Geospatial Policy Scan
Edition 3, Q4 2026
Volume 1, Issue 3. A quarterly publication of the WGIC Policy Development & Advocacy Committee.
Read it. Cite it. Shape what comes next.
Policy status checked through September 30, 2026. Countdowns and "days to go" update automatically from today's date.
Executive summary
Three findings from 90 developments across seven regions this quarter.
- Control of location data is being divided, not simply tightened. Courts and regulators limited how it is collected and obtained, US states and the FTC restricted its sale, and the EU gave users a right of access to the data their products generate.91067681112134
- EU digital obligations are now live. AI Act transparency duties, Cyber Resilience Act reporting and Data Act access by design apply from August and September, often to the same geospatial products.2434
- Drone and space rules are moving in different directions. Security measures tighten in the United States while Europe eases airspace access; space licensing is being reformed in the US and regularized in the UK, UAE and Saudi Arabia.141719212223
Read the full summary
This edition tracks 90 policy, regulatory and standards developments across seven regions, dated June 20 to September 28, 2026, with selected carry-over context and two September 30 additions. Twenty-one are already in force or applying, 34 are classified as laws, regulations or executive actions, and 25 are rated high impact.
Five forces define the quarter. Control of location data is being divided rather than simply tightened. Drone rules are pulling in two directions, with security measures tightening in the United States while Europe eases some airspace access. Space policy combines US licensing reform, the UK's strategic and licensing plans, and UAE regularization of existing licensing requirements. EU digital obligations under the AI Act, the Data Act and the Cyber Resilience Act are now live. And data protection law is spreading and hardening well beyond Europe.
Maps themselves were contested this quarter: the UN General Assembly encouraged equal-area projections7, a US executive order renamed Lake Ontario on federal maps69, Cambodia and Thailand opened UNCLOS conciliation over conflicting boundary charts40, and the Philippines deposited its chart of Bajo de Masinloc with the UN70.
Three spotlights look more closely at location data, drones and space licensing. The compliance clock and watch list set out what falls due next, and several consultations that close in October and November are open to industry input.
Five themes shaping Q4
Location-data rights are shifting.
Limits on collection, limits on sale, and new user access rights, all in one quarter.
Read more
Drone rules pull in two directions.
Security tightens in the United States while Europe opens airspace.
Read more
Space licensing rules are changing.
US licensing reform, a UK strategy, UAE regularization and a Saudi consultation.
Read more
The FCC adopted a new Part 100 licensing framework19 and, on September 30, rules opening more than 1,000 MHz for satellite services20; the UK published a Space Strategy with licensing plans21; the UAE gave operators 90 days to obtain licenses under its existing space law22; and Saudi Arabia is consulting on satellite filings and earth stations23. See Spotlight 3.
EU digital obligations are live.
AI Act transparency, CRA reporting and Data Act access by design now apply.
Read more
AI Act Article 50 transparency duties apply from August 2, subject to a transition to December 2 for marking by generative systems already on the market241, Cyber Resilience Act reporting from September 113 and Data Act access by design from September 124, often touching the same geospatial products.
Data protection is hardening worldwide.
Revenue-based fines and new rules from Vietnam to Ecuador.
Read more
Vietnam introduced revenue-based sanctions for specified unlawful transfers25, Indonesia promulgated its implementing regulation26, South Korea allowed fines of up to 10% of revenue in aggravated cases27, Ecuador prohibited mass, indiscriminate biometric identification in public spaces, subject to an express statutory exception requiring justification and safeguards28, and El Salvador's Assembly approved reforms, with publication pending29.
The quarter location data got harder to collect, sell and obtain
Geospatial policy increasingly concerns the conditions under which location data can be collected, accessed, shared and commercialized. Those conditions shape product design and business models, not just compliance paperwork. This spotlight reads one quarter of developments; it is not a full treatment of location privacy, which is broader and more contested than any single edition can show.
Once location data exists, who is entitled to collect it, keep it, obtain it, sell it, and have access to it? Three strands in the tracker answer in different ways, and together show policy moving in two directions at once.
Read the introduction
For most of the past decade, location-data regulation read as a list: a privacy law here, a consent rule there, an enforcement action somewhere else. This quarter the pieces fit together into something more useful. Across the EU and the United States, courts, regulators and legislatures acted on the same underlying question: once location data exists, who is entitled to collect it, keep it, obtain it, sell it, and have access to it?
