Veeam Completes Acquisition of Securiti AI to Create the Industry’s First Trusted Data Platform for Accelerating Safe AI at Scale

View

Global AI Regulations Roundup: Top Stories of July 2025

Watch: July's AI Pulse - All Major Highlights

A quick overview of global AI headlines you cannot afford to miss.

Contributors

Yasir Nawaz

Digital Content Producer at Securiti

Rohma Fatima Qayyum

Associate Data Privacy Analyst at Securiti

Muhammad Ismail

Assoc. Data Privacy Analyst at Securiti

Aamina Shekha

Associate Data Privacy Analyst at Securiti

Published August 4, 2025 / Updated November 19, 2025

Editorial Note

From Principles to Practical Enforcement: AI Regulations Accelerates

July marked a turning point for global AI governance, with jurisdictions across the world translating principles into practice. The U.S. saw a flurry of state-level actions, including algorithmic pricing disclosures and anti-discrimination rules in employment. Europe pushed ahead with GPAI obligations under the AI Act, issuing templates, service desks, and voluntary codes to guide compliance. In Asia, Singapore and China unveiled strategic initiatives, while Hong Kong called for stronger GenAI governance. New Zealand emphasized trust-based innovation, and Germany introduced a rigorous AI training data framework. As implementation deadlines loom, regulators continue to tighten oversight- setting the tone for a pivotal second half of 2025 in responsible AI governance.

North & South America Jurisdiction

1. New York A3008 Banning Undisclosed Algorithmic Pricing Comes Into Effect

July 8, 2025
New York

Effective July 8, 2025, New York’s Assembly Bill A3008 prohibits undisclosed personalized algorithmic pricing. The law, signed by Governor Kathy Hochul in May, requires businesses to clearly disclose when a price is set using a consumer’s personal data. Items priced this way must include the notice:

"THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL DATA." 

Businesses operating in New York must ensure compliance to avoid significant penalties.

Read More.

2. US Senate Strips AI Moratorium From One Big Beautiful Bill Act

July 21, 2025
United States

On July 1, 2025, the US Senate removed the AI moratorium provisions from the One Big Beautiful Bill Act, which would have blocked state-level AI laws for the next 10 years. The proposed moratorium aimed to pause over 1,000 AI-related bills across the U.S., potentially easing compliance burdens for businesses.

With its removal, state-level AI regulations remain active, and businesses developing or using AI in the U.S. must ensure they comply with applicable state laws to avoid enforcement and penalties.

Read More.

3. California Civil Rights Council Announces Approval of New AI Protection Regulations

July 1, 2025
California

The California Civil Rights Council has announced final approval of new regulations aimed at preventing employment discrimination from the use of AI and automated decision systems. The rules will take effect on October 1, 2025, and will apply to businesses using AI in hiring or employment decisions.

Organizations must review their practices to ensure compliance with the new standards.

Read More.

Europe & Africa Jurisdiction

4. EU Issues Template for Public Disclosure of GPAI Training Data

July 24, 2025

The European Commission released an Explanatory Notice and Template to help general-purpose AI (GPAI) model providers comply with Article 53(1)(d) of the EU AI Act. Starting August 2, 2025, all GPAI providers, including open-source developers, must publish a public summary describing their training data.

The template sets a baseline for what information must be shared, reinforcing transparency and harmonized compliance across the EU.

Read More.

5. European Commission Issues Guidelines for GPAI Model Providers Under AI Act

July 18, 2025

The European Commission has published its guidelines for providers of general-purpose AI (GPAI) models, offering further clarity on their obligations under the EU AI Act. The guidelines complement the recently published GPAI Code of Practice and help define when a model qualifies as GPAI or GPAI with systemic risk. They also clarify the scope of responsibilities under Chapter V of the AI Act, which takes effect on August 2, 2025. While not legally binding, these guidelines reflect the Commission’s interpretation of the law and will inform future enforcement.

Read More.

