Tech Regulation · 26 Oct 2026
EU countries agree position on simplifying GDPR, cookie and incident-reporting rules
What happened. EU member states agreed their negotiating position on the Digital Omnibus, which keeps the GDPR definition of personal data, clarifies pseudonymisation, adds cookie-consent exemptions and proposes a single entry point for reporting cyber and data incidents. Talks with Parliament start once it adopts its position.
Why it matters. If adopted, the changes could reduce duplicate incident reports and cookie-banner work, and extend breach-notification deadlines. Compliance, security and data teams should follow the negotiations, since the final rules will shape reporting processes, AI data use and privacy programmes.
Source: IAPP ↗
Consumer Tech · 26 Oct 2026
EU widens exemptions from user-replaceable battery rules to wearables and other devices
What happened. The European Commission published Delegated Regulation (EU) 2026/1770, which adds wearables and other products to the list of devices whose portable batteries do not have to be removable and replaceable by end users under the EU Batteries Regulation.
Why it matters. Device makers selling in the EU should check whether their products fall under the new exemptions before finalising designs, since battery replaceability affects engineering, sealing, repair services and cost. Retailers and corporate buyers should also adjust their repairability expectations.
Source: EU Law Live ↗
Europe Tech · 26 Oct 2026
Swedish legal AI company Legora raises $550 million at an $8.8 billion valuation
What happened. Legora, a Swedish startup that automates work for legal professionals, raised a $550 million Series E round led by Atreides Management at an $8.8 billion valuation. It says annual recurring revenue now exceeds $200 million and plans to expand further in North America.
Why it matters. A European company is among the best-funded players in AI for professional services, a sign that specialised, workflow-focused AI tools attract large investment. Legal and compliance leaders should assess such tools on data handling, confidentiality and integration with existing systems.
Source: TechCrunch ↗
US Tech · 26 Oct 2026
FCC blocks first devices because of a Huawei-linked camera chip inside them
What happened. The US Federal Communications Commission (FCC) used, for the first time, a power it gave itself on 13 October to block devices because of a component: it rejected two gadgets containing a camera chip made by a Huawei subsidiary, a company on its national-security list.
Why it matters. US market access now depends on every chip inside a product, not just the brand on the box. Makers and buyers of cameras and other connected devices should map component origins in their supply chains and plan for certification delays or redesigns.
Source: The Verge ↗
Retail Grocery · 26 Oct 2026
Kroger plans in-house fulfilment, automation and AI in three-year turnaround
What happened. At its investor day, Kroger set a plan to 2029 targeting $500 million in additional e-commerce earnings (EBITDA, excluding media), more order fulfilment inside its own stores, digital shelf labels, AI and robotics, and a $5 billion investment in lower prices funded by cost cuts.
Why it matters. The largest US supermarket operator is betting that store-based fulfilment and automation can make online grocery profitable. For grocers, competition is moving to delivery speed, fresh quality and lower costs, all of which need investment in store systems and supply-chain technology.
Source: Grocery Dive ↗
Tech in Retail · 26 Oct 2026
Walmart sets rules and a dedicated gateway for AI agents shopping for customers
What happened. Walmart announced agent profiles that let customers approve each purchase or set spending limits, a beta gateway for AI agents based on the Model Context Protocol, and terms that bar agents from seeing card details or acting beyond the shopper's intent.
Why it matters. Retailers now need a deliberate position on AI agents: block them or offer controlled access. Walmart's model shows the building blocks, including customer consent, spending controls, minimal data sharing and returns rules, which shape architecture, fraud prevention and privacy decisions.
Source: TechCrunch ↗
Banking Tech · 26 Oct 2026
UK regulator proposes cheaper, wider access to iPhone contactless payments
What happened. The UK Competition and Markets Authority proposed requiring Apple to open iPhone near field communication (NFC) access through both main contactless standards, on fair terms and with fees expected to be substantially lower than today. The consultation runs until 17 November 2026.
Why it matters. Banks and fintechs could offer their own tap-to-pay wallets on iPhone in the UK without relying on Apple Pay, as is already possible in the EU. Payment leaders should reassess their digital wallet strategy, partner fees and security approach.
Source: UK Competition and Markets Authority ↗
Health Tech · 26 Oct 2026
Quest Diagnostics confirms breach of patient data in its Quanum lab ordering system
What happened. Quest Diagnostics told US regulators it found unauthorised access on 21 October to Quanum, a system clinicians use to order lab tests and view results, and that some patient records were accessed. The scope is still under investigation and the system has been restored.
Why it matters. Shared platforms between labs, clinics and hospitals concentrate sensitive health data, so one breach reaches many organisations. Healthcare leaders should review third-party access, credential resets and notification duties for partner systems, and test how they would operate while a supplier platform is paused.
Source: TechCrunch ↗
AI · 26 Oct 2026
OpenAI models come to Google Cloud, now offered by all three major clouds
What happened. OpenAI and Google Cloud announced that OpenAI's latest models and the Codex coding agent are coming to Google's Model Garden, starting as a private preview with general availability planned within weeks. OpenAI models are now offered by all three major cloud providers.
Why it matters. Companies already committed to Google Cloud can use OpenAI models through their existing contracts, billing and governance controls, without a separate vendor agreement. That widens model choice, reduces lock-in risk and makes multi-model strategies easier to procure and audit.
Source: TechTarget ↗
Cybersecurity · 26 Oct 2026
Critical PHP flaws allow remote takeover of web servers; patches released
What happened. PHP fixed two critical flaws, found by Wiz Research with help from AI models, that let unauthenticated attackers run code on servers using versions 5.4 to 8.5.11. Patched releases are 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and a public proof of concept exists.
Why it matters. PHP underpins WordPress, Drupal and many internal and vendor applications, so exposure is broad. Teams should inventory PHP across servers, containers and appliances, patch internet-facing systems first, and plan upgrades from versions 8.1 and older, which get no official fix.
Source: Canadian Centre for Cyber Security ↗
Briefings are selected and written with AI assistance from the linked sources and published automatically. Always read the original before acting on it.