Data Bytes 67: Your EMEA Data Privacy Update for July 2026

According to Ashurst Perkins Coie, the UAE Artificial Intelligence and Data Authority was formally established on 14 June 2026[1]. The firm reports that the body brings together three entities, including the UAE Data Office (nominally responsible for enforcing the on-shore data protection law ("PDPL"))[1].The firm says that until now, the UAE has not had an active data protection regulator on-shore[1]. It adds that the long-awaited Executive Regulations needed to operationalise the PDPL remain pending[1].Ashurst Perkins Coie reports that on 15 June 2026, the UK government announced that social media platforms will be banned from offering services to under-16s[1]. According to the firm, the ban will cover platforms such as Snapchat, TikTok, YouTube, Instagram, Facebook and X[1], but messaging services such as WhatsApp and Signal[1] are not expected to be included.The firm writes that on 15 July 2026, the government stated that these protections for 16 and 17 year-olds would include overnight curfews from midnight to 6am on social media apps[1]. It also reports that under-18s are also expected to be barred from using AI "romantic companion" services[1].According to the update, the government intends to bring regulations to Parliament before the end of 2026, with protections expected to come into force in spring 2027[1].In its next edition, Data Bytes 68, the firm reports that after the EDPB's consultation on a new data breach notification template closed on 5 August, Insurance Europe called the template excessively lengthy and containing questions that go beyond GDPR notification requirements[2].