Top 5 stories
EU AI Act Article 50 + GPAI fines (2 Aug). Transparency duties for interactive, generative, deepfake and biometric systems apply, and the Commission's power to fine general-purpose AI providers up to €15M or 3% of worldwide turnover switches on.
California Delete Act DROP duty binds (1 Aug). Registered data brokers must run a 45-day pull-match-delete-report cycle including inferences — $200/day per unhandled deletion request.
Germany BSI NIS2 registration expectation (31 Jul). §65 BSIG fines reach €500,000 plus management personal liability.
Ireland enacts its AI Act law. Act No. 31 of 2026 (signed 21 July) establishes the AI Office of Ireland nine days before the AI Act applies.
FedRAMP 20x Class A opens (3 Aug). With Ready retired 28 July, Class A — no agency sponsor, assessed against 25 rules with a current SOC 2 Type II — is the first on-ramp under CR26.
Compliance action items
31 Jul — Complete BSI NIS2 registration for German in-scope entities; document management-body sign-off.
1 Aug — Stand up the DROP 45-day deletion cycle for registered California data brokers.
1 Aug — Build the Connecticut CTDPA profiling impact assessment (SB 1295).
2 Aug — Ship EU AI Act Article 50 disclosures and marking.
3 Aug — Decide your FedRAMP 20x pipeline (Class A now, or Class B/C by 31 Aug).
Resources
All episodes & RSS: cybereyeq.github.io/podcast. Questions or corrections: [email protected]. Compiled from primary regulatory sources for information only; not legal advice.