Three strands in the tracker answer that question in different ways. Taken one at a time they look like routine privacy measures. Taken together, they show policy moving in two directions at once.
1. Limits on collection and use
Commercial processing, government access and collection in public space are all under scrutiny, through different mechanisms: data protection law, constitutional search rules, and executive and congressional oversight of license plate readers.9106768
On September 21 the Irish Data Protection Commission announced a €403 million fine on Google Ireland over the processing of location data through Web & App Activity, Location History and Location Accuracy, covering 2018 to 2020. The DPC found failures of lawfulness and fairness, transparency, accountability and retention, and ordered Google to bring its processing into compliance within six months. The full decision is still to be published.
Three months earlier, on June 29, the US Supreme Court held in Chatrie v. United States that police obtaining a person's Google Location History is a Fourth Amendment search, and that even two hours of such data counts. The Court did not decide whether the geofence warrant in the case was valid; it sent that question back to the lower court.
Collection in public space came under the same scrutiny. On September 16 Missouri's Governor ordered state agencies and state-funded police using automated license plate readers to delete captured images within 30 days unless tied to an active investigation, a life-safety emergency or a court order, to log every query against a case number or a specific law-enforcement justification, to keep vendors from selling or commercializing the data, and to keep facial recognition out of ALPR systems.67 In Washington, the Senate Judiciary Subcommittee on Crime and Counterterrorism opened an investigation into Flock Safety on August 26, asking how its networked, searchable camera database is retained, shared and secured, and held a hearing on September 23; Flock's written response agreed that a federal framework is needed.68
See the entries: Irish DPC fine on Google (source ↗) · Chatrie v. United States (source ↗) · Missouri EO 26-18 (source ↗) · Senate investigation of Flock (source ↗)
2. Control over sharing and sale
Possessing location data does not automatically confer an unrestricted right to commercialize it, and the limits now differ from state to state.11121334
On June 25 a US federal court entered a stipulated order resolving the FTC's case against location-data broker Kochava. For ten years, Kochava and its subsidiary may not sell, license, share or disclose location data tied to sensitive places such as medical facilities, religious organizations, schools and shelters, unless a consumer with a direct relationship has given express consent for a service they asked for. The order also requires a sensitive-location program and checks that suppliers obtained consent.
States moved from notice-and-opt-out towards limits on sale. Virginia's prohibition on selling consumers' precise geolocation data took effect on July 1. Connecticut's Public Act 26-64 provides that no controller or third party shall sell a consumer's precise geolocation data, defined as location within 1,750 feet, with effect from October 1 (after this edition's September 30 status check). California vetoed AB 1542's proposed restrictions this quarter: on September 27 the Governor vetoed the bill, which would have restricted the sale and sharing of sensitive personal information, a category that includes precise geolocation. Other California privacy and data-broker obligations remain in place.
See the entries: FTC v. Kochava (source ↗) · Virginia SB 338 (source ↗) · Connecticut PA 26-64 (source ↗) · California AB 1542 (source ↗)
3. Access built into products
Firms must consider users' access rights when designing devices and data services, not after they ship.4
Connected products and related services placed on the EU market after September 12, 2026 must be designed so that the data they generate, including relevant metadata, is accessible to the user by default, and directly accessible where relevant and technically feasible (EU Data Act, Articles 3(1) and 50). For GNSS receivers, trackers, connected drones and agricultural sensors, location is often part of that data.
See the entry: EU Data Act access by design (source ↗)
Wider access for users, tighter limits for everyone else
Users of a connected product, whether individuals or organizations, gain a right to access the data it generates. Intermediaries face tighter limits on selling location data, and government access is subject to constitutional limits. Where the data is personal data, access and onward use still require a valid legal basis.41110
Read more
The useful point is not that location data is becoming more regulated. It is that policy is restricting who may obtain and trade location data, while strengthening connected-product users' rights to access the data they generate. The Data Act expands what the user can obtain from a product. Kochava's order and the state sale limits restrict what intermediaries can do with the same kind of data. Chatrie makes government access to location data subject to Fourth Amendment requirements.