6. The European Commission Published the Final Draft of the GPAI Code Of Practice for GPAI Model Providers

July 10, 2025

The European Commission has released the final draft of the GPAI Code of Practice, a voluntary code supporting compliance with the AI Act's GPAI obligations. The Code offers detailed guidance on three key areas: transparency, including standardized technical documentation through a Model Documentation Form covering training data, energy use, and collection methods; copyright, with steps for creating policies aligned with Article 53 obligations; and safety and security, outlining advanced practices such as risk modeling, red-teaming, and adversarial testing for GPAI systems with systemic risk.

The Code awaits formal approval via an implementing act, ahead of the August 2, 2025, compliance deadline. Voluntary adherence provides a clear path to demonstrating compliance and may ease regulatory burdens.

Read More.

7. Federal Network Agency in Germany Launches AI Service Desk for AI Act Compliance Support

July 3, 2025
Germany

The Federal Network Agency (Bundesnetzagentur) in Germany has announced the launch of its AI service desk to help organizations understand and comply with the EU AI Act. The service includes an interactive compliance compass, which helps assess whether AI systems fall under the Act’s scope, including transparency duties and high-risk classifications. It also features FAQs and practical guidance, offering a valuable support resource for businesses navigating upcoming regulatory obligations.

Read More.

8. The Portuguese Agency for Administrative Modernization Publishes Guide for AI

July 1, 2025
Portugal

The Portuguese Agency for Administrative Modernization (AMA) has published its Guide for AI aimed at public administration, accompanied by an ethical risk evaluation tool. The guide promotes responsible AI that is transparent, robust, fair, inclusive, and sustainable. It emphasizes the need for pre-implementation testing, ongoing monitoring, and mechanisms to prevent bias.

While designed for the public sector, private organizations are encouraged to use it as a reference for ethical AI deployment.

Read More.

9. Germany's Federal Office for Information Security (BSI) Releases Assessment Framework for AI Training Data Quality

July 1, 2025
Germany

Germany's Federal Office for Information Security (BSI) has released QUAIDAL (Quality criteria for training data in the AI lifecycle). It is a comprehensive assessment framework that ensures training data quality is appropriate for AI systems and in line with AI Act requirements. It relies on ten central quality criteria, which are divided into four levels, i.e., abstract criteria, concrete data components, operational measures, and associated metrics and methods, with 143 total metrics and methods enabling detailed assessment.

The framework offers AI developers a practical, standards-based approach to ensure their training data is accurate, reliable, and legally compliant throughout the AI lifecycle.

Read More.

Asia Jurisdiction

10. Hong Kong PCPD Calls for Stronger AI Governance Amid Rising Risks

July 10, 2025
Hong Kong

The Privacy Commissioner for Personal Data has urged AI governance in the wake of rising privacy concerns after a survey by the Hong Kong PCPD revealed nearly 70% of enterprises have not made appropriate disclosures in their AI use. Recommended measures include a checklist on GenAI to guide internal policies.

This renewed push underscores a growing regulatory expectation for enterprises to move beyond awareness and adopt concrete safeguards. The GenAI checklist serves as both a compliance aid and a governance tool, urging organizations to define permissible uses, mitigate data leakage, ensure human oversight, and embed ethical review. As AI tools become more deeply integrated into workplace operations, failure to implement such measures may expose organizations to reputational harm and violations of the Personal Data (Privacy) Ordinance.

Read More.

11. Singapore Launches New AI, PET, and Data Protection Initiatives

July 7, 2025
Singapore

On July 7, 2025, Singapore’s Infocomm Media Development Authority (IMDA) introduced three key initiatives to support trusted AI adoption and stronger data protection. The Global AI Assurance Sandbox was expanded to cover agentic AI and prompt-injection threats, paired with a new safety testing kit for LLMs. A PETs Adoption Guide now helps businesses evaluate and deploy privacy-enhancing technologies. Lastly, the Data Protection Trustmark was updated with streamlined certification and tougher rules for cross-border and third-party data handling.

