
OECD flags synthetic data privacy risks as California and Texas push AI disclosure and governance
The OECD published guidance that highlights privacy and quality risks in synthetic data, including susceptibility to re-identification atta…
4 min read
Coverage of AI regulation, EU AI Act enforcement, synthetic data compliance, and governance policy developments.

The OECD published guidance that highlights privacy and quality risks in synthetic data, including susceptibility to re-identification atta…
4 min read

Colorado delayed SB 24-205 (AI Act) enforcement from Feb 1, 2026 to June 30, 2026 after a Polis-led special session. The Nov 5, 2025 brief…

SyntheticDataNews reports 2026 as a turning point as AI moves from pilots to broad deployment. States like IL, CO, and CA are expected to s…
An NYU Stern report says synthetic data is now mainstream in AI training, blurring real vs synthetic and raising trust risks. With new U.S.…
California passed SB 243 and AB 489 to make AI governance enforceable, not voluntary. Ahead of 2026 deadlines, firms must add runtime discl…
WEF says synthetic data is booming for AI, but mixing it with real data raises trust and integrity risks. CFR says 2026 state AI laws (IL,…
Ahead of 2026, orgs are formalizing synthetic data governance and AI oversight amid tighter guidance from EDPB, NIST and the UK FCA. Focus:…
California’s SB 243 and AB 489 make AI guardrails mandatory in 2026, requiring continuous disclosure, self-harm interventions, and real-tim…
SyntheticDataNews.com reports rising governance risks as AI blurs real vs synthetic data, driving trust and systemic-risk concerns. The bri…
California bills SB 243 and AB 489 will require runtime guardrails for conversational AI in 2026. Regulators will judge systems by live pro…
WEF flagged rising synthetic data use and the need for stronger governance as real and synthetic blur. California’s SB 243 and AB 489 push…
NYU Stern warns synthetic data is blurring with real data, risking trust without strong governance. CFR says 2026 will be a turning point a…
Ahead of 2026, states and feds are rolling out AI governance rules affecting synthetic data. CA SB 243/AB 489 mandate runtime controls (mon…
China amended its Cybersecurity Law to explicitly cover AI governance, supply-chain security, and tougher penalties. Over 30 AI security st…
Dec 24, 2025: IBM Software Hub 5.3.0 upgraded its Synthetic Data Generator with unstructured UI, multi-table nodes, and Python automation.…
On Nov 19, 2025 the European Commission proposed a Digital Omnibus to amend GDPR and the AI Act, easing AI training under “legitimate inter…
Oct 2023 SDN Daily Brief: policymakers push comprehensive AI rules, led by the EU’s proposed AI Act. The piece flags urgent governance need…
On Nov. 10, 2025, EPIC and a coalition of privacy experts and former FTC enforcers released a legal guide on how existing U.S. laws address…
On Nov 10, 2025, the European Commission outlined GDPR amendments to ease AI training via new processing exceptions. A formal omnibus packa…
A new paper proposes a legal-ethical framework for governing synthetic data in EU healthcare, focusing on patient profiling. Published Nov…
An arXiv paper (Nov 10, 2025) argues synthetic data can cut AI privacy risk while preserving training utility. It frames synthetic datasets…
On Nov 10, 2025, IEEE published a study on synthetic data’s role in AI privacy and regulatory compliance. It cites use in healthcare/financ…
EU AI Act adopted June 13, 2024 and in force Aug 1, 2024, sets risk-based AI rules tied to personal data protection. It mandates GDPR align…
The European Commission published guidelines clarifying EU AI Act obligations for general-purpose AI (GPAI) model providers. The guidance d…
On Nov 8, 2025, the EU Commission proposed AI Act simplifications: exemptions for procedural AI, a 1-year penalty grace period, and a label…
On Nov 5, 2025, OpenMined updated guidance saying HIPAA allows creating synthetic datasets from PHI if safeguards are used. Properly synthe…
GDIT and AWS detailed a synthetic-data proof-of-concept to train AI fraud detection for government disability claims. Published Nov 5, 2025…
EU AI Act rollout speeds up: GPAI rules apply from Aug 2, 2025; high-risk obligations enforce Aug 2, 2026. Member states are naming enforce…
TrustArc announced Arc, an AI-driven privacy ops platform automating compliance workflows, launching Nov 2025. It targets faster, cheaper G…
UK Upper Tribunal upheld the ICO’s £7.5m GDPR fine against Clearview AI for scraping billions of images for facial recognition. Ruling says…
Synthetic Data News reports synthetic data is gaining traction as a privacy-preserving way to train AI and test software. It mimics real da…
Synthetic data is highlighted as a key PET for organizations working under GDPR and HIPAA. The brief stresses robust governance, validation…
SyntheticDataNews reports AI-generated synthetic data is being used to improve compliance in testing by mimicking real patterns without per…
Synthetic Data News says generative AI is boosting automation and content creation but faces governance pressure. Key risks include privacy…
Generative AI is reshaping data governance from compliance-first to agile, business-driven programs. Focus areas include data discovery, qu…
SyntheticDataNews reports organizations are adopting AI-powered data governance to improve data quality, security, and compliance amid grow…
AWS says strong data governance is essential for generative AI, covering structured and unstructured data. It recommends workflows like cat…
Synthetic data is being adopted as a privacy-compliant alternative to real data for training AI models. It uses pseudonymization and anonym…
KPMG released a report urging stronger data governance as AI and synthetic data adoption grows. It stresses transparency, accountability, a…
Synthetic Data News reports generative AI is boosting data governance by automating ingestion, cleansing, and classification. It also impro…
The EU AI Act sets a broad compliance framework for AI, with strict rules for high-risk systems. It highlights synthetic data as a key tool…
The EU AI Act sets a risk-based framework with strict rules for high-risk AI systems. The article says synthetic data can support complianc…
OneTrust webinar outlined tightening privacy rules and urged orgs to update compliance strategies. Speakers stressed AI governance and auto…
Cloud Security Alliance says the EU AI Act will require synthetic data for training high-risk AI systems once enforced. US states are also…
EU data protection authorities (Article 29 Working Party) said properly anonymized synthetic data is outside GDPR. They also stressed docum…
California updated CPRA rules to exempt properly generated synthetic data from personal information requirements. The exemption hinges on p…
EU AI Act guidelines require organizations using synthetic data for AI training to disclose generation methods and quality metrics by Janua…
The European Commission finalized guidance for the EU AI Act’s general-purpose AI (GPAI) rules, including scope guidelines, a voluntary cod…