France's data protection authority illustrates the fault line in a single sector. Its recommendation on connected vehicles, published on June 30, states that under French law consent is required for most uses of vehicle location data other than a service the user has expressly requested. Under the Data Act, the user of the same connected vehicle, whether a driver or a fleet operator, has a right to access the data it generates; that user is not necessarily the person the data describes, and other uses of any personal data in it must satisfy the applicable legal requirements. Access is widening for product users; everyone else still needs a lawful basis.454
A prior question sits underneath all of this: when is aggregated or de-identified location data still personal data? The European Data Protection Board's draft guidelines on anonymization, open for comment until October 30, set out three criteria to be assessed in context. They are a draft, but they could shape how mobility and location datasets are designed.36
What this means for geospatial organizations
- Map where your location data comes from. The Kochava order requires supplier consent checks. Firms that buy or enrich location data should be able to show how consent was obtained upstream.11
- Treat retention as a design choice. Retention was one of the failures the DPC identified. Default retention periods for location histories deserve the same scrutiny as collection.9
- Plan for state-by-state sale rules in the US. Virginia limits "sale" to exchanges for money; Connecticut's ban also binds third parties. Scope varies by state, and California vetoed AB 1542's proposed restrictions; other California obligations remain in place. A single national approach is not yet available.121334
Spotlights 2 and 3
Drone rules pull in two directions
For survey and inspection operators, US equipment costs are rising and site restrictions could tighten, while European airspace access is becoming more structured.
Read the spotlight
In the United States, the quarter's drone measures were mostly about security and supply. Section 232 tariffs took effect on September 3, with a 100% duty on drones over 25 kg, thermal-imaging drones and docks, and 25% on smaller drones14. An interim final rule extended counter-drone detection and mitigation authority to state and local law enforcement15, and the FAA proposed restrictions over fixed sites that could affect mapping and inspection flights16. Part 108, the rule that would create the first routine pathway for flights beyond visual line of sight, has been under White House review since July 105.
Europe moved the other way on access. Austria amended its Aviation Act to enable U-space17; the Netherlands announced that, from November 26, drone pilots will no longer need to contact air traffic control in designated parts of the zones around five civil airports18; and the UK CAA published an airspace concept for scaled beyond-visual-line-of-sight operations66. Brazil and Türkiye also revised their rules on airspace access and pilot authorization3244.
Space policy: licensing reform, strategy and regularization
Operators with payloads or ground segments in several countries should check license terms, grace periods and consultation deadlines country by country.
Read the spotlight
The FCC adopted a Space Modernization Order on July 22 that replaces Part 25 licensing with a new Part 100, with longer license terms and reduced bonding for most operators19. On September 30, just after the window, the FCC adopted rules opening more than 1,000 MHz in the 12.7 GHz and 42 GHz bands for satellite services, with further proposals on Ku-, Ka- and D-band spectrum; the text of the order had not been released at editorial close20. The Office of Space Commerce is piloting a voluntary mission authorization framework for novel in-space activities55.
Elsewhere, the UK's Space Strategy commits £7.8 billion to 2030, including £8 million for the EO DataHub, and plans "collect once" orbital licensing21. The UAE Space Agency gave entities operating in its space sector 90 days from July 27 to obtain licenses under its existing Decree-Law 46/202322, and Saudi Arabia's CST is consulting on satellite filing and earth-station rules until October 1823.
WGIC Perspective
What this quarter's developments mean for the geospatial industry.
- Location data is now a product-design question. Consent checks on suppliers, retention defaults and user access to device data are being decided in how products are built. Geospatial firms should treat them as design requirements, not only compliance paperwork.
- Trust depends on practice, not only design. Privacy is increasingly marketed as a feature while the terms that govern data use sit in the small print. Users want to know how their location data is used, kept and deleted. Geospatial firms should make sure what they say about privacy matches what their products and contracts actually do.
- Fragmented rules carry a real cost. US state-by-state limits on selling location data, and diverging national data laws elsewhere, raise the cost of operating across borders. The industry benefits from interoperable approaches and consistent definitions of precise location data.
- Engage before rules are final. Several consultations close in October and November, including the European Data Protection Board (EDPB) anonymization guidelines. Industry input is most useful while texts are still drafts, and standards bodies are a practical place to contribute.
- Operators need predictable licensing. Drone and space rules are moving in different directions: security measures are tightening in the United States while Europe eases some airspace access. Survey, inspection and Earth observation operators need clear, timely licensing to plan investment.
- Readiness is uneven. Our small reader polls suggest some organizations are unsure whether new rules such as the AI Act apply to them. WGIC plans to keep asking the same question each quarter to track how readiness changes.