These efforts reflect Singapore’s commitment to balancing innovation with accountability in its digital economy.

Read More.

12. National AI Strategy introduced in New Zealand

July 8, 2025
New Zealand

The National AI Strategy reinforces a commitment to the OECD AI Principles, aiming to foster responsible AI adoption without introducing new regulatory burdens. It promotes inclusive economic growth, human rights, transparency, and accountability, offering practical guidance for businesses to deploy AI within existing legal frameworks. Emphasizing strong governance, the strategy highlights the role of Privacy Officers, ethical data practices, and human oversight, especially in high-stakes AI use.

By prioritizing risk management and data quality, the strategy supports innovation aligned with public trust and regulatory compliance.

Read more.

13. China Unveils Global AI Governance Action Plan

July 26, 2025
China

At the 2025 World Artificial Intelligence Conference, China introduced its Global AI Governance Action Plan, calling for international collaboration to ensure AI is developed and used in a safe, fair, and inclusive way. The plan highlights the importance of open-source innovation, quality data sharing, and global infrastructure, while supporting ethical standards, risk assessments, and UN-led oversight.

Aligned with the UN’s Pact for the Future, the initiative frames AI as a global public good that requires joint action from governments, industry, and civil society.

Read more.

WHAT'S NEXT:
Key AI Developments to Watch For

Germany Consultation on AI Model Data Protection: Germany’s data protection authority (BfDI) is seeking public input on how to protect personal data used in AI models. The consultation focuses on issues like anonymization, data extraction risks, and how people can exercise their rights. Comments are open until August 10, 2025.

EU AI Act Implementation Without Grace Periods: The European Commission confirmed the AI Act will roll out on schedule, with no grace periods. To support implementation, the Commission is preparing a voluntary code of practice for general-purpose AI, GPAI guidelines, and an AI service desk to help organizations comply.

Norway Drafts AI Act Open for Feedback: Norway has released a draft AI Act that mirrors the EU’s version, naming the Norwegian Communications Authority (Nkom) as the lead regulator. The proposal includes enforcement measures and financial penalties. Public consultation is open until September 30, 2025.

Analyze this article with AI

Prompts open in third-party AI tools.
Join Our Newsletter

Get all the latest information, law updates and more delivered to your inbox



More Stories that May Interest You
Videos
View More
Mitigating OWASP Top 10 for LLM Applications 2025
Generative AI (GenAI) has transformed how enterprises operate, scale, and grow. There’s an AI application for every purpose, from increasing employee productivity to streamlining...
View More
Top 6 DSPM Use Cases
With the advent of Generative AI (GenAI), data has become more dynamic. New data is generated faster than ever, transmitted to various systems, applications,...
View More
Colorado Privacy Act (CPA)
What is the Colorado Privacy Act? The CPA is a comprehensive privacy law signed on July 7, 2021. It established new standards for personal...
View More
Securiti for Copilot in SaaS
Accelerate Copilot Adoption Securely & Confidently Organizations are eager to adopt Microsoft 365 Copilot for increased productivity and efficiency. However, security concerns like data...
View More
Top 10 Considerations for Safely Using Unstructured Data with GenAI
A staggering 90% of an organization's data is unstructured. This data is rapidly being used to fuel GenAI applications like chatbots and AI search....
View More
Gencore AI: Building Safe, Enterprise-grade AI Systems in Minutes
As enterprises adopt generative AI, data and AI teams face numerous hurdles: securely connecting unstructured and structured data sources, maintaining proper controls and governance,...
View More
Navigating CPRA: Key Insights for Businesses
What is CPRA? The California Privacy Rights Act (CPRA) is California's state legislation aimed at protecting residents' digital privacy. It became effective on January...
View More
Navigating the Shift: Transitioning to PCI DSS v4.0
What is PCI DSS? PCI DSS (Payment Card Industry Data Security Standard) is a set of security standards to ensure safe processing, storage, and...
View More
Securing Data+AI : Playbook for Trust, Risk, and Security Management (TRiSM)
AI's growing security risks have 48% of global CISOs alarmed. Join this keynote to learn about a practical playbook for enabling AI Trust, Risk,...
AWS Startup Showcase Cybersecurity Governance With Generative AI View More
AWS Startup Showcase Cybersecurity Governance With Generative AI
Balancing Innovation and Governance with Generative AI Generative AI has the potential to disrupt all aspects of business, with powerful new capabilities. However, with...