The compliance clock
What falls due next. Countdowns are measured from today.
Each dot is a dated item; hover for the item, click to jump to it in the list. The dashed line is today.
Dates already passed
"Add to calendar" downloads an .ics file carrying the item, its tracker reference and any qualification in the wording (for example "subject to", "calculated").
Ecosystem & events: the Q4 2026 horizon
UN-GGIM: Americas, 13th session60
Regional dialogue and technical cooperation on implementing UN-GGIM frameworks across the Americas.
UN-GGIM: Africa, 12th meeting61
Regional committee on geospatial information management in Africa.
SIRGAS Symposium 202662
Annual meeting of the geocentric reference system for the Americas.
Third UN World Geospatial Information Congress63
The global geospatial community's main congress, held every four years.
The Q4 2026 developments
All 90 developments, each with its official source.
Each entry gives what changed, its geospatial relevance, and the official source. "High impact" is the editors' rating of likely consequence for geospatial organizations, not a legal classification.
How to read this tracker
Each entry is one instrument, decision or dated action, verified against the official source shown with it; the 90 are everything that met that test for the window, and nothing unverified is listed. Relevance assessments reflect the editors' interpretation of the cited sources. The status label is derived from each entry's recorded status and describes where an instrument stands (in force, enacted, proposed, in consultation, guidance, court or enforcement action, decision) rather than its legal form. Dates shown are the event recorded for that status; for open opportunities the closing date is shown instead. Relevance is assessed for the geospatial sector as a whole, not for specific products or markets; check applicability for your own. "Open consultations" shows items whose closing date has not yet passed on the day you read this.
Impact is the editors' rating of the likely consequence for geospatial organizations (high, medium, low). It is not a legal classification and does not by itself mean action is required.
Keyboard and tools
Use ↑ ↓ to move between rows and Enter to open one. "Save" adds an entry to your list; "link" copies a direct link; "source" opens the official document.
| Development | Region | Status | Save |
|---|
This edition by the numbers
How these are counted
"in force or applying" counts entries whose tracker status, as checked on September 30, begins In force, Applies or Applicable, plus the one interim final rule, which has legal effect from its effective date. "Engaging AI directly" counts the nine AI-governance entries plus two entries in other domains with AI-specific provisions (Canada Bill C-36 and the EDPB anonymization guidelines). "Laws, regulations or executive actions" is an instrument classification by the editors and includes some measures not yet in force. Impact ratings (high, medium, low) are assigned by the editor on three criteria: whether the measure is binding, how broadly it applies to geospatial or Earth observation organizations, and whether it carries a deadline or enforcement step within about twelve months. AI tools supported the initial classification; every rating was reviewed by the editor.
The quarter in four views
Where the 90 developments sit: by region, instrument, lifecycle stage and domain. The region, lifecycle and domain views are clickable and filter the list; the instrument view is the editor's classification and is shown for reference.
All regions
31 of 90 are laws or regulations already on the books. The other 59 are bills and drafts, guidance, strategies, intergovernmental decisions, court and enforcement actions, standards and executive actions.
Where the 90 developments sit, from proposal to application. Segment width is the share of the edition.
Privacy and location data is the largest domain (27) and carries the most high-impact items; drones, standards, AI and space each account for nine to twelve developments.
| Domain | High | Medium | Low | All |
|---|
Where the developments from the Q3 edition stand now
| From the Q3 edition | Where it stands now (Q4 2026) |
|---|---|
| EU AI Act | Regulation (EU) 2026/1744 in force since July 27. High-risk duties apply from Dec 2, 2027 (Annex III) and Aug 2, 2028 (Annex I); national sandboxes due Aug 2, 2027.1 |
| EC high-risk classification guidelines | Consultation closed July 23; final guidelines not yet published.2 |
| EU Cyber Resilience Act | Reporting obligations applied from September 11, with ENISA's single reporting platform live the same day.3 |
| EU Data Act | Access-by-design obligation applies to connected products placed on the market after September 12.4 |
| FAA Part 108 (BVLOS) | The final-rule package has been under review at the White House Office of Information and Regulatory Affairs since July 10; no final rule had appeared in the Federal Register as of September 25.5 |
| INSPIRE | Council agreed its negotiating position on June 24, keeping data sharing between public authorities and minimum interoperability requirements; Parliament position pending.6 |
| Map Africa | Followed by the UN General Assembly "Correct the Map" resolution on September 4.7 |
| UN-GGIM / 3UNWGIC | 16th session decisions adopted in August; the Third UN World Geospatial Information Congress takes place in Jeddah, November 16 to 19.8 |
Reader poll signals
Two questions asked on WGIC's LinkedIn page this quarter.
Sample sizes are low, so results are treated as reader signals rather than measurements. Poll results reflect reader sentiment and sit outside the policy record.
If the AI Act applies to your products, could you evidence compliance tomorrow?
WGIC LinkedIn company page, open September 1 to 15, 2026; results as captured at close
What it suggests
With so few votes, an even split across all four answers tells us little on its own. The answer worth watching is the last: some respondents were not sure whether the AI Act applies to them at all, weeks after its transparency obligations became applicable. WGIC plans to ask the same question with the same four answers each quarter, so later editions can report a trend.
Who in your organization tracks geospatial regulation?
WGIC LinkedIn company page, opened late September 2026; results as captured at editorial close
What it suggests
Among those who voted, no one named product or engineering. That sits awkwardly with this edition's lead: access by design under the EU Data Act, retention limits and restrictions on selling location data are decided in how products are built, not only in how they are reviewed. Some respondents also said no one is tracking regulation yet.
About the Scan
The Geospatial Policy Scan is a World Geospatial Industry Council (WGIC) initiative, produced quarterly by the WGIC Policy Development & Advocacy Committee. Each edition tracks the policy, regulatory and standards developments shaping the geospatial industry worldwide, so the geospatial community can anticipate change and act early.
Chair's note
Read the Chair's note
The geospatial industry is entering a period in which policy is no longer simply a response to innovation. It is becoming a key force shaping how innovation occurs. Across governments, regulators, and international institutions, the perception of geospatial technologies is shifting. Location intelligence, Earth observation, spatial digital twins, AI-enabled analytics, autonomous systems, and space-based services are increasingly recognized as enablers of economic growth, national resilience, sustainability, and informed decision-making. Policy discussions that once took place at the periphery of our industry now sit at the center of national and international agendas.
For the global geospatial community, this brings both responsibility and opportunity. The responsibility lies in ensuring that technological advancement continues to earn public trust. As policymakers introduce new frameworks governing artificial intelligence, cybersecurity, privacy, digital infrastructure, and data sharing, our industry must demonstrate leadership in transparency, accountability, and ethical innovation. The opportunity lies in treating policy not as a compliance obligation but as a strategic consideration, one that shapes competitiveness, investment, market access, and long-term growth. Organizations that anticipate regulatory change, and contribute their expertise to shaping it, will be better positioned to thrive in an increasingly complex and interconnected world.
The range of developments covered in this quarter's Policy Scan illustrates how interconnected our operating environment has become. Decisions on AI governance, cyber resilience, location data, drones, satellites, and digital sovereignty are no longer isolated policy issues. Together, they are defining the conditions under which geospatial businesses will operate, invest, and grow.
At the World Geospatial Industry Council (WGIC), we believe that constructive engagement between industry, government, academia, and international organizations is essential to effective policy outcomes. Regulation works best when it is informed by practical experience, technical understanding, and a shared commitment to innovation that benefits society. Through our advocacy and policy leadership initiatives, WGIC remains committed to ensuring that the voice of the geospatial industry is represented in these conversations.
I extend my sincere appreciation to the committee members and contributors whose insights and commitment make this publication possible. Their efforts strengthen the industry's collective understanding of a rapidly evolving policy landscape and reinforce WGIC's mission to advance the global geospatial ecosystem through informed advocacy and collaboration.
Together, we have an opportunity to help shape policies that not only govern our industry but also enable its continued contribution to solving some of the world's most pressing challenges.
Prof. Dr. Zaffar Sadiq Mohamed-GhouseChair, WGIC Policy Development & Advocacy Committee
Editor's note
Read the Editor's note
For the first time, this edition introduces a thematic focus: the quarter location data got harder to collect, sell and obtain, and what that means for geospatial organizations. The quarter asked for it. The story was not new rules arriving but rules landing on data that organizations already hold: of the 90 developments tracked, 21 are already in force or applying and 34 are laws, regulations or executive actions, some of them not yet applying. The quarter answered that question from several directions at once. Ireland's regulator fined Google €403 million over location-data processing. The US Supreme Court held in Chatrie that obtaining Location History is a search under the Fourth Amendment. The Kochava order put a ten-year limit on selling sensitive-location data, Virginia's sale ban took effect on July 1 and Connecticut's on October 1, and the EU Data Act began requiring new connected products to give users access to the data they generate. Read together, these are not a privacy story. They decide who may collect, keep, obtain, sell and see location data, and they reach product design, supplier contracts and retention defaults directly.