Spotlight Talks

Spotlight 50:52
From Data to Deployment: Safeguarding Enterprise AI with Security and Governance
Watch Now View
Spotlight 11:29
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Watch Now View
Spotlight 11:18
Rewiring Real Estate Finance — How Walker & Dunlop Is Giving Its $135B Portfolio a Data-First Refresh
Watch Now View
Spotlight 13:38
Accelerating Miracles — How Sanofi is Embedding AI to Significantly Reduce Drug Development Timelines
Sanofi Thumbnail
Watch Now View
Spotlight 10:35
There’s Been a Material Shift in the Data Center of Gravity
Watch Now View
Spotlight 14:21
AI Governance Is Much More than Technology Risk Mitigation
AI Governance Is Much More than Technology Risk Mitigation
Watch Now View
Spotlight 12:!3
You Can’t Build Pipelines, Warehouses, or AI Platforms Without Business Knowledge
Watch Now View
Spotlight 47:42
Cybersecurity – Where Leaders are Buying, Building, and Partnering
Rehan Jalil
Watch Now View
Spotlight 27:29
Building Safe AI with Databricks and Gencore
Rehan Jalil
Watch Now View
Spotlight 46:02
Building Safe Enterprise AI: A Practical Roadmap
Watch Now View
Latest
View More
DataAI Security: Why Healthcare Organizations Choose Securiti
Discover why healthcare organizations trust Securiti for Data & AI Security. Learn key blockers, five proven advantages, and what safe data innovation makes possible.
View More
The Anthropic Exploit: Welcome to the Era of AI Agent Attacks
Explore the first AI agent attack, why it changes everything, and how DataAI Security pillars like Intelligence, CommandGraph, and Firewalls protect sensitive data.
View More
Aligning Your AI Systems With GDPR: What You Need to Know
Securiti’s latest blog walks you through all the important information and guidance you need to ensure your AI systems are compliant with GDPR requirements.
Network Security: Definition, Challenges, & Best Practices View More
Network Security: Definition, Challenges, & Best Practices
Discover what network security is, how it works, types, benefits, and best practices. Learn why network security is core to having a strong data...
Australia’s Guidance for AI Adoption View More
Australia’s Guidance for AI Adoption
Access the whitepaper to learn about what businesses need to know about Australia’s Guidance for AI Adoption. Discover how Securiti helps ensure compliance.
Montana Privacy Amendment on Notices: What to Change by Oct 1 View More
Montana Privacy Amendment on Notices: What to Change by Oct 1
Download the whitepaper to learn about the Montana Privacy Amendment on Notices and what to change by Oct 1. Learn how Securiti helps.
View More
Solution Brief: Microsoft Purview + Securiti
Extend Microsoft Purview with Securiti to discover, classify, and reduce data & AI risk across hybrid environments with continuous monitoring and automated remediation. Learn...
Top 7 Data & AI Security Trends 2026 View More
Top 7 Data & AI Security Trends 2026
Discover the top 7 Data & AI security trends for 2026. Learn how to secure AI agents, govern data, manage risk, and scale AI...
View More
Navigating HITRUST: A Guide to Certification
Securiti's eBook is a practical guide to HITRUST certification, covering everything from choosing i1 vs r2 and scope systems to managing CAPs & planning...
The DSPM Architect’s Handbook View More
The DSPM Architect’s Handbook: Building an Enterprise-Ready Data+AI Security Program
Get certified in DSPM. Learn to architect a DSPM solution, operationalize data and AI security, apply enterprise best practices, and enable secure AI adoption...
What's
New