Beyond location data, the quarter moved in two directions. Drone rules tightened on security in the United States while Europe opened airspace. Space licensing was reformed in the US and regularized in the UK, UAE and Saudi Arabia. EU obligations under the AI Act, the Cyber Resilience Act and the Data Act became live within weeks of each other, often for the same geospatial products. Data protection law hardened well beyond Europe, from Vietnam and South Korea to Ecuador and El Salvador. Several consultations close in October and November; that is where industry input still counts.
A note on method. AI tools supported research, drafting and the initial classification of entries. Every entry, date, status and source was verified by the editor against primary documents, and responsibility for the content rests with the editor. The Committee reviewed the full draft, and the edition is credited to it as a whole.
Use this edition to find what reaches you, and to act before the next deadline rather than after it.
Kuhelee ChandelEditor, WGIC Policy Scan (Associate Director, Research, WGIC)
What did we miss? Send us a lead
What did we miss?
Submissions are leads, not entries: every item is verified against a primary source before it enters the Scan.
Glossary of acronyms
- AI Act
- Regulation (EU) 2024/1689 on artificial intelligence, as amended by the Digital Omnibus on AI (Regulation (EU) 2026/1744)
- ANPD
- Autoridade Nacional de Proteção de Dados, Brazil's data protection authority
- BVLOS
- Beyond visual line of sight (drone operations)
- CAA
- Civil Aviation Authority (United Kingdom)
- CNIL
- Commission nationale de l'informatique et des libertés, France's data protection authority
- CPPA / CalPrivacy
- California Privacy Protection Agency
- CRA
- EU Cyber Resilience Act
- CST
- Communications, Space and Technology Commission, Saudi Arabia
- DPC
- Data Protection Commission, Ireland
- DROP
- Delete Request and Opt-out Platform, California
- EDPB
- European Data Protection Board
- EO
- Earth observation
- FAA
- Federal Aviation Administration, United States
- FCC
- Federal Communications Commission, United States
- FTC
- Federal Trade Commission, United States
- GNSS
- Global navigation satellite systems
- IHO
- International Hydrographic Organization
- INSPIRE
- EU Infrastructure for Spatial Information in Europe (Directive 2007/2/EC)
- LGPD
- Lei Geral de Proteção de Dados, Brazil's data protection law
- LINZ
- Land Information New Zealand
- NUAR
- National Underground Asset Register (United Kingdom)
- OGC
- Open Geospatial Consortium
- OIRA
- Office of Information and Regulatory Affairs, US White House
- SDI
- Spatial data infrastructure
- SIRGAS
- Sistema de Referencia Geocéntrico para las Américas
- TSA
- Transportation Security Administration, United States
- UAS
- Uncrewed aircraft systems (drones)
- UN-GGIM
- UN Committee of Experts on Global Geospatial Information Management
- U-space
- EU framework for managing drone traffic in designated airspace
- 3UNWGIC
- Third UN World Geospatial Information Congress, Jeddah, November 16 to 19, 2026
References
Official sources behind the numbered references in the text. Editorial commentary in this edition is kept separate from the source record. Clicking a reference number anywhere in the text opens the source.
Show all 70 references
- Digital Omnibus on AI: Regulation (EU) 2026/1744 Enters Into Force. eur-lex.europa.eu
- EU AI Act Article 6 High-Risk Classification Guidelines: Consultation Closed, Final Version Pending. ai-act-service-desk.ec.europa.eu
- EU Cyber Resilience Act: Reporting Obligations Apply and ENISA Single Reporting Platform Live (September 11, 2026). enisa.europa.eu
- EU Data Act: By-Design Data Access Obligation for New Connected Products (Article 3(1)). eur-lex.europa.eu
- FAA Part 108 BVLOS Rule: Under OIRA Review, Final Rule Still Pending. reginfo.gov
- Council of the EU press release: Simplification, Council agrees negotiating stance on environmental rules, Jun 24, 2026. consilium.europa.eu
- UN General Assembly resolution 'Correct the Map' (A/80/L.104) on equal-area map projections. news.un.org
- UN-GGIM 16th Session: Decisions on UN-IGIF, Geospatial Information as a Strategic Priority. un.org
- Irish Data Protection Commission Fines Google €403 Million over Processing of Location Data. dataprotection.ie
- Chatrie v. United States, No. 25-112 (US Supreme Court): acquisition of Google Location History is a Fourth Amendment search. supremecourt.gov
- FTC v. Kochava Inc.: Stipulated Order for Injunction (D. Idaho) banning sale of sensitive location data. ftc.gov
- Virginia SB 338 (Acts 2026, Chapter 820): ban on sale of precise geolocation data under the VCDPA takes effect. lis.blob.core.windows.net
- Connecticut Public Act 26-64 (sSB 4): Consumer Privacy Act incl. Ban on Sale of Precise Geolocation Data. cga.ct.gov
- Proclamation 11055: Section 232 tariffs on imports of unmanned aircraft systems and UAS components. federalregister.gov
- DOJ/DHS Interim Final Rule: Counter-UAS Authority for State, Local, Tribal and Territorial Law Enforcement and Correctional Agencies (SAFER SKIES Act). federalregister.gov
- FAA NPRM: Designation-Restrict the Operation of Unmanned Aircraft in Close Proximity to a Fixed Site Facility (Section 2209), comment period extended. federalregister.gov
- Aviation Act (Luftfahrtgesetz) amendment enabling U-space and flat-rate drone liability insurance. parlament.gv.at
- New drone zones in controlled airspace around five Dutch airports (from Nov 26, 2026). rijksoverheid.nl
- FCC Space Modernization Order: New Part 100 Satellite Licensing Framework. fcc.gov
- FCC news release: FCC Takes Action That Brings Thousands of Megahertz of Spectrum into the Marketplace (FCC 26-65), Sep 30, 2026. fcc.gov
- UK Space Strategy (CP 1662) and Technical Delivery Annex (CP 1663). gov.uk
- UAE Space Agency 90-day grace period for space-sector entities to obtain licences/permits under Federal Decree-Law No. 46 of 2023. space.gov.ae
- CST public consultation: Regulations for Satellite Filings and Regulations for the Use of Radio Spectrum by Earth Stations in Space Radio Services. cst.gov.sa
- EU AI Act Article 50: Transparency Guidelines Published and Obligations Applicable. digital-strategy.ec.europa.eu
- Decree No. 330/2026/ND-CP on administrative sanctions for cybersecurity and personal data protection violations. datafiles.chinhphu.vn
- Government Regulation No. 33 of 2026 Implementing the Personal Data Protection Law. ppid.dprd.jatengprov.go.id
- South Korea Amended PIPA in Force: Conditional 10% Fine Ceiling for Aggravated Violations. law.go.kr
- SPDP Resolution SPDP-SPD-2026-0039-R, general rule on processing biometric data (published in Registro Oficial No. 376, Sep 24, 2026). spdp.gob.ec
- El Salvador: reforms to the Personal Data Protection Law passed by the Legislative Assembly. asamblea.gob.sv
- California Delete Act: DROP deletion-processing mandate takes effect; AB 883 (Ch. 507) shortens the cycle to 30 days. leginfo.legislature.ca.gov
- EU Deforestation Regulation: Commission Delegated Regulation (EU) 2026/2102 (product scope) and Implementing Regulation (EU) 2026/1565 (Information System). eur-lex.europa.eu
- DECEA ICA 100-40 'Aeronaves Não Tripuladas e o Acesso ao Espaço Aéreo Brasileiro' (new edition) in force Jul 1, 2026. sislaer.fab.mil.br
- Measures for Network Data Security Risk Assessment (CAC/MIIT/MPS Order No. 24). cac.gov.cn
- California AB 1542 (Sensitive personal information): vetoed by Governor. gov.ca.gov
- Privacy Amendment (Personal Data Protection) Bill 2026: Exposure Draft (Privacy Act 'Tranche 2'). consultations.ag.gov.au
- EDPB Guidelines on Anonymisation and Guidelines on Web Scraping for Generative AI (public consultation). edpb.europa.eu
- Dubai RTA Autonomous Mobility Programme: 4 Million Autonomous Kilometres Milestone. mediaoffice.ae
- NISAR L-Band SAR Data: First Public Release of Calibrated (Provisional) Products. earthdata.nasa.gov
- UN-GGIM Decision 16/106: Geodesy Governance Consultations and VLBI Spectrum Protection for WRC-27. un.org
- PCA press release: PCA Case No. 2026-35, conciliation between the Kingdom of Cambodia and the Kingdom of Thailand. pca-cpa.org
- CalPrivacy Enforcement Order: LocateSmarter, LLC (first combined CCPA and Delete Act action). privacy.ca.gov
- Commission Delegated Regulation (EU) 2026/2102 (EUR-Lex). eur-lex.europa.eu
- Beijing Municipal Regulations on Surveying, Mapping and Geographic Information (北京市测绘地理信息条例). bjrd.gov.cn
- Unmanned Aircraft Systems Instruction (SHT-İHA): revised drone framework published by DGCA (SHGM). web.shgm.gov.tr
- CNIL Recommendation on the use of location data from connected vehicles (Deliberation No. 2026-063). cnil.fr
- LINZ consults on Landonline terms: no third-party search services on Landonline accounts (from Nov 2, 2026). linz.govt.nz
- ANPD public consultation on revision of the Inspection and Administrative Sanctioning Regulation (Resolução CD/ANPD nº 1/2021). gov.br
- EDPB Guidelines on the application of the power to impose administrative fines (public consultation) and final DSA–GDPR interplay guidelines. edpb.europa.eu
- Amendments to the Law on Geodesy and Cartography: public-sector access to state orthophotos and satellite imagery; third-class geodetic points dropped. am.lrv.lt
- NOAA Space-Based Environmental Monitoring IDIQ: 14 commercial satellite data vendors. space.commerce.gov
- IHO adoption of S-100 Phase 2 product specifications S-122, S-123, S-127, S-131 Ed 2.0.0 (CL 49/2026 Rev1). iho.int
- IHO call for approval of S-101 ENC Product Specification Edition 2.1.0 (CL 50/2026). iho.int
- OGC LAZ 1.4 Community Standard published. ogc.org
- Mandatory sales information for property transfers in Landonline (Rating Valuations Regulations amendments), from Oct 1, 2026. linz.govt.nz
- Office of Space Commerce: Space Commerce Certification Mission Authorization Pilot. federalregister.gov
- FCC 26-50: Protecting Against National Security Threats to the Communications Supply Chain Through the Equipment Authorization Program, Federal Register 2026-18535 (effective Oct 13, 2026). federalregister.gov
- TSA notice soliciting representatives for technical roundtables on BVLOS drone security, Federal Register 2026-18124, Sep 4, 2026 (requests due 45 days after publication). public-inspection.federalregister.gov
- DOI call for nominations to the National Geospatial Advisory Committee, Federal Register 2026-18985, Sep 16, 2026. federalregister.gov
- Bill to postpone entry into force of Personal Data Protection Law (Ley 21.719) to Dec 1, 2027 and restructure the Data Protection Agency. economia.gob.cl
- Thirteenth Session of UN-GGIM: Americas (ECLAC event page). cepal.org
- UN-GGIM: Africa, provisional agenda, Addis Ababa (hybrid), Oct 19–23, 2026 (UNECA). uneca.org
- SIRGAS Symposium 2026, Montevideo (SIRGAS). sirgas.ipgh.org
- Third UN World Geospatial Information Congress (UN). un.org
- NASA releases Landsat 10 Spacecraft Request for Proposal. usgs.gov
- OGC Federated Maritime Spatial Data Infrastructure (FMSDI) Phase 6 Pilot. ogc.org
- UK CAA Airspace Architecture Concept of Operations for Scaled BVLOS Operations (CAP3269). caa.co.uk
- Missouri Executive Order 26-18: minimum standards for automated license plate reader technology (Sep 16, 2026). sos.mo.gov
- Senate Judiciary Subcommittee on Crime and Counterterrorism: letter opening investigation of Flock Safety (Aug 26, 2026) and hearing 'Always Watching' (Sep 23, 2026). hawley.senate.gov
- Executive Order 14422, renaming Lake Ontario as Lake America (91 FR 56543, Sep 2, 2026). www.federalregister.gov
- UN DOALOS, Philippines: Maritime Zone Notification M.Z.N.175.2026.LOS of Aug 18, 2026, deposit of the chart 'Bajo de Masinloc and Approach' under UNCLOS Article 16(2). un.org
